---
- hosts: all
  tasks:
  - name: IPv6 privacy extensions are disabled
    shell: grep 0 /proc/sys/net/ipv6/conf/all/use_tempaddr
  - name: SSH password authentication is disabled
    shell: grep 'PasswordAuthentication no' /etc/ssh/sshd_config
  - name: /nonexistant should not exist
    shell: test ! -e /nonexistent

---
- hosts: all
  tasks:
  - name: IPv6 privacy extensions are disabled
    shell: grep 0 /proc/sys/net/ipv6/conf/all/use_tempaddr
  - name: SSH password authentication is disabled
    shell: grep 'PasswordAuthentication no' /etc/ssh/sshd_config
  - name: /nonexistant should not exist
    shell: test ! -e /nonexistent
  - name: Upstart should not report any failed services
    shell: 'if dmesg | egrep "init: \w+ main process \([0-9]+\) terminated with status [0-9]+"; then false; else true; fi'

Check dmesg for anomalous service failures
Check dmesg for anomalous service failures

This should catch things like our starting keystone before memcached,
and neutron-l3-agent without a pidfile directory issues.
