Run Inspec Tests for RasPi nodes and Workstations

[sebastian-sommerfeld-io]

New Todos (2024-06-18)

This issue is open for a while. But some new thoughts crossed my mind.

• [ ] Setup a raspi node that runs inspec tests regularly
• [ ] Report results to Grafana Cloud and display in Dashboard
• [ ] Think about how I want to handle machines, that are shut down / not reachable

Test

• [x] Update Version in src/test/homelab/inspec/ubuntu_desktop/inspec.yml to 0.0.0
• [x] Run tests automatically after running Ansible (for workstations and RasPi nodes)
  • [x] Probably: re-structure the repo and move the scripts to the project root. Probably a Makefile would be the better way to run (at least Ansible) because it can better handle downloading the inspec baselines
  • [ ] Adopt from
    • [ ] https://dev-sec.io/baselines/ssh
    • [ ] https://dev-sec.io/baselines/ssl
    • [ ] https://dev-sec.io/baselines/linux and extend ansible based on https://github.com/dev-sec/ansible-collection-hardening/tree/master/roles/os_hardening
    • [ ] https://dev-sec.io/baselines/docker
  • [x] Container must be able to connect via SSH to all my workstations and RasPi nodes
  • [x] Must work from caprica and kobol
• [x] Add header docs to *.rb files
• [x] Refactor old ubuntu_desktop profile
• [x] Validate inspec profiles in pipeline
• [ ] Run homelab-baseline against RasPi nodes as well (maybe with only_if ubuntu to limit certain tests to ubuntu workstations)