tegwick
8f5799553e
- goss/baseline.yaml: assertions for all spec/server-baseline.yaml items (packages, services, SSH config, UFW rules, admin user, fail2ban, HISTCONTROL) - goss/vars/baseline-vars.yaml: parameterised ports and paths - ansible/roles/goss/: installs Goss binary (v0.4.9), deploys tests, runs assertions in TAP format, fetches report to reports/ - ansible/playbooks/verify.yaml: playbook wrapping the goss role - Makefile: add 'make verify' target; update 'make status' with hint - docs/adr/ADR-002: formal repo boundary — railiance-hosts vs railiance-bootstrap - workplans/RAIL-HO-WP-0002: registered workstream 8fed53c2, T03–T06 done Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
14 lines
303 B
YAML
14 lines
303 B
YAML
---
|
|
# verify.yaml — Deploy Goss, run baseline assertions, fetch TAP results.
|
|
# Exit code mirrors Goss: 0 = all pass, non-zero = failures.
|
|
#
|
|
# Usage:
|
|
# ansible-playbook ansible/playbooks/verify.yaml -u admin
|
|
# make verify
|
|
|
|
- hosts: all
|
|
become: true
|
|
gather_facts: true
|
|
roles:
|
|
- role: goss
|