import testinfra.utils.ansible_runner testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner( '.molecule/ansible_inventory').get_hosts('all') def test_installed_packages(Package): """ Tests if packages have been installed. """ assert Package('sudo').is_installed def test_ansible_user(Group, Sudo, User): """ Tests if Ansible user and group have been set-up correctly. """ with Sudo(): group = Group('ansible') assert group.exists assert group.gid < 1000 user = User('ansible') assert user.exists assert user.group == 'ansible' assert user.groups == ['ansible'] assert user.uid < 1000 assert user.shell == '/bin/bash' assert user.password == '!' def test_sudo_configuration(File, Sudo): """ Tests if sudo has been configured to allow Ansible user to run any command without password. """ with Sudo(): sudo_config = File('/etc/sudoers.d/ansible') assert sudo_config.is_file assert sudo_config.user == 'root' assert sudo_config.group == 'root' assert sudo_config.mode == 0o640 assert sudo_config.content == 'ansible ALL=(ALL:ALL) NOPASSWD:ALL'