Labs for checking and enforcing compliance controls with Puppet Bolt
Important internal note - hydra targets must be built without applying CD4PE Baseline configuration in order for final CIS plan to work.
- fervid-secure_linux_cis: (https://forge.puppet.com/fervid/secure_linux_cis)
- aboe/chrony (>= 0.3.0 < 1.0.0)
- camptocamp/augeas (>= 1.8.0 < 2.0.0)
- puppetlabs/augeas_core (>=1.0.0 <2.0.0)
- camptocamp/kmod (>= 2.3.0 < 3.0.0)
- puppetlabs/stdlib (>=4.13.1 < 7.0.0)
- camptocamp/postfix (>= 1.8.0 < 2.0.0)
- puppetlabs/stdlib (>=4.13.0 <7.0.0)
- camptocamp/augeas (>=1.0.0 <2.0.0)
- puppet/alternatives (>=2.0.0 <4.0.0)
- puppetlabs/mailalias_core (>=1.0.5 <2.0.0)
- herculesteam/augeasproviders_core (>= 2.5.0 < 3.0.0)
- puppetlabs/stdlib (>= 3.2.0 < 7.0.0)
- herculesteam/augeasproviders_grub (>= 3.0.0 < 4.0.0)
- herculesteam/augeasproviders_core (>=2.4.0 < 3.0.0)
- herculesteam/augeasproviders_sysctl (>= 2.3.0 < 3.0.0)
- herculesteam/augeasproviders_core (>=2.4.0 <3.0.0)
- herculesteam/augeasproviders_shellvar (>= 4.0.0 < 5.0.0)
- herculesteam/augeasproviders_core (>=2.4.0 <3.0.0)
- herculesteam/augeasproviders_pam (>= 2.2.0 < 3.0.0)
- herculesteam/augeasproviders_core (>=2.4.0 <3.0.0)
- kemra102/auditd (>= 2.2.0 < 3.0.0)
- puppetlabs-stdlib (>= 4.6.0)
- puppetlabs-concat (>= 1.1.0)
- puppet/alternatives (>= 2.0.0 < 4.0.0)
- puppet/cron (>= 1.3.0 < 2.0.0)
- puppet/logrotate (>= 4.0.0 < 5.0.0)
- puppetlabs/stdlib (>= 4.22.0 < 7.0.0)
- puppetlabs/augeas_core (>= 1.0.0 < 2.0.0)
- puppetlabs/firewall (>= 1.15.3 < 3.0.0)
- puppetlabs/stdlib (>= 4.0.0 < 7.0.0)
- puppetlabs/mailalias_core (>= 1.0.0 < 2.0.0)
- puppetlabs/mount_core (>= 1.0.0 < 2.0.0)
- puppetlabs/ntp (>= 8.0.0 < 9.0.0)
- puppetlabs/stdlib (>= 4.0.0 < 7.0.0)
- puppetlabs/reboot (>= 1.0.0 < 3.0.0)
- puppetlabs/stdlib (>= 4.0.0 <= 7.0.0)
- puppetlabs-iis: (https://forge.puppet.com/puppetlabs/iis)
- puppetlabs/pwshlib (>= 0.4.0 < 2.0.0)