|
branko
|
5eb7821a1e4d
|
2 months ago
|
|
MAR-218: Switch to using ldap_attrs module:
- Update invocations and syntax. - Drop the workaround for configuring TLS on the LDAP server (should be possible to set all relevant attributes at the same time at this point). - Group some invocations where it makes sense.
|
|
branko
|
c10934519e18
|
2 months ago
|
|
MAR-218: Switch to using fully-qualified collection names for all tasks:
- Ensures there is no ambiguity when invoking a module.
|
|
branko
|
7cabc17c71c3
|
2 months ago
|
|
MAR-218: Quote all octal values in YAML files:
- Fixes linting errors, and ensures there is no ambiguity in case of YAML specification changes.
|
|
branko
|
2d15529786b7
|
2 months ago
|
|
MAR-218: Fix linting errors related to commands doing unconditional changes:
- Tasks run during the prepare stage of test runs do not matter. - Some of the role tasks are already effectively running only when change _will_ happen (when it is detected via variable registered by a previous task).
|
|
branko
|
7276805aace1
|
2 months ago
|
|
|
|
branko
|
694893c0259a
|
2 months ago
|
|
MAR-218: Fix linting errors for unnamed plays:
- All plays should be named at this point. - Improve naming of some plays. - Group some of the common tasks together to speed-up the prepare step. - Minor refactoring to make the prepare playbooks more consistent across the roles.
|
|
branko
|
6d61ce0ca2c9
|
2 months ago
|
|
|
|
branko
|
a822861bea4e
|
2 months ago
|
|
|
|
branko
|
a48e04e52b25
|
8 months ago
|
|
MAR-192: Added support for Debian 12 Bookworm to mail_server role:
- Allow use of older versions of TLS on Bookworm for testing of related optional parameters. - Install the IMAP CLI testing tool under its own virtual environment in order to avoid warnings and errors when trying to install it globally under Debian 12 Bookworm. - Update the lists of expected TLS protocols and ciphers.
|
|
branko
|
46d3f100d3d6
|
9 months ago
|
|
|
|
branko
|
e0dc1c1cfaa8
|
11 months ago
|
|
MAR-189: Added support for Debian 11 Bullseye to mail_server role:
- Shorten the backup client username so it would be under 32 characters. - Switch all helper VMs to using the Debian 11 Bullseye as well. - Drop the architecture suffix from hostnames. - Update the hostname for client VMs. - Fix the incorrect format for the message ID used in various mail delivery tests.
|
|
branko
|
cc53faac4b27
|
11 months ago
|
|
|
|
branko
|
4e137a40d922
|
11 months ago
|
|
MAR-183: Use local caching and serving of ClamAV database files:
- Helps avoid getting stuck due to hitting the upstream rate limiting, and also speeds-up the database downloads.
|
|
branko
|
01e9035dac41
|
15 months ago
|
|
MAR-181: Drop support for Debian 9 Stretch from mail_server role:
- Switch to using IPs from VirtualBox default allowed host-only network subnets. - Use Debian Buster for helper machines. - Drop Stretch-specific code and tests.
|
|
branko
|
7d9696a7b5cc
|
4 years ago
|
|
MAR-151: Added support for Debian 10 Buster to mail_server role:
- Updated role reference documentaiton. - Updated role meta information. - Updated tests. - Improve handling of configured IP in tests to avoid hard-coding the value in the relevant test for Postfix configuration file content.
|
|
branko
|
c063f27000b9
|
4 years ago
|
|
MAR-175: Mail server should be opportunistic in using TLS when delivering mail to remove servers:
- Previously the mail server would only deliver mails over plaintext. - Deploy a simple SMTP server on both client1/client2 machines. Servers are set-up to require/refuse the STARTTLS over SMTP. - Added tests for checking if STARTTLS is used when available for mail delivery. - Fixed the wrong configurtion (making sure the TLS security level is properly set for Postfix).
|
|
branko
|
6f3bc2a8facd
|
4 years ago
|
|
|
|
branko
|
c2f446ec7e2a
|
4 years ago
|
|
MAR-158: Update default TLS ciphers configuration in the mail_server role:
- Updated the default value for parameter mail_server_tls_ciphers. - Updated tests, making them explicitly test for enabled and disabled ciphers. - Refactored tests for TLS to use nmap ssl-enum-ciphers script for listing available TLS versions and ciphers. - Install nmap as part of preparation step. - Updated role reference documentation.
|
|
branko
|
1b36419c4641
|
4 years ago
|
|
|
|
branko
|
6844c0a01173
|
4 years ago
|
|
MAR-150: Use fixtures for X.509 artefacts in the mail_server role:
- Removed the statically generated artefacts. - Generate X.509 artefacts for tests using Gimmecert. - Updated paths to point to generated artefacts. - Introduced cleanup playbook for removing generated artefacts. - Increase allocated RAM for the mail server to avoid OOM and swapping.
|
|
branko
|
4e121413ca5c
|
4 years ago
|
|
|
|
branko
|
32f778c49981
|
4 years ago
|
|
|
|
branko
|
8b486fb8e632
|
4 years ago
|
|
|
|
branko
|
e75d5d4fba3b
|
4 years ago
|
|
|
|
branko
|
4c0b2aa9cb69
|
4 years ago
|
|
|
|
branko
|
5c5d8636f699
|
6 years ago
|
|
MAR-132: Added support for Debian 9 (Stretch) to mail_server role:
- Updated Molecule configuration to include set-up of additional instances for testing. - Updated configuration for test instances. - Use separate clients in testing of Jessie/Stretch instances. - Duplicate private keys/certificates for testing of mandatory parameters on Debian 9. - Refactored testing of mail deliveries (via swaks) to use test-generated message ID - improves reliability and solves some incompatibilities between swaks version in Jessie and Stretch. - Updated tests for TLS testing to take into account newer OpenSSL error/output messages. A bit of an ugly hack at the moment, but beats duplicating tests for now.
|
|
branko
|
0255167ebb5e
|
6 years ago
|
|
MAR-132: Fixed creation of test LDAP entries mail_server role tests:
- Do not use the ldap_entries option of the ldap_server role. - Invoke the ldap_entry and ldap_attr modules directly.
|
|
branko
|
b0c92677ba93
|
6 years ago
|
|
MAR-129: Updated mail_server role for new Molecule and Ansible:
- Moved variables from test playbooks into group/host vars. - Fixed linting errors. - Reference custom top-level linting configuration file in tests. - Fixed deprecation errors reported by Ansible. - Updated how the hosts on which the tests should be run are referenced.
|
|
branko
|
d7f5980cc68a
|
7 years ago
|
|
MAR-128: Upgraded tests for mail_server role:
- Switch to new Molecule configuration. - Updated set-up playbook to use become: yes. - Moved some preparatory steps outside of the main playbook (eases idempotence tests). - Updated tests to reference the yml inventory file. - Updated tests to use new fixture (host instead of individual ones). - Switched to extracting hostname instead of hard-coding it in a couple of tests. - Fixed some linting issues. - Renamed the hosts to make it easier to extend in future. - Renamed some data files to ensure they correspond correctly to new hostnames. - Rewrote logic behind setting-up the /etc/hosts a bit, and expanded the names to include the new hostnames. - Updated a couple of tests to correspond to correct filenames (that have been renamed). - Updated a couple of tests to address the new server naming. - Set explicitly the backup client username to avoid 32-charactr limitation on Linux usernames.
|