38 lines
1.4 KiB
YAML
38 lines
1.4 KiB
YAML
---
|
|
- name: Vérifier une VM Debian gérée par Set-OPS
|
|
hosts: serveurs_debian
|
|
become: true
|
|
gather_facts: true
|
|
|
|
tasks:
|
|
- name: Vérifier que la cible est Debian 13
|
|
ansible.builtin.assert:
|
|
that:
|
|
- ansible_facts.distribution == "Debian"
|
|
- ansible_facts.distribution_major_version == "13"
|
|
fail_msg: "Cette vérification attend une VM Debian 13."
|
|
|
|
- name: Collecter les services
|
|
ansible.builtin.service_facts:
|
|
|
|
- name: Vérifier les services du socle
|
|
ansible.builtin.assert:
|
|
that:
|
|
- '"ssh.service" in ansible_facts.services'
|
|
- '"qemu-guest-agent.service" in ansible_facts.services'
|
|
- '"chrony.service" in ansible_facts.services'
|
|
- ansible_facts.services["ssh.service"].state == "running"
|
|
- ansible_facts.services["qemu-guest-agent.service"].state == "running"
|
|
- ansible_facts.services["chrony.service"].state == "running"
|
|
fail_msg: "Un service du socle Debian n'est pas actif."
|
|
|
|
- name: Vérifier sudo non interactif via become
|
|
ansible.builtin.command: whoami
|
|
changed_when: false
|
|
register: verifier_hote_debian_whoami
|
|
|
|
- name: Valider l'élévation root
|
|
ansible.builtin.assert:
|
|
that:
|
|
- verifier_hote_debian_whoami.stdout == "root"
|
|
fail_msg: "L'élévation sudo ne retourne pas root."
|