Initial CV-aligned infrastructure portfolio

Rework portfolio around Linux operations, Zabbix monitoring, migration validation, and ELK/Grafana log observability. Add AAP-style LVM resize workflow, Zabbix server/proxy/agent automation assets, Linux/AIX monitoring templates, and updated validation CI.
2026-05-04 17:37:24 +00:00
commit 35e6b139fc
114 changed files with 6422 additions and 0 deletions
@@ -0,0 +1,24 @@
+---
+# Molecule converge playbook - applies roles to test them
+
+- name: Converge
+  hosts: all
+  become: true
+  gather_facts: true
+
+  pre_tasks:
+    - name: Update apt cache
+      apt:
+        update_cache: yes
+        cache_valid_time: 3600
+      when: ansible_os_family == "Debian"
+
+  roles:
+    - role: base_provision
+    - role: hardening
+    - role: patching
+
+  post_tasks:
+    - name: Print Ansible facts
+      debug:
+        var: ansible_facts
@@ -0,0 +1,15 @@
+---
+# Molecule destroy playbook
+
+- name: Destroy
+  hosts: localhost
+  gather_facts: false
+  tasks:
+    - name: Destroy molecule containers
+      docker_container:
+        name: "{{ item }}"
+        state: absent
+        force_kill: yes
+      loop: "{{ molecule_yml.platforms | map(attribute='name') | list }}"
+      register: destroy_result
+      ignore_errors: yes
@@ -0,0 +1,31 @@
+---
+# Molecule configuration for Ansible role testing
+
+driver:
+  name: docker
+
+platforms:
+  - name: ubuntu-22.04
+    image: geerlingguy/docker-ubuntu2204-ansible:latest
+    pre_build_image: true
+    privileged: true
+    volumes:
+      - /sys/fs/cgroup:/sys/fs/cgroup:rw
+
+provisioner:
+  name: ansible
+  config_options:
+    defaults:
+      gathering: smart
+      fact_caching: jsonfile
+      fact_caching_connection: /tmp/ansible_facts
+      fact_caching_timeout: 3600
+      deprecation_warnings: false
+
+verifier:
+  name: ansible
+  directory: molecule/default/tests
+
+lint: |
+  yamllint .
+  ansible-lint
@@ -0,0 +1,32 @@
+---
+# Molecule verify playbook - runs tests to verify roles
+
+- name: Verify
+  hosts: all
+  gather_facts: false
+  tasks:
+    - name: Check if base OS packages are installed
+      shell: dpkg -l | grep -E '(curl|wget|vim|htop)'
+      register: package_check
+      failed_when: package_check.rc not in [0, 1]
+
+    - name: Check SSH configuration
+      stat:
+        path: /etc/ssh/sshd_config
+      register: ssh_config_stat
+      failed_when: not ssh_config_stat.stat.exists
+
+    - name: Check firewall status
+      shell: ufw status | grep -q active
+      register: firewall_check
+      failed_when: false
+
+    - name: Verify admin user exists
+      getent:
+        database: passwd
+        key: infra-admin
+      failed_when: false
+
+    - name: Print verification results
+      debug:
+        msg: "Role verification completed"