mirror of
https://github.com/willshersystems/ansible-sshd
synced 2024-09-19 23:11:32 +02:00
70808e97fc
Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com>
56 lines
1.6 KiB
YAML
56 lines
1.6 KiB
YAML
---
|
|
- name: Test backups
|
|
hosts: all
|
|
vars:
|
|
__sshd_test_backup_files:
|
|
- /etc/ssh/sshd_config
|
|
- /etc/ssh/sshd_config.d/00-ansible_system_role.conf
|
|
tasks:
|
|
- name: Backup configuration files
|
|
ansible.builtin.include_tasks: tasks/backup.yml
|
|
|
|
- name: Find old backups files
|
|
ansible.builtin.find:
|
|
paths: "{{ main_sshd_config_path }}"
|
|
patterns: "{{ main_sshd_config_name }}.*@*~"
|
|
register: backup_files
|
|
|
|
- name: Remove old backup files
|
|
ansible.builtin.file:
|
|
path: "{{ item.path }}"
|
|
state: absent
|
|
with_items: "{{ backup_files.files }}"
|
|
|
|
- name: Configure sshd without creating backup
|
|
ansible.builtin.include_role:
|
|
name: ansible-sshd
|
|
vars:
|
|
sshd_backup: false
|
|
|
|
- name: Find new backups files
|
|
ansible.builtin.find:
|
|
paths: "{{ main_sshd_config_path }}"
|
|
patterns: "{{ main_sshd_config_name }}.*@*~"
|
|
register: no_backup
|
|
|
|
- name: Configure sshd again with different configuration and with backup
|
|
ansible.builtin.include_role:
|
|
name: ansible-sshd
|
|
vars:
|
|
sshd_Banner: /tmp/banner # noqa var-naming
|
|
register: second_run
|
|
|
|
- name: Find new backups files
|
|
ansible.builtin.find:
|
|
paths: "{{ main_sshd_config_path }}"
|
|
patterns: "{{ main_sshd_config_name }}.*@*~"
|
|
register: new_backup
|
|
|
|
- name: Verify the backup was not done in the first attempt, but in the second one
|
|
ansible.builtin.assert:
|
|
that:
|
|
- no_backup.files == []
|
|
- new_backup.files != []
|
|
|
|
- name: Restore configuration files
|
|
ansible.builtin.include_tasks: tasks/restore.yml
|