.kitchen.yml

---
driver:
  name: docker
  use_sudo: false
  privileged: true
  http_proxy: <%= ENV['http_proxy'] || nil %>
  https_proxy: <%= ENV['https_proxy'] || nil %>

transport:
  max_ssh_sessions: 5

provisioner:
  name: ansible_playbook
  hosts: all
  require_ansible_repo: false
  require_chef_for_busser: false
  require_ruby_for_busser: false
  ansible_verbose: true
  ansible_diff: true
  roles_path: ../ansible-mysql-hardening/
  http_proxy: <%= ENV['http_proxy'] || nil %>
  https_proxy: <%= ENV['https_proxy'] || nil %>
  requirements_path: requirements.yml
  requirements_collection_path: requirements.yml
  sudo_command: 'sudo -E -H'
  playbook: tests/test.yml
  galaxy_ignore_certs: true

platforms:
  - name: centos7-ansible-latest
    driver:
      image: rndmh3ro/docker-centos7-ansible:latest
      platform: centos
      run_command: /sbin/init
      provision_command:
        - sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
        - systemctl enable sshd.service
  - name: oracle7-ansible-latest
    driver:
      image: rndmh3ro/docker-oracle7-ansible:latest
      run_command: /sbin/init
      platform: centos
      provision_command:
        - yum -y install initscripts
        - sed -i '/nologin/d' /etc/pam.d/sshd
        - systemctl enable sshd.service
  - name: ubuntu1804-ansible-latest
    driver:
      image: rndmh3ro/docker-ubuntu1804-ansible:latest
      run_command: /sbin/init
      platform: ubuntu
      provision_command:
        - systemctl enable ssh.service
  - name: debian9-ansible-latest
    driver:
      image: rndmh3ro/docker-debian9-ansible:latest
      platform: debian
      run_command: /sbin/init
      provision_command:
        - apt install -y systemd-sysv
        - systemctl enable ssh.service
  - name: debian10-ansible-latest
    driver:
      image: rndmh3ro/docker-debian10-ansible:latest
      platform: debian
      run_command: /sbin/init
      provision_command:
        - apt install -y systemd-sysv
        - systemctl enable ssh.service
  - name: amazon-ansible-latest
    driver:
      image: rndmh3ro/docker-amazon-ansible:latest
      platform: centos
      run_command: /sbin/init
      provision_command:
        - sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
        - systemctl enable sshd.service
verifier:
  name: inspec
  sudo: true
  inspec_tests:
    - https://github.com/dev-sec/mysql-baseline

suites:
  - name: mysql