diff --git a/.github/workflows/functionnal-tests.yml b/.github/workflows/functionnal-tests.yml index 69c4ae1..9304d2c 100644 --- a/.github/workflows/functionnal-tests.yml +++ b/.github/workflows/functionnal-tests.yml @@ -18,3 +18,11 @@ jobs: uses: actions/checkout@v3 - name: Run the tests debian11 run: ./tests/docker_build_and_run_tests.sh debian11 + functionnal-tests-docker-debian12: + runs-on: ubuntu-latest + continue-on-error: true + steps: + - name: Checkout repo + uses: actions/checkout@v3 + - name: Run the tests debian12 + run: ./tests/docker_build_and_run_tests.sh debian12 diff --git a/tests/docker/Dockerfile.debian12 b/tests/docker/Dockerfile.debian12 new file mode 100644 index 0000000..f10be1c --- /dev/null +++ b/tests/docker/Dockerfile.debian12 @@ -0,0 +1,21 @@ +FROM debian:bookworm + +LABEL vendor="OVH" +LABEL project="debian-cis" +LABEL url="https://github.com/ovh/debian-cis" +LABEL description="This image is used to run tests" + +RUN groupadd -g 500 secaudit && useradd -u 500 -g 500 -s /bin/bash secaudit && install -m 700 -o secaudit -g secaudit -d /home/secaudit + +RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y openssh-server sudo syslog-ng net-tools auditd cron + +COPY --chown=500:500 . /opt/debian-cis/ + +COPY debian/default /etc/default/cis-hardening +RUN sed -i 's#cis-hardening#debian-cis#' /etc/default/cis-hardening + +COPY cisharden.sudoers /etc/sudoers.d/secaudit +RUN sed -i 's#cisharden#secaudit#' /etc/sudoers.d/secaudit + + +ENTRYPOINT ["/opt/debian-cis/tests/launch_tests.sh"]