ansible-sshd/tests/tests_backup.yml

---
- hosts: all
  vars:
    __sshd_test_backup_files:
      - /etc/ssh/sshd_config
      - /etc/ssh/sshd_config.d/00-ansible_system_role.conf
    main_sshd_config: >-
      {{
        "00-ansible_system_role.conf"
        if ansible_facts['distribution'] == 'Fedora'
        else "sshd_config"
      }}
    main_sshd_config_path: >-
      {{
        "/etc/ssh/sshd_config.d/"
        if ansible_facts['distribution'] == 'Fedora'
        else "/etc/ssh/"
      }}
  tasks:
  - name: Backup configuration files
    include_tasks: tasks/backup.yml

  - name: Find old backups files
    find:
      paths: "{{ main_sshd_config_path }}"
      patterns: "{{ main_sshd_config }}.*@*~"
    register: backup_files

  - name: Remove old backup files
    file:
      path: "{{ item.path }}"
      state: absent
    with_items: "{{ backup_files.files }}"

  - name: Configure sshd without creating backup
    include_role:
      name: ansible-sshd
    vars:
      sshd_backup: false

  - name: Find new backups files
    find:
      paths: "{{ main_sshd_config_path }}"
      patterns: "{{ main_sshd_config }}.*@*~"
    register: no_backup

  - name: Configure sshd again with different configuration and with backup
    include_role:
      name: ansible-sshd
    vars:
      sshd_Banner: /tmp/banner
    register: second_run

  - name: Find new backups files
    find:
      paths: "{{ main_sshd_config_path }}"
      patterns: "{{ main_sshd_config }}.*@*~"
    register: new_backup

  - name: Verify the backup was not done in the first attempt, but in the second one
    assert:
      that:
        - no_backup.files == []
        - new_backup.files != []

  - name: Restore configuration files
    include_tasks: tasks/restore.yml