Puppet OS hardening

[][1] [][1] [][1] [][2]

Table of Contents

1. Module Description - What the module does and why it is useful
2. Setup - The basics of getting started with os_hardening
   • Setup Requirements
   • Beginning with os_hardening
3. Usage - Configuration options and additional functionality
   • Important for Puppet Enterprise
   • Parameters
   • Hiera usage
   • Note about wanted/unwanted packages and disabled services
4. Limitations - OS compatibility, etc.
5. Development - Guide for contributing to the module
6. Testing - Quality gates for your changes in the code
   • Local Testing
   • PDK Tests
   • Integration Tests (Docker)
   • Integration Tests (DigitalOcean)
   • CI testing of PRs & forks
7. Get in touch
8. Contributors + Kudos
9. License and Author

Module Description

This Puppet module provides secure configuration of your base OS with hardening and is part of the DevSec Hardening Framework.

Setup

Setup Requirements

• Puppet OpenSource or Enterprise
• Module stdlib
• Module sysctl

Beginning with os_hardening

After adding this module, you can use the class:

class { 'os_hardening': }

All parameters are contained within the main os_hardening class, so you just have to pass them like this:

class { 'os_hardening':
  enable_ipv4_forwarding => true,
}

Usage

IMPORTANT for Puppet Enterprise

If you are using this module in a PE environment, you have to set pe_environment = true Otherwise puppet will drop an error (duplicate resource)!

Parameters