Securing Linux

This repo creates a usable Linux platform with adequately security for daily, non-production usage.

TODO: add blurb about reasoning

TODO: add blurb about workflow

Make no mistake this set of playbooks are opinionated and come without any express or implied warranty.

Steps in security

Security hardening guides, best practices, checklists, benchmarks, tools and other resources. Help from :

This project uses :

Terraform
- dmacvicar/terraform-provider-libvirt for local dev
- aws for remote dev
Ansible for development and evaluation.
Taskfile contains most of the magic to get this project working.

make init

Ansible-galaxy installs required public roles within requirements.yml
Vagrant pulling down the most recent versions of the boxes currently configured.
Creating an Ansible Vault to protect sensitive data such as keys / passwords in an encrypted vault. An example decrypted file can be reviewed vault-example.yml, which will become vault.yml.

make enc # encrypt vault.yml
make dec # decrypt vault.yml

make build
make ping

Vagrant creates test VMs
Vagrant takes snapshot of the state at baseline to make iterative testing much faster

make start
make stop
make restore # restore baseline snapshot
make destroy # remove all traces

make audit

make play
make audit