datadog_check_lynis
Ansible role datadog_check_lynis
An Ansible role to install a Datadog agent check for Lynis, an open source security auditing tool.
Quick howto
requirements.yml:
- src: Datadog.datadog
version: 4.2.1
- src: infothrill.datadog_check_lynis
version: v3.0.0
Install:
ansible-galaxy install -r requirements.yml -p ./roles/
Playbook:
- hosts: servers
roles:
- role: Datadog.datadog
- role: ansible-role-datadog_check_lynis
To configure the check, please use the Datadog.datadog role and add an entry
in the checks
dictionary there:
lynis:
init_config:
instances:
- metrics:
- hardening_index
- installed_packages
- lynis_tests_done
report: /var/log/lynis/report.dat
Role Variables
variable | default | description |
---|---|---|
ddagent_user | dd-agent | agent user |
ddagent_group | dd-agent | agent group |
Dependencies
In principle, this role can be run standalone, however it is only tested together with the role Datadog.datadog. The recommended approach would be to:
- install datadog using the upstream role
- configure the check using the upstream role
- run this role to deploy the check plugin only
License
MIT
Author Information
This role was created in 2017 by Paul Kremer.
Changes
v4.0.1
- Drop python 3.6 test support
- Add python 3.7, 3.8, 3.9 test support
- Upgrade molecule to 3.x
- Drop ansible 2.8 support
- Add ansible 2.10, 3.0 support
v4.0.0
- Renamed role to
datadog_check_lynis
- Drop support for ansible EOL versions 2.5, 2.6, 2.7
v3.0.0
- Add support for agent
> 6
(python 3+), and drop support for older versions - Drop Centos / EL7
- Add test for Ubuntu focal (20.04)
v2.0.0
- Add support for ansible 2.6, 2.7, 2.8, 2.9
- Drop support for ansible EOL versions 2.2, 2.3, 2.4
- Drop support for python2
- Drop support for EL6 , ubuntu trusty 14.04
- Add testing support for ansible 2.8
- Upgrade ansible-lint, molecule and docker dependencies for testing
v1.1.0
- Auto-detect agent5/6 configuration directory (backwards compatible)
- Add support for EL 6,7
- Optimize molecule test
v1.0.3
- Upgrade molecule
- Fix meta/main.yml to reflect correct values
v1.0.2
- remove ansible 2.1 and add ansible 2.5
- upgrade molecule
v1.0.1
- remove unused files and outcommented code
v1.0
- initial release
About
Role to install a datadog check for Lynis
Install
ansible-galaxy install infothrill/ansible-role-datadog_check_lynis
License
mit
Downloads
2583
Owner
I was born in the 20th century and I will die in the 21st century