dev-sec / docker-ansible Goto Github PK

View Code? Open in Web Editor NEW

22.0 9.0 14.0 220 KB

Docker containers that include ansible latest stable 2.x version.

License: GNU General Public License v3.0

Dockerfile 100.00%

ansible docker docker-images centos7 centos6 debian-jessie debian-wheezy debian-stretch ubuntu1604 ubuntu1404

docker-ansible's People

Contributors

Stargazers

Watchers

Forkers

jjediny ngocngv rkno82 jaredledvina djesionek komachi bstaub addianto schurzi mekhanique chris-rock nejch brenosantanabruno szevez

docker-ansible's Issues

Add new maintainers for Fedora images

Is your feature request related to a problem? Please describe.

@dlouzan kindly offered to maintain the docker-images for Fedora (see dev-sec/ansible-collection-hardening#677).

We need to invite him (and anyone else, @dlouzan?) into the organization so they can work.

Reduce Image sizes

We are using these images for CI testing. These tests run very often, so having small images pays in time and also in ressource conservation. We should aim to create images of minimal size.

For refference these are the current sizes:

REPOSITORY                                          TAG         IMAGE ID      CREATED      SIZE
ghcr.io/dev-sec/docker-alpine-ansible               latest      af951ddf1aa1  2 days ago   457 MB
ghcr.io/dev-sec/docker-amazon2023-ansible           latest      de5bdec68d62  2 hours ago  716 MB
ghcr.io/dev-sec/docker-amazon2-ansible              latest      43a257a24b9c  2 days ago   428 MB
ghcr.io/dev-sec/docker-arch-ansible                 latest      b8780266aaff  2 hours ago  1.39 GB
ghcr.io/dev-sec/docker-centos7-ansible              latest      88579c4ee1b4  2 hours ago  967 MB
ghcr.io/dev-sec/docker-centos8-ansible              latest      2153e2f811b8  2 hours ago  965 MB
ghcr.io/dev-sec/docker-centosstream8-ansible        latest      a2ef3f11fc2c  2 hours ago  793 MB
ghcr.io/dev-sec/docker-centosstream9-ansible        latest      e570f1f0e373  2 hours ago  719 MB
ghcr.io/dev-sec/docker-debian10-ansible             latest      06391215a7f5  2 hours ago  1.02 GB
ghcr.io/dev-sec/docker-debian11-ansible             latest      4c1a0819eacd  2 hours ago  887 MB
ghcr.io/dev-sec/docker-debian12-ansible             latest      dde018385671  2 hours ago  1.01 GB
ghcr.io/dev-sec/docker-fedora37-ansible             latest      5b374bd02fc7  2 hours ago  844 MB
ghcr.io/dev-sec/docker-fedora38-ansible             latest      8e1eecc729ca  2 hours ago  853 MB
ghcr.io/dev-sec/docker-opensuse_tumbleweed-ansible  latest      65353cec8d5b  2 hours ago  879 MB
ghcr.io/dev-sec/docker-openwrt-ansible              latest      07b0246ee9eb  2 hours ago  589 MB
ghcr.io/dev-sec/docker-oracle7-ansible              latest      92fd7df2680b  2 days ago   4.22 GB
ghcr.io/dev-sec/docker-rocky8-ansible               latest      ca4dfb3ea864  2 hours ago  786 MB
ghcr.io/dev-sec/docker-rocky9-ansible               latest      e12490568e32  2 hours ago  793 MB
ghcr.io/dev-sec/docker-ubuntu1804-ansible           latest      94011e3af663  2 days ago   281 MB
ghcr.io/dev-sec/docker-ubuntu2004-ansible           latest      c88164cc718f  2 days ago   334 MB
ghcr.io/dev-sec/docker-ubuntu2204-ansible           latest      cdf18b113c33  2 days ago   568 MB

Openwrt build fails

Describe the bug
The build fails for some time.
https://github.com/rndmh3ro/docker-ansible/actions/runs/3778661949/jobs/6423327751#step:5:402

Expected behavior
The build should succeed.

@komachi, are you able to fix that?

Alpine image

Hey, great work with this! I've been using an Alpine-based image to do this for a little while, and I thought you might want to complete the collection 😉

It's hosted here https://github.com/absolutejam/docker-ansible/blob/master/Dockerfile but if you do use it, you might want to reformat it and strip out the winrm-based python modules.

Use reusable workflows

We already use them: https://github.com/dev-sec/.github/tree/main/.github/workflows, so we should also use them for this repo.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

chore(deps): update peter-evans/dockerhub-description action to v4

Detected dependencies

github-actions

.github/workflows/all.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

peter-evans/dockerhub-description v3

.github/workflows/alpine-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/amazon2-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/amazon2023-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/arch-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/centos7-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/centos8-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/centosstream8-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/centosstream9-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/debian10-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/debian11-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/debian12-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/fedora37-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/fedora38-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/fedora39-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/lint.yml

actions/checkout v4

hadolint/hadolint-action v3.1.0

.github/workflows/opensuse_tumbleweed-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/openwrt-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/oracle7-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/rocky8-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/rocky9-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/ubuntu1804-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/ubuntu2004-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

.github/workflows/ubuntu2204-ansible-latest.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

docker/setup-qemu-action v3

docker/setup-buildx-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

docker/login-action v3

docker/build-push-action v5

Check this box to trigger a request for Renovate to run again on this repository

Create images under new namespace

Is your feature request related to a problem? Please describe.
Now that the docker images are moved to this new organization, we should create the docker images under the new organization, too. We need to check which registry we will use.

If the Dockerhub provides a redirection-method when you docker pull and image, we should use that. Otherwise we should push to the old namespace as well as the new one.

Fedora with systemd

It seems, that the latest fedora image does not contain systemd, therefore automated tests are failing, because /sbin/init is missing:

https://travis-ci.org/github/dev-sec/ansible-os-hardening/jobs/717298859#L535
https://travis-ci.org/github/dev-sec/ansible-ssh-hardening/jobs/717077625#L525

I would suggest to change source image here:
https://github.com/rndmh3ro/docker-ansible/blob/fe9468fff1838fc4e30c49b3be051e313859fd3c/fedora-ansible-latest/Dockerfile#L1

to the same one with systemd: https://hub.docker.com/r/fedora/systemd-systemd

so as a result:

FROM fedora/systemd-systemd:latest
LABEL maintainer="Sebastian Gumprich"

RUN dnf -y update \
    && dnf -y install ansible python python3-libselinux \
    && dnf clean all

RUN echo -e '[local]\nlocalhost ansible_connection=local' > /etc/ansible/hosts

CMD [ "ansible-playbook", "--version" ]

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.