https://github.com/broadinstitute/dsp-appsec-debian9-hardening-role
An Ansible playbook hardening Debian 9 servers to CIS benchmark standards.
https://github.com/broadinstitute/dsp-appsec-debian9-hardening-role
Science Score: 13.0%
This score indicates how likely this project is to be science-related based on various indicators:
-
○CITATION.cff file
-
✓codemeta.json file
Found codemeta.json file -
○.zenodo.json file
-
○DOI references
-
○Academic publication links
-
○Academic email domains
-
○Institutional organization owner
-
○JOSS paper metadata
-
○Scientific vocabulary similarity
Low similarity (11.0%) to scientific vocabulary
Repository
An Ansible playbook hardening Debian 9 servers to CIS benchmark standards.
Basic Info
Statistics
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 0
- Releases: 0
Metadata Files
README.md
debian9-CIS Ansible Role
This role can be used in an Ansible playbook to harden Debian 9 images to CIS 1.0.1 standards.
Requirements
None
Role Variables
None
Dependencies
None
Example Playbook
This role is currently not available on Ansible Galaxy, and must be included locally in the project. Please see Set Up for more information.
- name: Harden Server
hosts: localhost
become: yes
roles:
- dsp-appsec-debian9-hardening-role
Set Up
Make sure vagrant and virtualbox are installed.
brew cask install vagrant virtualboxCreate project folder and change into it before initializing the vagrant project with a Debiam9 base image. This should genertate a
Vagrantfileand a.vagrantdirectory. You can then test whether the Vagrant project was created by running vagrant up to start the machine.
```
Create project folder
mkdir -p ~/MyProjects/deb9-test-box cd ~/MyProjects/deb9-test-box
Initialize vagrant
vagrant init debian/stretch64
Check if VM image was created
vagrant up
vagrant ssh -c "ip a"
vagrant destroy
3. Make sure ansible is installed.
brew install ansible
4. Create an ansible playbook, containing the yaml below.
- name: Harden Server
hosts: all
become: yes
roles:
- debian9-CIS
5. Create a `roles` folder within the the project and change into it. Clone this repo into the folder.
mkdir roles
cd roles
git clone https://github.com/broadinstitute/debian9-CIS.git
6. Open your Vangrant file and look for the `config.vm.box = "debian/stretch64"` line. Edit the Vagrantfile so it looks like the yaml below.
...
config.vm.box = "debian/stretch64"
# Add the following code
config.vm.provision "ansible" do |ansible|
ansible.playbook = "[YOUR-ANSIBLE-PLAYBOOK].yml"
end
...
``
7. To run the role, runvagrant up. The ansible playbook will automatically run when VM boots. While the VM is running, you can runvagrant provision` to re-run the playbook.
License
BSD
Author Information
Please contact appsec@broadinstitute.org with any questions.
Owner
- Name: Broad Institute
- Login: broadinstitute
- Kind: organization
- Location: Cambridge, MA
- Website: http://www.broadinstitute.org/
- Twitter: broadinstitute
- Repositories: 1,083
- Profile: https://github.com/broadinstitute
Broad Institute of MIT and Harvard
GitHub Events
Total
Last Year
Issues and Pull Requests
Last synced: about 1 year ago
All Time
- Total issues: 0
- Total pull requests: 0
- Average time to close issues: N/A
- Average time to close pull requests: N/A
- Total issue authors: 0
- Total pull request authors: 0
- Average comments per issue: 0
- Average comments per pull request: 0
- Merged pull requests: 0
- Bot issues: 0
- Bot pull requests: 0
Past Year
- Issues: 0
- Pull requests: 0
- Average time to close issues: N/A
- Average time to close pull requests: N/A
- Issue authors: 0
- Pull request authors: 0
- Average comments per issue: 0
- Average comments per pull request: 0
- Merged pull requests: 0
- Bot issues: 0
- Bot pull requests: 0
Top Authors
Issue Authors
Pull Request Authors
Top Labels
Issue Labels
Pull Request Labels
Dependencies
- actions/checkout v2 composite
- github/codeql-action/analyze v1 composite
- github/codeql-action/autobuild v1 composite
- github/codeql-action/init v1 composite