charm-neutron-api/hooks/charmhelpers/contrib/hardening
Alex Kavanagh 88c3c9d5a4 Updates to enable jammy and finalise charmcraft builds
- Add 22.04 to charmcraft.yaml
- Update metadata to include jammy
- Remove impish from metadata
- Update osci.yaml to include py3.10 default job
- Modify tox.ini to remove py35,py36,py37 tox target and add py310
  target.
- ensure that the openstack-origin is yoga
- charmhelpers sync

Change-Id: I9e03f8032c4e66586feec2bbf5f07e93b89355cc
2022-04-07 12:20:45 +01:00
..
apache Updates to enable jammy and finalise charmcraft builds 2022-04-07 12:20:45 +01:00
audits Updates to enable jammy and finalise charmcraft builds 2022-04-07 12:20:45 +01:00
defaults Fix alphanumeric comparisons for openstack and ubuntu releases 2017-03-28 17:30:14 +01:00
host Updates to enable jammy and finalise charmcraft builds 2022-04-07 12:20:45 +01:00
mysql Updates to enable jammy and finalise charmcraft builds 2022-04-07 12:20:45 +01:00
ssh Fix alphanumeric comparisons for openstack and ubuntu releases 2017-03-28 17:30:14 +01:00
__init__.py Resync charmhelpers for licensing change 2016-07-06 16:36:29 +01:00
harden.py Updates to enable jammy and finalise charmcraft builds 2022-04-07 12:20:45 +01:00
README.hardening.md Add hardening support 2016-03-31 10:40:23 +01:00
templating.py Updates to enable jammy and finalise charmcraft builds 2022-04-07 12:20:45 +01:00
utils.py Updates to enable jammy and finalise charmcraft builds 2022-04-07 12:20:45 +01:00

Juju charm-helpers hardening library

Description

This library provides multiple implementations of system and application hardening that conform to the standards of http://hardening.io/.

Current implementations include:

  • OS
  • SSH
  • MySQL
  • Apache

Requirements

  • Juju Charms

Usage

  1. Synchronise this library into your charm and add the harden() decorator (from contrib.hardening.harden) to any functions or methods you want to use to trigger hardening of your application/system.

  2. Add a config option called 'harden' to your charm config.yaml and set it to a space-delimited list of hardening modules you want to run e.g. "os ssh"

  3. Override any config defaults (contrib.hardening.defaults) by adding a file called hardening.yaml to your charm root containing the name(s) of the modules whose settings you want override at root level and then any settings with overrides e.g.

    os: general: desktop_enable: True

  4. Now just run your charm as usual and hardening will be applied each time the hook runs.