All authors
Claude Skills by redhat-cop
github.com/redhat-cop62 skills0 installs47 views
- Accounts LocalMaintains the ansible/roles/accounts_local Ansible role that creates/deletes local users and groups, sets passwords, sudoers entries, supplementary groups, and SSH authorized keys, as part of the Linux SOE. Use when checking or fixing local (non-domain) account/group state.Votes: 0GitHub stars: 5
- Accounts PolicyMaintains the ansible/roles/accounts_policy Ansible role that deploys local account, login, PAM, and password-quality configuration (login.defs, pwquality.conf, faillock.conf, limits.conf, authselect profile) on RHEL-family systems as part of the Linux SOE. Use when checking or changing local account/authentication policy.Votes: 0GitHub stars: 5
- Audit SetupMaintains the ansible/roles/audit_setup Ansible role that installs auditd, deploys an auditd.conf and rules file from role-provided templates, and manages the locked-rules reload/reboot behavior on RHEL-family systems as part of the Linux SOE. Use when checking or configuring auditd/audit rules.Votes: 0GitHub stars: 5
- Boot ParametersMaintains the ansible/roles/boot_parameters Ansible role that enables/disables GRUB kernel command-line parameters via grubby, sets the boot timeout and optional bootloader password, and can reboot the host to apply changes, on RHEL-family systems as part of the Linux SOE. Use when checking or changing kernel boot parameters. NOT audit-only — remediation is automatic and can trigger a reboot.Votes: 0GitHub stars: 5
- CertificatesMaintains the ansible/roles/certificates Ansible role that manages the system CA trust store (anchors, blocklist, extended-format files) via update-ca-trust, as part of the Linux SOE. Use when checking or fixing trusted/blocked CA certificates.Votes: 0GitHub stars: 5
- Configure RhelRuns ansible/configure_rhel.yml, the general RHEL host baseline, letting the user choose which of its 43 domains actually apply for a given run via the configure_rhel_domains variable — without editing the playbook. Use whenever someone wants to audit/remediate "the baseline" with a non-default set of domains, wants to know what's on/off by default, or asks to enable something like usbguard, accounts_local, cron, etc. that isn't active out of the box.Votes: 0GitHub stars: 5
- Connect LinuxRuns ansible/connect_linux.yml, a read-only pre-flight check that confirms SSH reachability and that `become` actually reaches root on a RHEL-family host, as part of the Linux SOE. Use before running any other SOE playbook against a host that's new, unfamiliar, or suspected of being unreachable/misconfigured, or when asked to "test connectivity" / "check access" to a host.Votes: 0GitHub stars: 5
- Cron SetupMaintains the ansible/roles/cron_setup Ansible role that installs cronie, manages /etc/cron.allow and /etc/cron.deny, and declaratively manages crontab entries via ansible.builtin.cron on RHEL-family systems as part of the Linux SOE. Use when checking or changing crond, cron.allow/cron.deny, or scheduled cron jobs.Votes: 0GitHub stars: 5
- Dns CacheMaintains the ansible/roles/dns_cache Ansible role that enables or disables local DNS caching via dnsmasq, systemd-resolved, or nscd, as part of the Linux SOE. Use when checking or fixing DNS caching configuration.Votes: 0GitHub stars: 5
- Domain AdMaintains the ansible/roles/domain_ad Ansible role that joins or leaves an Active Directory domain via realmd/adcli and configures sssd/authselect, as part of the Linux SOE. Use when checking or fixing AD domain membership.Votes: 0GitHub stars: 5
- Etc HostsMaintains the ansible/roles/etc_hosts Ansible role that fully manages /etc/hosts content (header, self-entry, static entries) and rebuilds initramfs on change, as part of the Linux SOE. Use when checking or fixing /etc/hosts entries.Votes: 0GitHub stars: 5
- Files AclMaintains the ansible/roles/files_acl Ansible role that applies POSIX ACL entries to paths via ansible.posix.acl, as part of the Linux SOE. Use when checking or fixing filesystem ACLs on specific paths.Votes: 0GitHub stars: 5
- Files CopyMaintains the ansible/roles/files_copy Ansible role that copies files/directories (ansible.builtin.copy) and renders templates (ansible.builtin.template) to arbitrary destinations, as part of the Linux SOE. Use when checking or fixing the content of specific deployed config files.Votes: 0GitHub stars: 5
- Files CreateMaintains the ansible/roles/files_create Ansible role that creates directories, empty files, and symlinks with specified ownership/mode via ansible.builtin.file, as part of the Linux SOE. Use when checking or fixing the existence/permissions of specific paths.Votes: 0GitHub stars: 5
- Files FetchMaintains the ansible/roles/files_fetch Ansible role that pulls files from managed hosts back to the control node via ansible.builtin.fetch, as part of the Linux SOE. Use when checking or fixing which remote files/directories should be collected centrally.Votes: 0GitHub stars: 5
- Files GetMaintains the ansible/roles/files_get Ansible role that downloads files onto managed hosts over the network via ansible.builtin.get_url, as part of the Linux SOE. Use when checking or fixing files that should be present via URL download.Votes: 0GitHub stars: 5
- Files PropertiesMaintains the ansible/roles/files_properties Ansible role that sets ownership/mode/other file-module properties on existing paths via ansible.builtin.file, as part of the Linux SOE. Use when checking or fixing ownership or permissions on specific files.Votes: 0GitHub stars: 5
- Files RemoveMaintains the ansible/roles/files_remove Ansible role that removes files/directories by exact path or shell glob, as part of the Linux SOE. Use when checking or fixing which files/directories should be absent — including internally by other roles such as certificates for exclusive-mode cleanup.Votes: 0GitHub stars: 5
- Files UnarchiveMaintains the ansible/roles/files_unarchive Ansible role that extracts archives to a destination via ansible.builtin.unarchive, as part of the Linux SOE. Use when checking or fixing extracted-archive content on a host.Votes: 0GitHub stars: 5
- FirewallMaintains the ansible/roles/firewall Ansible role that provides basic firewalld enable/disable, default-zone, and open-ports/services management, as part of the Linux SOE. Use when checking or fixing basic firewall state — for more complete firewall configuration, note the role explicitly defers to system_roles.firewall.Votes: 0GitHub stars: 5
- Guest AgentMaintains the ansible/roles/guest_agent Ansible role that detects the hypervisor a system runs under (Azure/Hyper-V, KVM/QEMU, Nutanix AHV, VMware) via Ansible facts and installs/enables the matching guest agent while removing others, as part of the Linux SOE. Use when checking guest-agent presence or state on a virtual machine.Votes: 0GitHub stars: 5
- Ima Evm SetupMaintains the ansible/roles/ima_evm_setup Ansible role that enables or disables IMA/EVM file-integrity appraisal via a signed policy file, as part of the Linux SOE. Use when checking or fixing IMA/EVM state. Only applies on RHEL 9.7+; no-ops (with a gathered-fact check) on older releases.Votes: 0GitHub stars: 5
- Ipv6 SetupMaintains the ansible/roles/ipv6_setup Ansible role that enables/disables IPv6 via sysctl, the ipv6.disable grubby boot parameter, and NetworkManager/ifcfg connection files, and reboots on change, as part of the Linux SOE. Use when checking or fixing IPv6 enablement.Votes: 0GitHub stars: 5
- Load Balancer SetupRuns ansible/load_balancer_setup.yml to configure a RHEL-family host as an haproxy + keepalived load balancer, as part of the Linux SOE. Use when asked to set up, check, or fix a load balancer host, haproxy, or keepalived — as distinct from the general host baseline covered by configure_rhel.yml.Votes: 0GitHub stars: 5
- Motd IssueMaintains the ansible/roles/motd_issue Ansible role that deploys /etc/motd (or /etc/motd.d on RHEL 9+) and /etc/issue.d + /etc/issue.net from role-provided templates on RHEL-family systems as part of the Linux SOE. Use when checking or standardizing login banners. Does NOT manage the sshd pre-auth banner.Votes: 0GitHub stars: 5
- Mount SetupMaintains the ansible/roles/mount_setup Ansible role that enables or disables filesystem mounts (local or NFS/CIFS) via /etc/fstab, as part of the Linux SOE. Use when checking or fixing mount/fstab state.Votes: 0GitHub stars: 5
- Multipath SetupMaintains the ansible/roles/multipath_setup Ansible role that installs device-mapper-multipath and deploys /etc/multipath.conf and bindings, restarting or rebooting on change, as part of the Linux SOE. Use when checking or fixing multipath configuration.Votes: 0GitHub stars: 5
- Nfs Client SetupRuns ansible/nfs_client_setup.yml to configure a RHEL-family host as an NFS client mounting one export, as part of the Linux SOE. Use when asked to set up, check, or fix an NFS client mount — as distinct from the general host baseline (configure_rhel.yml) or an NFS server (nfs_server_setup).Votes: 0GitHub stars: 5
- Nfs Server SetupRuns ansible/nfs_server_setup.yml to configure a RHEL-family host as an NFS server exporting one directory, as part of the Linux SOE. Use when asked to set up, check, or fix an NFS server/export — as distinct from the general host baseline (configure_rhel.yml) or an NFS client (nfs_client_setup).Votes: 0GitHub stars: 5
- Packages InstallMaintains the ansible/roles/packages_install Ansible role that installs a baseline package set via dnf, as part of the Linux SOE. Use when checking or fixing the baseline troubleshooting/utility package set — note this is distinct from the troubleshooting_tools role, which manages a different, smaller package list plus optional PCP.Votes: 0GitHub stars: 5
- Packages RemoveMaintains the ansible/roles/packages_remove Ansible role that removes a denylist of packages (and optionally unneeded leaf packages) via dnf, as part of the Linux SOE. Use when checking or fixing which packages should be absent.Votes: 0GitHub stars: 5
- Packages VerifyMaintains the ansible/roles/packages_verify Ansible role that runs rpm-level package verification (missing files, modified content) against a chosen package list, as part of the Linux SOE. Use when checking for tampered or incomplete package installations.Votes: 0GitHub stars: 5
- Performance TuningMaintains the ansible/roles/performance_tuning Ansible role that sets the active tuned profile, as part of the Linux SOE. Use when checking or fixing the system's tuned performance profile.Votes: 0GitHub stars: 5
- Repository SetupMaintains the ansible/roles/repository_setup Ansible role that manages yum.repos.d files and Red Hat Subscription Management (RHSM) registration/repo enablement, as part of the Linux SOE. Use when checking or fixing repo files, RHSM subscription state, or enabled/disabled RHSM repo IDs.Votes: 0GitHub stars: 5
- Rescue ImageMaintains the ansible/roles/rescue_image Ansible role that enables or disables kernel rescue image generation, as part of the Linux SOE. Use when checking or fixing whether a rescue image is (re)built on kernel install.Votes: 0GitHub stars: 5
- Resolver ConfigurationMaintains the ansible/roles/resolver_configuration Ansible role that manages how /etc/resolv.conf is populated (via NetworkManager, direct write, symlink, or left alone), as part of the Linux SOE. Use when checking or fixing DNS resolver configuration — pairs with the dns_cache role, e.g. when using systemd-resolved.Votes: 0GitHub stars: 5
- Root PasswordMaintains the ansible/roles/root_password Ansible role that sets the root account password, as part of the Linux SOE. Use when checking or fixing the root password.Votes: 0GitHub stars: 5
- Scap ComplianceMaintains the ansible/roles/scap_compliance Ansible role that runs oscap against a chosen OpenSCAP profile (default cis) and can auto-remediate findings, as part of the Linux SOE. Use when checking or fixing OpenSCAP/SCAP compliance.Votes: 0GitHub stars: 5
- Scap SatelliteMaintains the ansible/roles/scap_satellite Ansible role that runs foreman_scap_client against Satellite/Capsule-defined compliance policies, as part of the Linux SOE. Use when checking OpenSCAP compliance reported through Satellite rather than run locally (see scap_compliance for a standalone oscap run).Votes: 0GitHub stars: 5
- SebooleansMaintains the ansible/roles/sebooleans Ansible role that enables/disables specific persistent SELinux booleans, as part of the Linux SOE. Use when checking or fixing SELinux boolean state.Votes: 0GitHub stars: 5
- Security HardeningMaintains the ansible/roles/security_hardening Ansible role that verifies Secure Boot/FIPS state, sets kernel lockdown mode, SELinux mode, the system crypto policy, and SCP protocol availability, as part of the Linux SOE. Use when checking or fixing these platform-level security settings.Votes: 0GitHub stars: 5
- Service StateMaintains the ansible/roles/service_state Ansible role that masks/unmasks, enables/disables, and restarts/reloads systemd units by declarative lists, as part of the Linux SOE. Use when checking or fixing which services should be running, stopped, or masked.Votes: 0GitHub stars: 5
- Shell ProfileMaintains the ansible/roles/shell_profile Ansible role that deploys a shell profile template, as part of the Linux SOE. Use when checking or fixing the system-wide shell profile.Votes: 0GitHub stars: 5
- SoeOrchestrates the Linux Standard Operating Environment domain roles across ansible/configure_rhel.yml (general host baseline) and the purpose-built playbooks (connect_linux.yml, load_balancer_setup.yml, nfs_client_setup.yml, nfs_server_setup.yml, update_rhel.yml) to audit or remediate a RHEL-family host, and summarizes the results. Use when asked to check, audit, or bring a system into compliance with "the SOE" or "the standard operating environment" as a whole, rather than a single domain.Votes: 0GitHub stars: 5
- Splunk ForwarderMaintains the ansible/roles/splunk_forwarder Ansible role that configures the Splunk universal forwarder's deployment-server pointer and local splunk user, as part of the Linux SOE. Use when checking or fixing Splunk forwarder deployment-server configuration.Votes: 0GitHub stars: 5
- Sshd ConfigurationMaintains the ansible/roles/sshd_configuration Ansible role that manages sshd_config options declaratively, resets config to RPM defaults, and validates every edit with sshd -t before applying, as part of the Linux SOE. Use when checking or fixing SSH daemon configuration.Votes: 0GitHub stars: 5
- System CoredumpMaintains the ansible/roles/system_coredump Ansible role that enables/disables systemd-coredump and sets its size cap, as part of the Linux SOE. Use when checking or fixing system-wide coredump behavior.Votes: 0GitHub stars: 5
- System HostnameMaintains the ansible/roles/system_hostname Ansible role that sets /etc/hostname, as part of the Linux SOE. Use when checking or fixing the system hostname.Votes: 0GitHub stars: 5
- System InitMaintains the ansible/roles/system_init Ansible role that performs optional post-install cleanup actions (reboot and/or syslog message), as part of the Linux SOE. Use when asked about post-installation initialization steps — the role's own README states it is by no means mandatory.Votes: 0GitHub stars: 5
- System KeyboardMaintains the ansible/roles/system_keyboard Ansible role that sets the console keymap and console font (via /etc/vconsole.conf, localectl, setfont, and an initramfs rebuild) on RHEL-family systems as part of the Linux SOE. Use when checking or setting the virtual console keymap/font. Does not manage X11 keyboard layout — there is no X11 handling in this role.Votes: 0GitHub stars: 5