Skip to content

Ansible Assessment

Before you begin...

  • Ensure with your instructor that your instance has been reset
  • Make sure you can login to your instance using your account and password (see here for reference)

Instructions

  • Create Ansible playbooks that will satisfy the Tasks below. The playbooks must be created and ran in i[1-9]-a server, to be applied to i[1-9]-b server
  • Note: Your servers will be rebooted after you've taken your exam. The b server will be destroyed.

Tasks

Task 1: Package Management

  1. (5 pts) Install the necessary package to install the nmap command
  2. (5 pts) Remove the package that contains the bc command

Task 2: File Compression

  1. (10 pts) Make a copy of /etc/resolv.conf and name the copy resolv_backup. Compress the resolv_backup to a gzip archive named /root/gzbackups/resolv_copy.gz
  2. (5 pts) Download https://getsamplefiles.com/download/tar/sample-1.tar. Once done, extract its contents into a directory named /root/extract/sample-1/

Task 3: User Environment

  1. (5 pts) Create a new directory named /root/secure_data. Set the permissions so that the owner can read, write, and execute, while the group and others have no permissions
  2. (10 pts) Add a local user named hanna with a home folder set to /mnt/data/hanna_home
  3. (5 pts) Make hanna a sudoer
  4. (10 pts) Create an empty file named /root/important_data.txt. Change the permissions of important_data.txt so that only the owner has read, write, and execute permissions, the group has only read and write, and others have no access to the file. Make hanna the owner of the file

Task 4: Storage Management

  1. (5 pts) Create an MBR partition in /dev/sdb with a size of 256MB with partition type of Linux
  2. (10 pts) Format /dev/sdb1 to ext4 and mount it to /mnt/data. Ensure that the mount is persistent and will be mounted during system bootup

Task 5: Network Management

  1. (10 pts) Allow port 1100 (TCP) in firewalld's public zone

Task 6: Service Management

  1. (5 pts) Ensure that firewalld service is running and will run upon boot-up. Install the service if it's non-existent
  2. (15 pts) Ensure that httpd service is running and will run upon boot-up. Install the service if it's non-existent. http and secured http must be added in firewalld's public zone
  3. (5 pts) Service sssd must not be running and must not be run upon boot-up