- Lab
- A Cloud Guru
Using Ansible Modules to Manage Security in Your Environment
Security is paramount in many industries today. Ansible can help make sure your environment is set up as your security office requires by pushing out changes and ensuring that current settings are live. In this lab, we'll practice firewall and SELinux configuration.
Path Info
Table of Contents
-
Challenge
Ensure Ports 80 and 22 Are Open on Webservers
Your playbook should look similar to the following:
``` --- - name: webserver firewall rules hosts: webservers become: yes tasks: - name: ssh firewall rules firewalld: permanent: yes state: enabled immediate: yes service: ssh - name: http firewall rules firewalld: permanent: yes state: enabled immediate: yes service: http ``` -
Challenge
Ensure Ports 5432 and 22 Are Open on dbservers
Your playbook should contain something similar to the following:
``` - name: Set up firewalls on dbservers hosts: dbservers become: yes tasks: - name: ssh firewall rules firewalld: permanent: yes state: enabled immediate: yes service: ssh - name: postgres rules firewalld: permanent: yes state: enabled immediate: yes service: postgresql ``` -
Challenge
Enable SELinux on All Servers
Your playbook should look similar to the following:
``` - name: SELinux hosts: all become: yes tasks: - name: Enable SELinux selinux: state: enforcing policy: targeted ```
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.
