prod

doku/goss.yaml

@@ -0,0 +1,39 @@
+command:
+  ss -lnt:
+    exit-status: 0
+    stdout:
+    - State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
+    - LISTEN 0      100        127.0.0.1:25        0.0.0.0:*
+    - LISTEN 0      4096         0.0.0.0:5355      0.0.0.0:*
+    - LISTEN 0      4096   127.0.0.53%lo:53        0.0.0.0:*
+    - LISTEN 0      4096               *:22              *:*
+    - LISTEN 0      100            [::1]:25           [::]:*
+    - LISTEN 0      4096            [::]:5355         [::]:*
+    - LISTEN 0      511                *:80              *:*
+    stderr: []
+    timeout: 10000
+  ss -lnu:
+    exit-status: 0
+    stdout:
+    - State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess
+    - UNCONN 0      0            0.0.0.0:58517      0.0.0.0:*
+    - UNCONN 0      0            0.0.0.0:5355       0.0.0.0:*
+    - UNCONN 0      0      127.0.0.53%lo:53         0.0.0.0:*
+    - UNCONN 0      0            0.0.0.0:161        0.0.0.0:*
+    - UNCONN 0      0               [::]:5355          [::]:*
+    stderr: []
+    timeout: 10000
+interface:
+  eth0:
+    exists: true
+    addrs:
+    - 10.121.38.71/24
+    - fe80::f8dc:75ff:fef1:407b/64
+    mtu: 1500
+http:
+  http://10.121.38.71/doku:
+    status: 200
+    allow-insecure: false
+    no-follow-redirects: false
+    timeout: 5000
+    body: [SDIS29]

prod/goss.yaml

@@ -0,0 +1,56 @@
+port:
+  tcp6:8080:
+    listening: true
+    ip:
+    - '::'
+service:
+  mariadb:
+    enabled: true
+    running: true
+user:
+  tomcat:
+    exists: true
+    uid: 1000
+    gid: 1000
+    groups:
+    - tomcat
+    home: /usr/libexec/tomcat10
+    shell: /bin/sh
+group:
+  tomcat:
+    exists: true
+    gid: 1000
+command:
+  ss -lnt:
+    exit-status: 0
+    stdout:
+    - State  Recv-Q Send-Q      Local Address:Port Peer Address:PortProcess
+    - LISTEN 0      4096        127.0.0.53%lo:53        0.0.0.0:*
+    - LISTEN 0      100             127.0.0.1:25        0.0.0.0:*
+    - LISTEN 0      80              127.0.0.1:3306      0.0.0.0:*
+    - LISTEN 0      4096              0.0.0.0:5355      0.0.0.0:*
+    - LISTEN 0      100                     *:8080            *:*
+    - LISTEN 0      4096                    *:22              *:*
+    - LISTEN 0      100                 [::1]:25           [::]:*
+    - LISTEN 0      1      [::ffff:127.0.0.1]:8005            *:*
+    - LISTEN 0      4096                 [::]:5355         [::]:*
+    stderr: []
+    timeout: 10000
+  ss -lnu:
+    exit-status: 0
+    stdout:
+    - State  Recv-Q Send-Q Local Address:Port  Peer Address:PortProcess
+    - UNCONN 0      0            0.0.0.0:5355       0.0.0.0:*
+    - UNCONN 0      0            0.0.0.0:51026      0.0.0.0:*
+    - UNCONN 0      0      127.0.0.53%lo:53         0.0.0.0:*
+    - UNCONN 0      0            0.0.0.0:161        0.0.0.0:*
+    - UNCONN 0      0               [::]:5355          [::]:*
+    stderr: []
+    timeout: 10000
+interface:
+  eth0:
+    exists: true
+    addrs:
+    - 10.121.38.70/24
+    - fe80::38c9:63ff:fe88:897a/64
+    mtu: 1500

syslog/journald.conf

@@ -0,0 +1,44 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See journald.conf(5) for details.
+
+[Journal]
+#Storage=auto
+#Compress=yes
+#Seal=yes
+#SplitMode=uid
+#SyncIntervalSec=5m
+#RateLimitIntervalSec=30s
+#RateLimitBurst=10000
+#SystemMaxUse=
+#SystemKeepFree=
+#SystemMaxFileSize=
+#SystemMaxFiles=100
+#RuntimeMaxUse=
+#RuntimeKeepFree=
+#RuntimeMaxFileSize=
+#RuntimeMaxFiles=100
+#MaxRetentionSec=
+#MaxFileSec=1month
+ForwardToSyslog=yes
+#ForwardToKMsg=no
+#ForwardToConsole=no
+#ForwardToWall=yes
+#TTYPath=/dev/console
+#MaxLevelStore=debug
+#MaxLevelSyslog=debug
+#MaxLevelKMsg=notice
+#MaxLevelConsole=info
+#MaxLevelWall=emerg
+#LineMax=48K
+#ReadKMsg=yes
+#Audit=no

syslog/rsyslog

@@ -0,0 +1,25 @@
+/var/log/syslog
+/var/log/mail.info
+/var/log/mail.warn
+/var/log/mail.err
+/var/log/mail.log
+/var/log/daemon.log
+/var/log/kern.log
+/var/log/auth.log
+/var/log/user.log
+/var/log/lpr.log
+/var/log/cron.log
+/var/log/debug
+/var/log/messages
+{
+	rotate 4
+	weekly
+	missingok
+	notifempty
+	compress
+	delaycompress
+	sharedscripts
+	postrotate
+		/usr/lib/rsyslog/rsyslog-rotate
+	endscript
+}

syslog/rsyslog-cli.conf

@@ -0,0 +1,93 @@
+# /etc/rsyslog.conf configuration file for rsyslog
+#
+# For more information install rsyslog-doc and see
+# /usr/share/doc/rsyslog-doc/html/configuration/index.html
+
+
+#################
+#### MODULES ####
+#################
+
+module(load="imuxsock") # provides support for local system logging
+module(load="imklog")   # provides kernel logging support
+#module(load="immark")  # provides --MARK-- message capability
+
+# provides UDP syslog reception
+#module(load="imudp")
+#input(type="imudp" port="514")
+
+# provides TCP syslog reception
+#module(load="imtcp")
+#input(type="imtcp" port="514")
+
+
+###########################
+#### GLOBAL DIRECTIVES ####
+###########################
+
+#
+# Use traditional timestamp format.
+# To enable high precision timestamps, comment out the following line.
+#
+$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
+
+#
+# Set the default permissions for all log files.
+#
+$FileOwner root
+$FileGroup adm
+$FileCreateMode 0640
+$DirCreateMode 0755
+$Umask 0022
+
+#
+# Where to place spool and state files
+#
+$WorkDirectory /var/spool/rsyslog
+
+#
+# Include all config files in /etc/rsyslog.d/
+#
+$IncludeConfig /etc/rsyslog.d/*.conf
+
+
+###############
+#### RULES ####
+###############
+
+#
+# First some standard log files.  Log by facility.
+#
+auth,authpriv.*			/var/log/auth.log
+*.*;auth,authpriv.none		-/var/log/syslog
+#cron.*				/var/log/cron.log
+daemon.*			-/var/log/daemon.log
+kern.*				-/var/log/kern.log
+lpr.*				-/var/log/lpr.log
+mail.*				-/var/log/mail.log
+user.*				-/var/log/user.log
+
+#
+# Logging for the mail system.  Split it up so that
+# it is easy to write scripts to parse these files.
+#
+mail.info			-/var/log/mail.info
+mail.warn			-/var/log/mail.warn
+mail.err			/var/log/mail.err
+
+#
+# Some "catch-all" log files.
+#
+*.=debug;\
+	auth,authpriv.none;\
+	mail.none		-/var/log/debug
+*.=info;*.=notice;*.=warn;\
+	auth,authpriv.none;\
+	cron,daemon.none;\
+	mail.none		-/var/log/messages
+
+#
+# Emergencies are sent to everybody logged in.
+#
+*.emerg				:omusrmsg:*
+*.* @192.168.0.40:514

syslog/rsyslog.conf

@@ -0,0 +1,92 @@
+# /etc/rsyslog.conf configuration file for rsyslog
+#
+# For more information install rsyslog-doc and see
+# /usr/share/doc/rsyslog-doc/html/configuration/index.html
+
+
+#################
+#### MODULES ####
+#################
+
+module(load="imuxsock") # provides support for local system logging
+module(load="imklog")   # provides kernel logging support
+#module(load="immark")  # provides --MARK-- message capability
+
+# provides UDP syslog reception
+module(load="imudp")
+input(type="imudp" port="514")
+
+# provides TCP syslog reception
+#module(load="imtcp")
+#input(type="imtcp" port="514")
+
+
+###########################
+#### GLOBAL DIRECTIVES ####
+###########################
+
+#
+# Use traditional timestamp format.
+# To enable high precision timestamps, comment out the following line.
+#
+$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
+
+#
+# Set the default permissions for all log files.
+#
+$FileOwner root
+$FileGroup adm
+$FileCreateMode 0640
+$DirCreateMode 0755
+$Umask 0022
+
+#
+# Where to place spool and state files
+#
+$WorkDirectory /var/spool/rsyslog
+
+#
+# Include all config files in /etc/rsyslog.d/
+#
+$IncludeConfig /etc/rsyslog.d/*.conf
+
+
+###############
+#### RULES ####
+###############
+
+#
+# First some standard log files.  Log by facility.
+#
+auth,authpriv.*			/var/log/auth.log
+*.*;auth,authpriv.none		-/var/log/syslog
+#cron.*				/var/log/cron.log
+daemon.*			-/var/log/daemon.log
+kern.*				-/var/log/kern.log
+lpr.*				-/var/log/lpr.log
+mail.*				-/var/log/mail.log
+user.*				-/var/log/user.log
+
+#
+# Logging for the mail system.  Split it up so that
+# it is easy to write scripts to parse these files.
+#
+mail.info			-/var/log/mail.info
+mail.warn			-/var/log/mail.warn
+mail.err			/var/log/mail.err
+
+#
+# Some "catch-all" log files.
+#
+*.=debug;\
+	auth,authpriv.none;\
+	mail.none		-/var/log/debug
+*.=info;*.=notice;*.=warn;\
+	auth,authpriv.none;\
+	cron,daemon.none;\
+	mail.none		-/var/log/messages
+
+#
+# Emergencies are sent to everybody logged in.
+#
+*.emerg				:omusrmsg:*