Steps to update the RedHatOfficial ansible roles from the upstream ComplianceAsCode content repo

README.md

How to update the RedHatOfficial ansible roles

Checkout the code

version=1.73
git clone https://github.com/ComplianceAsCode/content.git content-${version}
pushd content-${version}
git checkout -b "v0.${version}" "v0.${version}"

Install dependencies for utils/ansible_playbook_to_role.py

sudo dnf install scap-security-guide
pip install --user sh PyYAML

Launch the build container in the background. It run sleep infinity

podman run --rm --name content -d -v ${PWD}:/home/oscap/content:Z quay.io/danclark/content:fedora

Kickoff a build. RHEL 7 in this example (Deprecated)

podman exec -ti --workdir=/home/oscap/content content ./build_product rhel7

Upload for RHEL 7 (Deprecated)

for p in cis anssi_nt28_minimal anssi_nt28_intermediary anssi_nt28_high anssi_nt28_enhanced stig cjis hipaa ospp pci-dss rht-ccp cui
do
  echo "Processing RHEL 7 profile ${p}"
  PYTHONPATH=. python3 utils/ansible_playbook_to_role.py  --build-playbooks-dir ./build/ansible/ --profile ${p} --product rhel7 --tag-release --token "${GIT_TOKEN}"
done

Kickoff a build. RHEL 8 in this example

rm -rf build
mkdir build
git checkout build/.gitkeep
podman exec -ti --workdir=/home/oscap/content content ./build_product rhel8

Upload for RHEL 8

for p in cis anssi_bp28_minimal anssi_bp28_intermediary anssi_bp28_high anssi_bp28_enhanced stig cjis hipaa ospp pci-dss rht-ccp cui 
do
  echo "Processing RHEL 8 profile ${p}"
  PYTHONPATH=. python3 utils/ansible_playbook_to_role.py  --build-playbooks-dir ./build/ansible/ --profile ${p} --product rhel8 --tag-release --token "${GIT_TOKEN}"
done

Kickoff a build. RHEL 9 in this example

rm -rf build
mkdir build
git checkout build/.gitkeep
podman exec -ti --workdir=/home/oscap/content content ./build_product rhel9

Upload for RHEL 9

for p in cis anssi_bp28_minimal anssi_bp28_intermediary anssi_bp28_high anssi_bp28_enhanced stig cjis hipaa ospp pci-dss rht-ccp cui e8
do
  echo "Processing RHEL 9 profile ${p}"
  PYTHONPATH=. python3 utils/ansible_playbook_to_role.py  --build-playbooks-dir ./build/ansible/ --profile ${p} --product rhel9 --tag-release --token "${GIT_TOKEN}"
done

Kickoff a build. RHEL 10 in this example

rm -rf build
mkdir build
git checkout build/.gitkeep
podman exec -ti --workdir=/home/oscap/content content ./build_product rhel10

Upload for RHEL 10

for p in anssi_bp28_minimal anssi_bp28_intermediary anssi_bp28_high anssi_bp28_enhanced stig cjis hipaa ospp pci-dss rht-ccp cui e8
do
  echo "Processing RHEL 10 profile ${p}"
  PYTHONPATH=. python3 utils/ansible_playbook_to_role.py  --build-playbooks-dir ./build/ansible/ --profile ${p} --product rhel10 --tag-release --token "${GIT_TOKEN}"
done