Ansible Automation | Apply CIS Security BenchMarking for RHEL/ CentOS 6

Поделиться
HTML-код
  • Опубликовано: 11 дек 2024

Комментарии • 8

  • @miguelbrostrom1182
    @miguelbrostrom1182 7 лет назад +4

    How much configuration is necessary to make this work for Cent OS 7? Or are the benchmarks completely different.

    • @YogeshMehta
      @YogeshMehta  7 лет назад

      In RHEL7 - there are changes to filesystem/service and many more. so I assume around 20-30% changes in the checks

    • @kifalahmad
      @kifalahmad 6 лет назад

      Hi Yogesh,Do you have a gitHub repo link to download CIS Benchmark for Rhel/CentOS 7 ?

  • @abhisheksurwariya
    @abhisheksurwariya 7 лет назад +1

    Can you share the same for Ubuntu 16.04, it would be a great help if you share any link to start with.

  • @smakintel
    @smakintel 6 лет назад

    Thanks Bro , really benefited from your tutorial. Keep it up.

  • @vasudevn4986
    @vasudevn4986 8 лет назад +1

    Hi Yogesh, thanks for the excellent job you doing. However, when I have tried to run the playbook getting below error. Please suggest where I'm doing wrong.
    [root@webserver1 cis-rhel-ansible]# ansible-playbook playbook.yml -i hosts --tags section8
    PLAY [all] *********************************************************************
    TASK [setup] *******************************************************************
    [DEPRECATION WARNING]: Accelerated mode is deprecated. Consider using SSH with ControlPersist and pipelining enabled instead.
    This feature will be removed in a future
    release. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
    [DEPRECATION WARNING]: accelerate is kept for backwards compatibility but usage is discouraged. The module documentation details page may explain more about this
    rationale..
    This feature will be removed in a future release. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
    fatal: [192.168.1.84]: FAILED! => {"failed": true, "msg": "Failed to connect to 192.168.1.84 on the accelerated port 5099"}
    to retry, use: --limit @/etc/ansible/cis-rhel-ansible/playbook.retry
    PLAY RECAP *********************************************************************
    192.168.1.84 : ok=0 changed=0 unreachable=0 failed=1
    [root@webserver1 cis-rhel-ansible]#
    [root@webserver1 cis-rhel-ansible]# cat hosts
    [rhel-6.8]
    192.168.1.84
    [root@webserver1 cis-rhel-ansible]#
    Thanks,
    Vasudev

    • @YogeshMehta
      @YogeshMehta  8 лет назад

      Accelerated mode is deprecated and you can do the same work with enabling ssh pipeline. Disable Accelerated in Ansible config .
      /etc/ansible/ansible.cfg add below lines.
      pipelining = True

    • @vasudevn4986
      @vasudevn4986 8 лет назад

      Hi Yogesh,
      Whenever you get a chance please look into this issue.
      Thanks,
      Vasudev