openstack
/
charm-glance
Code Issues Proposed changes
charm-glance/charmhelpers/contrib/hardening
History
Liam Young 9d60f159e7 When resuming, exclude haproxy 
When resuming services exclude those managed by hacluster, in
this case haproxy. If pacemaker lacks quorum it may shut haproxy
down which will cause this charm to error.

Charmhelper sync included to bring in required
get_managed_services_and_ports method.

Change-Id: I9ede7d45e1d4da457d2228caf0367bf374bd51ea
 		2020-01-25 07:40:22 +00:00
..
apache V3 authtoken update and glance v1 icehouse 2018-10-04 07:48:29 -04:00
audits When resuming, exclude haproxy 2020-01-25 07:40:22 +00:00
defaults Make worker-multiplier sane in container environments 2017-04-26 10:41:48 +01:00
host Make worker-multiplier sane in container environments 2017-04-26 10:41:48 +01:00
mysql Resync charmhelpers for licensing change 2016-07-06 16:33:39 +01:00
ssh Make worker-multiplier sane in container environments 2017-04-26 10:41:48 +01:00
README.hardening.md Add hardening support 2016-03-29 14:26:51 +01:00
__init__.py Resync charmhelpers for licensing change 2016-07-06 16:33:39 +01:00
harden.py Sync charm-helpers 2018-11-07 15:34:15 -06:00
templating.py charm-helpers sync to pickup changes to CephContext 2017-03-09 16:13:21 -03:00
utils.py Resync charmhelpers for licensing change 2016-07-06 16:33:39 +01:00

README.hardening.md

Juju charm-helpers hardening library

Description

This library provides multiple implementations of system and application hardening that conform to the standards of http://hardening.io/.

Current implementations include:

  • OS
  • SSH
  • MySQL
  • Apache

Requirements

  • Juju Charms

Usage

  1. Synchronise this library into your charm and add the harden() decorator (from contrib.hardening.harden) to any functions or methods you want to use to trigger hardening of your application/system.

  2. Add a config option called 'harden' to your charm config.yaml and set it to a space-delimited list of hardening modules you want to run e.g. "os ssh"

  3. Override any config defaults (contrib.hardening.defaults) by adding a file called hardening.yaml to your charm root containing the name(s) of the modules whose settings you want override at root level and then any settings with overrides e.g.

    os: general: desktop_enable: True

  4. Now just run your charm as usual and hardening will be applied each time the hook runs.