coulomb/railiance-infra
0
0
Fork 0
Code Issues Pull Requests Actions Projects Releases Wiki Activity

chore: Goss verification reports 2026-03-09T164355Z

Browse Source
This commit is contained in:
Bernd Worsch
2026-03-09 16:43:55 +00:00
parent 4afc2a0fd6
commit 6af302850f
2 changed files with 54 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
reports/goss-Railiance01-2026-03-09.tap Normal file
View File

@@ -0,0 +1,27 @@
1..26
ok 1 - Command: grep NOPASSWD /etc/sudoers.d/tegwick: exit-status: matches expectation: 0
ok 2 - Command: grep NOPASSWD /etc/sudoers.d/tegwick: stdout: matches expectation: ["NOPASSWD"]
ok 3 - Command: test -x /usr/local/bin/sops: exit-status: matches expectation: 0
ok 4 - Package: fail2ban: installed: matches expectation: true
ok 5 - Command: test -x /usr/local/bin/age: exit-status: matches expectation: 0
ok 6 - Command: grep -r HISTCONTROL /etc/profile.d/: exit-status: matches expectation: 0
ok 7 - Command: grep -r HISTCONTROL /etc/profile.d/: stdout: matches expectation: ["ignorespace"]
ok 8 - Package: htop: installed: matches expectation: true
ok 9 - File: /etc/ssh/sshd_config.d/10-hardening.conf: exists: matches expectation: true
ok 10 - File: /etc/ssh/sshd_config.d/10-hardening.conf: contents: matches expectation: ["PermitRootLogin no","PasswordAuthentication no","PubkeyAuthentication yes"]
ok 11 - User: tegwick: exists: matches expectation: true
ok 12 - User: tegwick: shell: matches expectation: "/bin/bash"
ok 13 - Package: vim: installed: matches expectation: true
ok 14 - Package: git: installed: matches expectation: true
ok 15 - Service: ssh.socket: enabled: matches expectation: true
ok 16 - Service: ssh.socket: running: matches expectation: true
ok 17 - Package: ufw: installed: matches expectation: true
ok 18 - Package: curl: installed: matches expectation: true
ok 19 - Service: ufw: enabled: matches expectation: true
ok 20 - Service: ufw: running: matches expectation: true
ok 21 - Service: fail2ban: enabled: matches expectation: true
ok 22 - Service: fail2ban: running: matches expectation: true
ok 23 - Command: fail2ban-client status sshd: exit-status: matches expectation: 0
ok 24 - Command: fail2ban-client status sshd: stdout: matches expectation: ["Status for the jail: sshd"]
ok 25 - Command: ufw status: exit-status: matches expectation: 0
ok 26 - Command: ufw status: stdout: matches expectation: ["Status: active","/OpenSSH.*ALLOW/","/6443\\/tcp.*ALLOW/","/8472\\/udp.*ALLOW/"]

27
reports/goss-Railiance01-2026-03-09T164350Z.tap Normal file
View File

@@ -0,0 +1,27 @@
1..26
ok 1 - Command: test -x /usr/local/bin/age: exit-status: matches expectation: 0
ok 2 - Command: test -x /usr/local/bin/sops: exit-status: matches expectation: 0
ok 3 - Package: ufw: installed: matches expectation: true
ok 4 - Package: htop: installed: matches expectation: true
ok 5 - Command: grep NOPASSWD /etc/sudoers.d/tegwick: exit-status: matches expectation: 0
ok 6 - Command: grep NOPASSWD /etc/sudoers.d/tegwick: stdout: matches expectation: ["NOPASSWD"]
ok 7 - Command: grep -r HISTCONTROL /etc/profile.d/: exit-status: matches expectation: 0
ok 8 - Command: grep -r HISTCONTROL /etc/profile.d/: stdout: matches expectation: ["ignorespace"]
ok 9 - File: /etc/ssh/sshd_config.d/10-hardening.conf: exists: matches expectation: true
ok 10 - File: /etc/ssh/sshd_config.d/10-hardening.conf: contents: matches expectation: ["PermitRootLogin no","PasswordAuthentication no","PubkeyAuthentication yes"]
ok 11 - User: tegwick: exists: matches expectation: true
ok 12 - User: tegwick: shell: matches expectation: "/bin/bash"
ok 13 - Package: fail2ban: installed: matches expectation: true
ok 14 - Service: ssh.socket: enabled: matches expectation: true
ok 15 - Service: ssh.socket: running: matches expectation: true
ok 16 - Package: curl: installed: matches expectation: true
ok 17 - Package: vim: installed: matches expectation: true
ok 18 - Service: ufw: enabled: matches expectation: true
ok 19 - Service: ufw: running: matches expectation: true
ok 20 - Service: fail2ban: enabled: matches expectation: true
ok 21 - Service: fail2ban: running: matches expectation: true
ok 22 - Package: git: installed: matches expectation: true
ok 23 - Command: ufw status: exit-status: matches expectation: 0
ok 24 - Command: ufw status: stdout: matches expectation: ["Status: active","/OpenSSH.*ALLOW/","/6443\\/tcp.*ALLOW/","/8472\\/udp.*ALLOW/"]
ok 25 - Command: fail2ban-client status sshd: exit-status: matches expectation: 0
ok 26 - Command: fail2ban-client status sshd: stdout: matches expectation: ["Status for the jail: sshd"]