integrity

Ansible role.

• Install integrity
• Record metadata (hash/mtree) of specified directories
• Configure cron to email alerts.

Feel free to share your feedback and report issues.

Contributions are welcome.

Requirements

Roles

• Ansible role vbotka.ansible_lib

Collections

• community.general

Packages

• Linux: hashdeep, freebsd-buildutils or mtree-netbsd
• FreeBSD: security/md5deep

Note: RH package md5deep provides hashdeep. There is no package in RH that provides fmtree (searching ... WIP).

Variables

See defaults and examples in vars.

Best practice

Install roles

ansible-galaxy role install vbotka.integrity
ansible-galaxy role install vbotka.ansible_lib

Install the collection if necessary

ansible-galaxy collection install community.general

Create the playbook and inventory. Check the syntax

shell> ansible-playbook integrity.yml --syntax-check

Install packages

shell> ansible-playbook integrity.yml -t integrity_packages

Download source

shell> ansible-playbook integrity.yml -t integrity_source

Dry-run playbook

shell> ansible-playbook integrity.yml --check

Run the playbook twice

shell> ansible-playbook integrity.yml

Ansible lint

Use the configuration file .ansible-lint.local when running ansible-lint. Some rules might be disabled and some warnings might be ignored. See the notes in the configuration file.

shell> ansible-lint -c .ansible-lint.local

References

• Path names must by preceded by a period

License

Author Information

Vladimir Botka