Also in the vein of automation, went ahead and installed an instance
of Jenkins and connected it to SSG:
http://jenkins.ssgproject.org:8080/
Not meant to be permanent right now, but wanted to get something
stood up for us to play with. Martin stood one up for the OpenSCAP
interpreter, which was the source of thinking to stand up a sandbox
for SSG too. There really isn't much to see in the UI, but one thing
it does is integrate into GitHub. Whenever someone issues a pull
request, Jenkins will automagically detect that, apply the patch(s),
and run "make validate."
Check out https://github.com/OpenSCAP/scap-security-guide/pull/45
for an example. Or for the lazy :-), see below:
When you click on Details, you're brought to an overview of the
patch and can even see console output of the build (in case there
were errors):
http://jenkins.ssgproject.org:8080/job/scap-security-guide/24/console
Having this in place should afford the peer reviewers an immediate
answer to "does this validate?" Longer term, this could also enable
unit checks of the OVAL and bash scripts.
Does anyone have experience with Jenkins, thoughts on how we could
begin building out unit tests, or really any thoughts on usefulness
beyond "make validate" on pull requests?