Skip to content

Commit 91888d9

Browse files
authored
Merge pull request #16 from cisagov/lineage/skeleton
⚠️ CONFLICT! Lineage pull request for: skeleton
2 parents b6470a8 + 6ab5dba commit 91888d9

25 files changed

+878
-909
lines changed

.config/molecule/config.yml

Lines changed: 236 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,236 @@
1+
---
2+
dependency:
3+
name: galaxy
4+
driver:
5+
name: docker
6+
platforms:
7+
- cgroupns_mode: host
8+
command: /lib/systemd/systemd
9+
image: docker.io/geerlingguy/docker-amazonlinux2023-ansible:latest
10+
name: amazonlinux2023-systemd-amd64
11+
platform: amd64
12+
pre_build_image: true
13+
privileged: true
14+
volumes:
15+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
16+
- cgroupns_mode: host
17+
command: /lib/systemd/systemd
18+
image: docker.io/geerlingguy/docker-amazonlinux2023-ansible:latest
19+
name: amazonlinux2023-systemd-arm64
20+
platform: arm64
21+
pre_build_image: true
22+
privileged: true
23+
volumes:
24+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
25+
# These platforms do not provide systemd-resolved.
26+
# - cgroupns_mode: host
27+
# command: /lib/systemd/systemd
28+
# image: docker.io/geerlingguy/docker-debian10-ansible:latest
29+
# name: debian10-systemd-amd64
30+
# platform: amd64
31+
# pre_build_image: true
32+
# privileged: true
33+
# volumes:
34+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
35+
# - cgroupns_mode: host
36+
# command: /lib/systemd/systemd
37+
# image: docker.io/geerlingguy/docker-debian10-ansible:latest
38+
# name: debian10-systemd-arm64
39+
# platform: arm64
40+
# pre_build_image: true
41+
# privileged: true
42+
# volumes:
43+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
44+
# - cgroupns_mode: host
45+
# command: /lib/systemd/systemd
46+
# image: docker.io/geerlingguy/docker-debian11-ansible:latest
47+
# name: debian11-systemd-amd64
48+
# platform: amd64
49+
# pre_build_image: true
50+
# privileged: true
51+
# volumes:
52+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
53+
# - cgroupns_mode: host
54+
# command: /lib/systemd/systemd
55+
# image: docker.io/geerlingguy/docker-debian11-ansible:latest
56+
# name: debian11-systemd-arm64
57+
# platform: arm64
58+
# pre_build_image: true
59+
# privileged: true
60+
# volumes:
61+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
62+
- cgroupns_mode: host
63+
command: /lib/systemd/systemd
64+
image: docker.io/geerlingguy/docker-debian12-ansible:latest
65+
name: debian12-systemd-amd64
66+
platform: amd64
67+
pre_build_image: true
68+
privileged: true
69+
volumes:
70+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
71+
- cgroupns_mode: host
72+
command: /lib/systemd/systemd
73+
image: docker.io/geerlingguy/docker-debian12-ansible:latest
74+
name: debian12-systemd-arm64
75+
platform: arm64
76+
pre_build_image: true
77+
privileged: true
78+
volumes:
79+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
80+
- cgroupns_mode: host
81+
command: /lib/systemd/systemd
82+
image: docker.io/cisagov/docker-debian13-ansible:latest
83+
name: debian13-systemd-amd64
84+
platform: amd64
85+
pre_build_image: true
86+
privileged: true
87+
volumes:
88+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
89+
- cgroupns_mode: host
90+
command: /lib/systemd/systemd
91+
image: docker.io/cisagov/docker-debian13-ansible:latest
92+
name: debian13-systemd-arm64
93+
platform: arm64
94+
pre_build_image: true
95+
privileged: true
96+
volumes:
97+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
98+
- cgroupns_mode: host
99+
command: /lib/systemd/systemd
100+
image: docker.io/cisagov/docker-kali-ansible:latest
101+
name: kali-systemd-amd64
102+
platform: amd64
103+
pre_build_image: true
104+
privileged: true
105+
volumes:
106+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
107+
- cgroupns_mode: host
108+
command: /lib/systemd/systemd
109+
image: docker.io/cisagov/docker-kali-ansible:latest
110+
name: kali-systemd-arm64
111+
platform: arm64
112+
pre_build_image: true
113+
privileged: true
114+
volumes:
115+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
116+
- cgroupns_mode: host
117+
command: /lib/systemd/systemd
118+
image: docker.io/geerlingguy/docker-fedora39-ansible:latest
119+
name: fedora39-systemd-amd64
120+
platform: amd64
121+
pre_build_image: true
122+
privileged: true
123+
volumes:
124+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
125+
- cgroupns_mode: host
126+
command: /lib/systemd/systemd
127+
image: docker.io/geerlingguy/docker-fedora39-ansible:latest
128+
name: fedora39-systemd-arm64
129+
platform: arm64
130+
pre_build_image: true
131+
privileged: true
132+
volumes:
133+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
134+
- cgroupns_mode: host
135+
command: /lib/systemd/systemd
136+
image: docker.io/geerlingguy/docker-fedora40-ansible:latest
137+
name: fedora40-systemd-amd64
138+
platform: amd64
139+
pre_build_image: true
140+
privileged: true
141+
volumes:
142+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
143+
- cgroupns_mode: host
144+
command: /lib/systemd/systemd
145+
image: docker.io/geerlingguy/docker-fedora40-ansible:latest
146+
name: fedora40-systemd-arm64
147+
platform: arm64
148+
pre_build_image: true
149+
privileged: true
150+
volumes:
151+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
152+
- cgroupns_mode: host
153+
command: /lib/systemd/systemd
154+
image: docker.io/geerlingguy/docker-fedora41-ansible:latest
155+
name: fedora41-systemd-amd64
156+
platform: amd64
157+
pre_build_image: true
158+
privileged: true
159+
volumes:
160+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
161+
- cgroupns_mode: host
162+
command: /lib/systemd/systemd
163+
image: docker.io/geerlingguy/docker-fedora41-ansible:latest
164+
name: fedora41-systemd-arm64
165+
platform: arm64
166+
pre_build_image: true
167+
privileged: true
168+
volumes:
169+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
170+
# These platforms do not provide systemd-resolved.
171+
# - cgroupns_mode: host
172+
# command: /lib/systemd/systemd
173+
# image: docker.io/geerlingguy/docker-ubuntu2004-ansible:latest
174+
# name: ubuntu-20-systemd-amd64
175+
# platform: amd64
176+
# pre_build_image: true
177+
# privileged: true
178+
# volumes:
179+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
180+
# - cgroupns_mode: host
181+
# command: /lib/systemd/systemd
182+
# image: docker.io/geerlingguy/docker-ubuntu2004-ansible:latest
183+
# name: ubuntu-20-systemd-arm64
184+
# platform: arm64
185+
# pre_build_image: true
186+
# privileged: true
187+
# volumes:
188+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
189+
# - cgroupns_mode: host
190+
# command: /lib/systemd/systemd
191+
# image: docker.io/geerlingguy/docker-ubuntu2204-ansible:latest
192+
# name: ubuntu-22-systemd-amd64
193+
# platform: amd64
194+
# pre_build_image: true
195+
# privileged: true
196+
# volumes:
197+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
198+
# - cgroupns_mode: host
199+
# command: /lib/systemd/systemd
200+
# image: docker.io/geerlingguy/docker-ubuntu2204-ansible:latest
201+
# name: ubuntu-22-systemd-arm64
202+
# platform: arm64
203+
# pre_build_image: true
204+
# privileged: true
205+
# volumes:
206+
# - /sys/fs/cgroup:/sys/fs/cgroup:rw
207+
- cgroupns_mode: host
208+
command: /lib/systemd/systemd
209+
image: docker.io/geerlingguy/docker-ubuntu2404-ansible:latest
210+
name: ubuntu-24-systemd-amd64
211+
platform: amd64
212+
pre_build_image: true
213+
privileged: true
214+
volumes:
215+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
216+
- cgroupns_mode: host
217+
command: /lib/systemd/systemd
218+
image: docker.io/geerlingguy/docker-ubuntu2404-ansible:latest
219+
name: ubuntu-24-systemd-arm64
220+
platform: arm64
221+
pre_build_image: true
222+
privileged: true
223+
volumes:
224+
- /sys/fs/cgroup:/sys/fs/cgroup:rw
225+
provisioner:
226+
name: ansible
227+
config_options:
228+
defaults:
229+
# Molecule used to add ${MOLECULE_PROJECT_DIRECTORY}/. to this
230+
# path for us pre-25.2.0, but now we have to do it ourselves.
231+
# See ansible/molecule#4380 and
232+
# https://github.com/ansible/molecule/releases/tag/v25.2.0 for
233+
# more details.
234+
roles_path: ~/.cache/molecule/skeleton-ansible-role/${MOLECULE_SCENARIO_NAME}/roles:${MOLECULE_PROJECT_DIRECTORY}/..:~/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles
235+
verifier:
236+
name: testinfra

.github/dependabot.yml

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -11,21 +11,19 @@ updates:
1111
# Managed by cisagov/skeleton-generic
1212
- dependency-name: actions/cache
1313
- dependency-name: actions/checkout
14+
- dependency-name: actions/dependency-review-action
1415
- dependency-name: actions/setup-go
1516
- dependency-name: actions/setup-python
17+
- dependency-name: cisagov/action-job-preamble
1618
- dependency-name: cisagov/setup-env-github-action
17-
- dependency-name: crazy-max/ghaction-dump-context
1819
- dependency-name: crazy-max/ghaction-github-labeler
19-
- dependency-name: crazy-max/ghaction-github-status
20-
- dependency-name: GitHubSecurityLab/actions-permissions
20+
- dependency-name: github/codeql-action
2121
- dependency-name: hashicorp/setup-packer
2222
- dependency-name: hashicorp/setup-terraform
2323
- dependency-name: mxschmitt/action-tmate
24-
- dependency-name: step-security/harden-runner
2524
# Managed by cisagov/skeleton-ansible-role
25+
- dependency-name: cisagov/action-disable-apparmor
2626
- dependency-name: docker/setup-buildx-action
27-
- dependency-name: docker/setup-qemu-action
28-
- dependency-name: github/codeql-action
2927
package-ecosystem: github-actions
3028
schedule:
3129
interval: weekly

.github/labels.yml

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -2,69 +2,69 @@
22
# Rather than breaking up descriptions into multiline strings we disable that
33
# specific rule in yamllint for this file.
44
# yamllint disable rule:line-length
5-
- color: "eb6420"
5+
- color: eb6420
66
description: This issue or pull request is awaiting the outcome of another issue or pull request
77
name: blocked
88
- color: "000000"
99
description: This issue or pull request involves changes to existing functionality
1010
name: breaking change
11-
- color: "d73a4a"
11+
- color: d73a4a
1212
description: This issue or pull request addresses broken functionality
1313
name: bug
14-
- color: "07648d"
14+
- color: 07648d
1515
description: This issue will be advertised on code.gov's Open Tasks page (https://code.gov/open-tasks)
1616
name: code.gov
17-
- color: "0366d6"
17+
- color: 0366d6
1818
description: Pull requests that update a dependency file
1919
name: dependencies
20-
- color: "5319e7"
20+
- color: 5319e7
2121
description: This issue or pull request improves or adds to documentation
2222
name: documentation
23-
- color: "cfd3d7"
23+
- color: cfd3d7
2424
description: This issue or pull request already exists or is covered in another issue or pull request
2525
name: duplicate
26-
- color: "b005bc"
26+
- color: b005bc
2727
description: A high-level objective issue encompassing multiple issues instead of a specific unit of work
2828
name: epic
2929
- color: "000000"
3030
description: Pull requests that update GitHub Actions code
3131
name: github-actions
32-
- color: "0e8a16"
32+
- color: 0e8a16
3333
description: This issue or pull request is well-defined and good for newcomers
3434
name: good first issue
35-
- color: "ff7518"
35+
- color: ff7518
3636
description: Pull request that should count toward Hacktoberfest participation
3737
name: hacktoberfest-accepted
38-
- color: "a2eeef"
38+
- color: a2eeef
3939
description: This issue or pull request will add or improve functionality, maintainability, or ease of use
4040
name: improvement
41-
- color: "fef2c0"
41+
- color: fef2c0
4242
description: This issue or pull request is not applicable, incorrect, or obsolete
4343
name: invalid
44-
- color: "ce099a"
44+
- color: ce099a
4545
description: This pull request is ready to merge during the next Lineage Kraken release
4646
name: kraken 🐙
47-
- color: "a4fc5d"
47+
- color: a4fc5d
4848
description: This issue or pull request requires further information
4949
name: need info
50-
- color: "fcdb45"
50+
- color: fcdb45
5151
description: This pull request is awaiting an action or decision to move forward
5252
name: on hold
53-
- color: "ef476c"
53+
- color: ef476c
5454
description: This issue is a request for information or needs discussion
5555
name: question
56-
- color: "d73a4a"
56+
- color: d73a4a
5757
description: This issue or pull request addresses a security issue
5858
name: security
59-
- color: "00008b"
59+
- color: 00008b
6060
description: This issue or pull request adds or otherwise modifies test code
6161
name: test
62-
- color: "1d76db"
62+
- color: 1d76db
6363
description: This issue or pull request pulls in upstream updates
6464
name: upstream update
65-
- color: "d4c5f9"
65+
- color: d4c5f9
6666
description: This issue or pull request increments the version number
6767
name: version bump
68-
- color: "ffffff"
68+
- color: ffffff
6969
description: This issue will not be incorporated
7070
name: wontfix

.github/lineage.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,4 +2,4 @@
22
lineage:
33
skeleton:
44
remote-url: https://github.com/cisagov/skeleton-ansible-role.git
5-
version: '1'
5+
version: "1"

0 commit comments

Comments
 (0)