Making test-kitchen work again

[artem-sidorenko]

This PR focuses only on getting test-kitchen work locally again. Anything besides that is out of scope of this PR and will be covered in the further PRs.

The current compliance of puppet-os-hardening to linux-baseline is almost 100% (mainly due to the great work done by @mcgege):

$ kitchen verify centos-7
....
Profile Summary: 52 successful controls, 1 control failure, 1 control skipped
Test Summary: 124 successful, 1 failure, 1 skipped

How to use it:

• You should have virtualbox and vagrant installed
• You should have working ruby, usage of rvm might be a good idea
• You should have bundler installed (otherwise gem install bundler)

$ git clone https://github.com/dev-sec/puppet-os-hardening.git
$ cd puppet-os-hardening
$ git fetch origin pull/112/head:kitchen
$ git checkout kitchen
$ bundler install
$ bundle exec kitchen verify centos-7
$ bundle exec kitchen destroy

Next steps:

• PR with CI integration (MS Azure as a backend)
• Getting everything green
• PDK integration?

[mcgege]

Great work @artem-sidorenko! It took me some time to setup an environment to test this ... Virtualbox in Virtualbox (or VMware) doesn't seem to work (only 32bit guests possible), so I managed to set this up on my Win10 desktop :-)

[mcgege]

Could you test against 42.3?

[artem-sidorenko]

thanks, there is indeed a new bento box available

[mcgege]

Why do you need this? I think using Puppetfile is depreciated ...

[artem-sidorenko]

I remember 4 years ago librarian was state of the art for puppet, is not the case anymore? I took a look to kitchen-puppet and still see librarian there, is there any other way to get the dependencies?

[mcgege]

Well, I just know Puppetfile out of metadata perspective, and there it's not used any more ... but it seems to be used for automatic environment management / deployment, so it's still valid :-)

[artem-sidorenko]

great :-)

[artem-sidorenko]

Virtualbox in Virtualbox (or VMware) doesn't seem to work (only 32bit guests possible), so I managed to set this up on my Win10 desktop :-)

@mcgege respect for getting it running on windows :) I would not manage to do so I guess...

yes, 32bit guests are because of missing support for nested virtualisation within VirtualBox. 32bit mode is a full emulation without VT CPU technology, its so slooow...

[artem-sidorenko]

@mcgege I merge this as it seems to be Ok from your side. I try to provide the next PR in the next days