19999b4ed8
Paramiko version 2.0 has been released. It now uses the Python library cryptography. Installing this requires additional system packages. This commit adds in the appropriate packages required by cryptography based on its documentation [1]. An alternative approach would have been to constrain the version of Paramiko however the project describes the 1.x versions as relying on insecure dependencies [2]. [1] https://cryptography.io/en/latest/installation/ [2] http://www.paramiko.org/installing.html Change-Id: I33a6f9ab1aecf28e82ea756e41c482820758157f
openstack-ansible-security
The goal of the openstack-ansible-security role is to improve security within openstack-ansible deployments. The role is based on the Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 6.
Requirements
This role can be used with or without the openstack-ansible role. It requires Ansible 1.8.3 at a minimum.
Role Variables
All of the variables for this role are in defaults/main.yml.
Dependencies
This role has no dependencies.
Example Playbook
Using the role is fairly straightforward:
- hosts: servers
roles:
- openstack-ansible-security
Running with Vagrant
Security Ansible can be easily run for testing using Vagrant.
To do so run:
vagrant destroy To destroy any previously created Vagrant setup
vagrant up Spin up Ubuntu Trusty VM and run ansible-security against it
License
Apache 2.0
Author Information
For more information, join #openstack-ansible on Freenode.