Ansible

My team at Red Hat builds a lot of kernels in OpenShift pods as part of our work with the Continuous Kernel Integration (CKI) project.

My work at Red Hat involves testing lots and lots of kernels from various sources and we use GitLab CE to manage many of our repositories and run our CI jobs.

After a recent OpenStack-Ansible (OSA) deployment on CentOS, I found that keepalived was not starting properly at boot time:

The latest release of the Red Hat Enterprise Linux Security Technical Implementation Guide (STIG) was published last week.

I’ve been working through some patches to OpenStack-Ansible lately to optimize how we configure yum repositories in our deployments.

Tons of improvements made their way into the ansible-hardening role in preparation for the OpenStack Pike release next month.

The interest in the openstack-ansible-security role has taken off faster than I expected, and one piece of constant feedback I received was around the name of the role.

I merged some initial Debian support into the openstack-ansible-security role and ran into an issue enabling AppArmor.

Although OpenStack-Ansible doesn’t fully support CentOS 7 yet, the support is almost ready.

DISA’s final release of the Red Hat Enterprise Linux (RHEL) 7 Security Technical Implementation Guide (STIG) came out a few weeks ago and it has plenty of improvements and changes.

When I came back from the holiday break, I found that the openstack-ansible-security role wasn’t passing tests any longer.

The 2016 Red Hat Summit is underway in San Francisco this week and I delivered a talk with Robyn Bergeron earlier today.

Today is the second day of the OpenStack Summit in Austin and I offered up a talk on host security hardening in OpenStack clouds.

Let’s Encrypt has taken the world by storm by providing free SSL certificates that can be renewed via automated methods.

The blog posts have slowed down a bit lately because I’ve been heads down on a security project at work.

I started working on the Ansible CIS playbook for CentOS and RHEL 6 back in 2014 and I’ve made a few changes to increase quality and make it easier to use.

Fedora 22 will be arriving soon and it’s easy to test on Rackspace’s cloud with my Ansible playbook:

The world of containers is constantly evolving lately.

Fedora 21 reached Alpha status last month and will reach beta status at the end of October.

Working with ansible is enjoyable, but it’s a little bland when you use it with Jenkins.