Skip to content

Latest commit

 

History

History
65 lines (54 loc) · 1.99 KB

File metadata and controls

65 lines (54 loc) · 1.99 KB
  1. Create a playbook that performs the following on bastion:
  • create directory /home/users
  • create a 5 gig logical volume group called vg01
  • creates a 1 gig logical volume call users01,
  • create a xfs file system on logical volume users01
  • mount volumes under /home/users and should be persistent

Note that if you are working with system that does not have a block device to work with, you can create one with a disk image and a loopback:

fallocate -l 1G /opt/disk01.img
losetup /dev/loop1 /opt/disk01.img
  1. Create a playbook on bastion to create:
  • Create in /home/sol
  • Usernames and passwords will be will be:
    • alex - L4sagna
    • naomi - k1bBle
    • james - c0ff33
    • amos - h3nnEsy
  • Only naomi and james should have shell access using bash
  • All the users will be in the group crew
  • The users will be created with tag users
  • Applied to hosts in group bastion
  • Password to protect the users will be prot0mo|eculE
  1. Create playbook on all hosts to:

    • Install postfix
    • Enable postfix on startup
    • Launch postfix
  2. Create role on to:

    • Install squid
    • Configure squid to block facebook.
    • Restart squid
  3. Create role on to:

    • Install vsftpd
    • disable anonymous ftp
    • restart vsftpd
  4. Create role on group to:

    • Install samba
    • Enable for startup
    • Configure workgroup as truman
    • restart samba
  5. Install via the following via ad-hoc

    • elinks on web and app server groups
    • ftp and smbclient on database groups Be sure to wrapp ad-hoc command within the shell script
  6. Consolidate 2, 4, 5, and 6 into one playbook with the following:

    • web should be tagged bastion
    • squid role be tagged filter
    • vsftp role should be tagged ftp_server
    • smb role should be tagged file_sharing

The play should run against all hosts, but each role should only run as follows:

  • web - bastion group
  • squid - app group
  • vsftp - database group
  • smb - web group