ASIMP :: Security Platform
ANSIBLE SYSTEM INTEGRITY MANAGEMENT PLATFORM // baselines & hardening
MODE:

Documentation

Home Gitbook & dsom summary index Asimp for ai agents: deep state of mind (dsom) protocol integration Ansible execution environments (ee) & sovereign gitea integration guide Ansible best practices & fqcn standards Ansible playbook and document architecture map Architecture & design Configuration & variables Debian gnu/linux hardening & audit guide Review & adoption of dsom ansible configuration guide (v3.6.2) Diátaxis documentation framework Deep state of mind (dsom) governance framework System architecture & security posture Operational recipes index Execute tool workflows Legal notice & disclaimer Asimp local testing matrix & telemetry spec Lynis auditing & playbook analysis Openscap integration & playbook analysis The enterprise linux openscap operational guide: automated vulnerability auditing, baseline compliance, and safeguarded air gapped remediation Opensuse / suse linux enterprise hardening & audit guide Rootless podman 5+ & quadlet orchestration Asimp standard footer patcher reference Google okf frontmatter patcher reference Ansible config parameters reference Component & tool index Sovereign feedback collector reference Llm xml context compiler reference Role lynis ansible reference Mock scanning utility reference Openwiki emulator specification Sovereign os role patcher reference System core playbooks reference Jekyll pre processor reference Role reporting asimp reference Suse/sled sysctl hardening role reference Role update ubuntu asimp reference Sitemap & link integrity validator reference Enterprise linux cis level 2 audit & hardening guide Local knowledge first & metadata discovery Troubleshooting & fallback behaviors Quickstart onboarding guide Ubuntu 24.04/26.04 lts hardening & audit guide

Reports & SPA

Output of ASIMP Output of Lynis Output of OpenSCAP Portal OpenSCAP Report SPA Requirement Checklist

About ASIMP

ASIMP is an automated framework built with Ansible to assess host compliance, configure OS parameters, secure SSH, and verify integrity.

System Core Playbooks Reference

Ansible >= 9.0.0 OpenSCAP: CIS L2 Lynis: Enabled debsums: Enabled

System Core Playbooks Reference

ASIMP’s execution workflow is controlled by two core playbooks depending on the target host scope.

🧭 Playbook Breakdown

1. play.yml

  • Scope: Designed for multi-node remote configurations.
  • Connection: Typically standard ssh with custom privilege escalation (become: true).

2. play-localhost.yml

  • Scope: Specialized for executing self-hardening on the local host controller node.
  • Connection: connection: local.

3. Distribution-Specific Standalone Playbooks

  • playbooks/rhel_family_cis.yml: Enterprise Linux CIS Level 2 audit and hardening for RHEL, AlmaLinux, Rocky Linux, and Oracle Linux 8, 9, 10.
  • playbooks/ubuntu_lts_hardening.yml: Dedicated audit and hardening workflow for Ubuntu 24.04 LTS and Ubuntu 26.04 LTS.
  • playbooks/debian_hardening.yml: Dedicated audit, package integrity verification (debsums), and hardening for Debian 11, 12, and 13.
  • playbooks/opensuse_hardening.yml: Dedicated audit, dynamic sysctl resource calculation (sysctl-suse-ASIMP), and hardening for openSUSE (Leap, Tumbleweed) and SUSE (SLES, SLED).

🔁 Hardening Phase Mapping

Both playbooks follow the Measure, Harden, Re-Measure workflow:

Playbook Start -> reporting-ASIMP (Pre-Scan) -> OS Hardening -> reporting-ASIMP (Post-Scan) -> End