search

ansible-lockdown / RHEL8-CIS-Audit

Audit configurations for RHEL8 CIS - utilising goss
MIT License
31 stars 26 forks source link

Remote audit with Goss #54

Open sysop200 opened 1 year ago

sysop200 commented 1 year ago

Greetings colleagues! I want to ask - is it possible to do a cis audit on many remote computers, so as not to logon into each

bbaassssiiee commented 1 year ago

With additional programming integrating the goss-ansible module, this repo could be coverted fully into an ansible-role. As such it could do what you ask for.

uk-bolly commented 1 month ago

Hi @sysop200

Did you get a solution for this that works for you? We have now written a new section which allows audit_only with the ability to also pull reports back to a central location. Alternatively this could be run as a cron job locally using the same command for goss that our playbook uses. We did look to add the ansible-goss module but have been trying to minimize/remove external library dependacies beyond collections from the roles. But it is something we have used successfully during testing.

kindest

uk-bolly