Merge pull request 'feat: provision VMs for mCaptcha/dos/demo-server, mCaptcha/dos/locust, mCaptcha/mCaptcha' (#1) from dos into master
Reviewed-on: #1
This commit is contained in:
commit
458d774f99
25 changed files with 1306 additions and 0 deletions
161
.gitignore
vendored
Normal file
161
.gitignore
vendored
Normal file
|
@ -0,0 +1,161 @@
|
|||
venv
|
||||
# Byte-compiled / optimized / DLL files
|
||||
__pycache__/
|
||||
*.py[cod]
|
||||
*$py.class
|
||||
|
||||
# C extensions
|
||||
*.so
|
||||
|
||||
# Distribution / packaging
|
||||
.Python
|
||||
build/
|
||||
develop-eggs/
|
||||
dist/
|
||||
downloads/
|
||||
eggs/
|
||||
.eggs/
|
||||
lib/
|
||||
lib64/
|
||||
parts/
|
||||
sdist/
|
||||
var/
|
||||
wheels/
|
||||
share/python-wheels/
|
||||
*.egg-info/
|
||||
.installed.cfg
|
||||
*.egg
|
||||
MANIFEST
|
||||
|
||||
# PyInstaller
|
||||
# Usually these files are written by a python script from a template
|
||||
# before PyInstaller builds the exe, so as to inject date/other infos into it.
|
||||
*.manifest
|
||||
*.spec
|
||||
|
||||
# Installer logs
|
||||
pip-log.txt
|
||||
pip-delete-this-directory.txt
|
||||
|
||||
# Unit test / coverage reports
|
||||
htmlcov/
|
||||
.tox/
|
||||
.nox/
|
||||
.coverage
|
||||
.coverage.*
|
||||
.cache
|
||||
nosetests.xml
|
||||
coverage.xml
|
||||
*.cover
|
||||
*.py,cover
|
||||
.hypothesis/
|
||||
.pytest_cache/
|
||||
cover/
|
||||
|
||||
# Translations
|
||||
*.mo
|
||||
*.pot
|
||||
|
||||
# Django stuff:
|
||||
*.log
|
||||
local_settings.py
|
||||
db.sqlite3
|
||||
db.sqlite3-journal
|
||||
|
||||
# Flask stuff:
|
||||
instance/
|
||||
.webassets-cache
|
||||
|
||||
# Scrapy stuff:
|
||||
.scrapy
|
||||
|
||||
# Sphinx documentation
|
||||
docs/_build/
|
||||
|
||||
# PyBuilder
|
||||
.pybuilder/
|
||||
target/
|
||||
|
||||
# Jupyter Notebook
|
||||
.ipynb_checkpoints
|
||||
|
||||
# IPython
|
||||
profile_default/
|
||||
ipython_config.py
|
||||
|
||||
# pyenv
|
||||
# For a library or package, you might want to ignore these files since the code is
|
||||
# intended to run in multiple environments; otherwise, check them in:
|
||||
# .python-version
|
||||
|
||||
# pipenv
|
||||
# According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
|
||||
# However, in case of collaboration, if having platform-specific dependencies or dependencies
|
||||
# having no cross-platform support, pipenv may install dependencies that don't work, or not
|
||||
# install all needed dependencies.
|
||||
#Pipfile.lock
|
||||
|
||||
# poetry
|
||||
# Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
|
||||
# This is especially recommended for binary packages to ensure reproducibility, and is more
|
||||
# commonly ignored for libraries.
|
||||
# https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
|
||||
#poetry.lock
|
||||
|
||||
# pdm
|
||||
# Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
|
||||
#pdm.lock
|
||||
# pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it
|
||||
# in version control.
|
||||
# https://pdm.fming.dev/#use-with-ide
|
||||
.pdm.toml
|
||||
|
||||
# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
|
||||
__pypackages__/
|
||||
|
||||
# Celery stuff
|
||||
celerybeat-schedule
|
||||
celerybeat.pid
|
||||
|
||||
# SageMath parsed files
|
||||
*.sage.py
|
||||
|
||||
# Environments
|
||||
.env
|
||||
.venv
|
||||
env/
|
||||
venv/
|
||||
ENV/
|
||||
env.bak/
|
||||
venv.bak/
|
||||
|
||||
# Spyder project settings
|
||||
.spyderproject
|
||||
.spyproject
|
||||
|
||||
# Rope project settings
|
||||
.ropeproject
|
||||
|
||||
# mkdocs documentation
|
||||
/site
|
||||
|
||||
# mypy
|
||||
.mypy_cache/
|
||||
.dmypy.json
|
||||
dmypy.json
|
||||
|
||||
# Pyre type checker
|
||||
.pyre/
|
||||
|
||||
# pytype static type analyzer
|
||||
.pytype/
|
||||
|
||||
# Cython debug symbols
|
||||
cython_debug/
|
||||
|
||||
# PyCharm
|
||||
# JetBrains specific template is maintained in a separate JetBrains.gitignore that can
|
||||
# be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
|
||||
# and can be added to the global gitignore or merged into this file. For a more nuclear
|
||||
# option (not recommended) you can uncomment the following to ignore the entire idea folder.
|
||||
#.idea/
|
81
Makefile
Normal file
81
Makefile
Normal file
|
@ -0,0 +1,81 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
|
||||
define ping
|
||||
. ./venv/bin/activate && \
|
||||
ansible-playbook -i $(INVENTORY) -f 10 ./ansible/ping.yml
|
||||
endef
|
||||
|
||||
define configure_base
|
||||
. ./venv/bin/activate && \
|
||||
ansible-playbook -i $(INVENTORY) -f 10 ./ansible/playbook.yml
|
||||
endef
|
||||
|
||||
|
||||
define configure_locust
|
||||
. ./venv/bin/activate && \
|
||||
ansible-playbook -i $(INVENTORY) -f 10 ./ansible/locust/main.yml
|
||||
endef
|
||||
|
||||
define test_base
|
||||
. ./venv/bin/activate && \
|
||||
cd tests/ && \
|
||||
pwd && \
|
||||
py.test --hosts='ansible://all' \
|
||||
-n 10 \
|
||||
--verbose \
|
||||
--ansible-inventory="../${INVENTORY}" \
|
||||
test_basic.py
|
||||
|
||||
endef
|
||||
|
||||
define test_locust
|
||||
. ./venv/bin/activate && \
|
||||
cd tests/locust/ && \
|
||||
py.test --hosts='ansible://mcaptcha_dos*' \
|
||||
-n 10 \
|
||||
--verbose \
|
||||
--ansible-inventory="../../${INVENTORY}" \
|
||||
base.py
|
||||
endef
|
||||
|
||||
|
||||
|
||||
# ```bash
|
||||
# INVENTORY=./terraform/dos/hosts.ini make conf.base
|
||||
# ```
|
||||
conf.base: ## Get all VMs to base level configuration
|
||||
$(call configure_base)
|
||||
|
||||
|
||||
lint: ## Lint source code
|
||||
terraform fmt
|
||||
. ./venv/bin/activate && \
|
||||
ansible-lint --write $(find ansible -type f)
|
||||
. ./venv/bin/activate && black tests/
|
||||
|
||||
# ```bash
|
||||
# INVENTORY=./terraform/dos/hosts.ini make conf.base
|
||||
# ```
|
||||
conf.dos: ## Configure all DoS VMs
|
||||
$(call configure_base)
|
||||
$(call configure_locust)
|
||||
|
||||
# ```bash
|
||||
# INVENTORY=./terraform/dos/hosts.ini make conf.ping
|
||||
# ```
|
||||
conf.ping: ## Ping all DoS VMs
|
||||
$(call ping)
|
||||
|
||||
|
||||
test: ## Run all tests
|
||||
$(call test_base)
|
||||
$(call test_locust)
|
||||
|
||||
test.base: ## Test base configuration on all VMs
|
||||
$(call test_base)
|
||||
|
||||
help: ## Prints help for targets with comments
|
||||
@cat $(MAKEFILE_LIST) | grep -E '^[a-zA-Z_-].+:.*?## .*$$' | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'
|
27
ansible/locust/artifacts/docker-compose.yml
Normal file
27
ansible/locust/artifacts/docker-compose.yml
Normal file
|
@ -0,0 +1,27 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
---
|
||||
version: "3"
|
||||
services:
|
||||
master:
|
||||
image: realaravinth/mcaptcha-dos-locust-protected:latest
|
||||
container_name: master.locust.thrasher.dos.mcaptcha.org
|
||||
environment:
|
||||
- MCAPTCHA_CAPTCHA_SITEKEY=dPGVlwxjyPQJS5OEp86gzNJsxbrMlXwQ
|
||||
- MCAPTCHA_CAPTCHA_HOST=http://localhost:7000
|
||||
- HOST=http://localhost:5000
|
||||
ports:
|
||||
- 8089:8089
|
||||
volumes:
|
||||
- ./data/:/src/data
|
||||
command: --master -H http://localhost:8089
|
||||
worker:
|
||||
image: realaravinth/mcaptcha-dos-locust-protected:latest
|
||||
network_mode: host
|
||||
environment:
|
||||
- MCAPTCHA_CAPTCHA_SITEKEY=dPGVlwxjyPQJS5OEp86gzNJsxbrMlXwQ
|
||||
- MCAPTCHA_CAPTCHA_HOST=http://localhost:7000
|
||||
- HOST=http://localhost:5000
|
||||
command: --worker --master-host localhost
|
42
ansible/locust/main.yml
Normal file
42
ansible/locust/main.yml
Normal file
|
@ -0,0 +1,42 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
---
|
||||
- name: Configure Locust instances
|
||||
hosts: [mcaptcha_dos]
|
||||
remote_user: atm
|
||||
pre_tasks:
|
||||
- name: Ensure all VMs are reachable
|
||||
ansible.builtin.ping:
|
||||
roles:
|
||||
- docker-compose
|
||||
|
||||
tasks:
|
||||
- name: Allow port 8089 for locust
|
||||
become: true
|
||||
community.general.ufw:
|
||||
state: enabled
|
||||
rule: allow
|
||||
proto: tcp
|
||||
port: "8089"
|
||||
|
||||
- name: Create projects dir
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: /etc/locust
|
||||
state: directory
|
||||
mode: "0755"
|
||||
|
||||
- name: Copy docker-compose.yml file
|
||||
become: true
|
||||
ansible.builtin.copy:
|
||||
src: ./artifacts/docker-compose.yml
|
||||
dest: /etc/locust/
|
||||
|
||||
- name: Start locust services
|
||||
become: true
|
||||
community.docker.docker_compose:
|
||||
project_src: /etc/locust/
|
||||
scale:
|
||||
worker: 4
|
11
ansible/locust/roles/docker-compose/tasks/main.yml
Normal file
11
ansible/locust/roles/docker-compose/tasks/main.yml
Normal file
|
@ -0,0 +1,11 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
---
|
||||
- name: Install docker-compose
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
pkg:
|
||||
- docker-compose
|
12
ansible/ping.yml
Normal file
12
ansible/ping.yml
Normal file
|
@ -0,0 +1,12 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
---
|
||||
- name: Ping all servers
|
||||
hosts: all
|
||||
remote_user: atm
|
||||
|
||||
tasks:
|
||||
- name: Ensure all VMs are reachable
|
||||
ansible.builtin.ping:
|
36
ansible/playbook.yml
Normal file
36
ansible/playbook.yml
Normal file
|
@ -0,0 +1,36 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
---
|
||||
- name: Install and enable firewall
|
||||
hosts: [mcaptcha_dos, mcaptcha_demo_server, mcaptcha_mcaptcha]
|
||||
remote_user: atm
|
||||
pre_tasks:
|
||||
- name: Ensure all VMs are reachable
|
||||
ansible.builtin.ping:
|
||||
roles:
|
||||
- ufw
|
||||
|
||||
tasks:
|
||||
- name: Install git, zip, nginx, wget, curl & other utils
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
pkg:
|
||||
- git
|
||||
- wget
|
||||
- curl
|
||||
- gpg
|
||||
- ca-certificates
|
||||
- zip
|
||||
- python3-pip
|
||||
- virtualenv
|
||||
- python3-setuptools
|
||||
- ufw
|
||||
|
||||
- name: Install Docker
|
||||
hosts: mcaptcha_dos
|
||||
remote_user: atm
|
||||
roles:
|
||||
- docker
|
47
ansible/roles/docker/tasks/main.yml
Normal file
47
ansible/roles/docker/tasks/main.yml
Normal file
|
@ -0,0 +1,47 @@
|
|||
---
|
||||
|
||||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
- name: Create /etc/apt/keyrings dir
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: /etc/apt/keyrings
|
||||
state: directory
|
||||
recurse: true
|
||||
|
||||
- name: Add Docker GPG apt Key
|
||||
become: true
|
||||
ansible.builtin.apt_key:
|
||||
url: https://download.docker.com/linux/debian/gpg
|
||||
state: present
|
||||
|
||||
- name: Add Docker Repository
|
||||
become: true
|
||||
ansible.builtin.apt_repository:
|
||||
repo: deb https://download.docker.com/linux/debian buster stable
|
||||
state: present
|
||||
|
||||
- name: Update apt and install docker-ce
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
name: docker-ce
|
||||
update_cache: true
|
||||
|
||||
- name: Install Docker Module for Python
|
||||
become: true
|
||||
ansible.builtin.pip:
|
||||
name: docker
|
||||
|
||||
- name: Ensure docker group is present
|
||||
become: true
|
||||
ansible.builtin.group:
|
||||
name: docker
|
||||
state: present
|
||||
|
||||
- name: Add user atm to docker group
|
||||
become: true
|
||||
ansible.builtin.user:
|
||||
name: atm # TODO: add admin user to docker group
|
||||
groups: docker,users,admin
|
18
ansible/roles/ntp/tasks/main.yml
Normal file
18
ansible/roles/ntp/tasks/main.yml
Normal file
|
@ -0,0 +1,18 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
---
|
||||
- name: Install ntp
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
pkg:
|
||||
- ntp
|
||||
|
||||
- name: Enable and start ntp service
|
||||
become: true
|
||||
ansible.builtin.service:
|
||||
name: ntp
|
||||
enabled: true
|
||||
state: started
|
31
ansible/roles/ufw/tasks/main.yml
Normal file
31
ansible/roles/ufw/tasks/main.yml
Normal file
|
@ -0,0 +1,31 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
---
|
||||
- name: Install ufw
|
||||
become: true
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
pkg:
|
||||
- ufw
|
||||
|
||||
- name: Set logging
|
||||
become: true
|
||||
community.general.ufw:
|
||||
logging: "on"
|
||||
|
||||
- name: Allow port 22 and enable UFW
|
||||
become: true
|
||||
community.general.ufw:
|
||||
state: enabled
|
||||
rule: allow
|
||||
proto: tcp
|
||||
port: "22"
|
||||
|
||||
- name: Enable and start ufw service
|
||||
become: true
|
||||
ansible.builtin.service:
|
||||
name: ufw
|
||||
enabled: true
|
||||
state: started
|
289
requirements.txt
Normal file
289
requirements.txt
Normal file
|
@ -0,0 +1,289 @@
|
|||
ansible==8.1.0
|
||||
ansible-core==2.15.1
|
||||
certifi==2023.5.7
|
||||
cffi==1.15.1
|
||||
charset-normalizer==3.2.0
|
||||
contextvars==2.4
|
||||
cryptography==41.0.2
|
||||
distro==1.8.0
|
||||
execnet==2.0.2
|
||||
idna==3.4
|
||||
immutables==0.19
|
||||
iniconfig==2.0.0
|
||||
Jinja2==3.1.2
|
||||
jmespath==1.0.1
|
||||
looseversion==1.3.0
|
||||
MarkupSafe==2.1.3
|
||||
msgpack==1.0.5
|
||||
packaging==23.1
|
||||
pluggy==1.2.0
|
||||
psutil==5.9.5
|
||||
pycparser==2.21
|
||||
pycryptodomex==3.18.0
|
||||
pytest==7.4.0
|
||||
pytest-testinfra==8.1.0
|
||||
pytest-xdist==3.3.1
|
||||
PyYAML==6.0
|
||||
pyzmq==25.0.2
|
||||
requests==2.31.0
|
||||
resolvelib==1.0.1
|
||||
salt==3006.1
|
||||
urllib3==2.0.3
|
||||
airdrop-ng==1.1
|
||||
airgraph-ng==1.1
|
||||
apparmor==3.1.6
|
||||
appdirs==1.4.4
|
||||
argcomplete==2.0.0
|
||||
asttokens==2.2.1
|
||||
async-timeout==4.0.2
|
||||
attrs==22.2.0
|
||||
autocommand==2.2.2
|
||||
autopage==0.5.1
|
||||
Babel==2.12.1
|
||||
beautifulsoup4==4.12.2
|
||||
binwalk==2.3.3
|
||||
black==23.7.0
|
||||
borgbackup==1.2.4
|
||||
Brlapi==0.8.5
|
||||
btrfsutil==6.3.3
|
||||
certifi==2023.7.22
|
||||
cffi==1.15.1
|
||||
chardet==5.2.0
|
||||
charset-normalizer==3.2.0
|
||||
click==8.1.6
|
||||
cliff==4.3.0
|
||||
cmd2==2.4.3
|
||||
codespell==2.2.5
|
||||
colorama==0.4.6
|
||||
ConfigArgParse==1.5.3
|
||||
contourpy==1.1.0
|
||||
crit==3.18
|
||||
cryptography==41.0.3
|
||||
cupshelpers==1.0
|
||||
cycler==0.11.0
|
||||
Cython==3.0.0
|
||||
dbus-python==1.3.2
|
||||
debtcollector==2.5.0
|
||||
decorator==5.1.1
|
||||
defusedxml==0.7.1
|
||||
deprecation==2.1.0
|
||||
devtools==0.11.0
|
||||
distlib==0.3.7
|
||||
distro==1.8.0
|
||||
dnspython==2.3.0
|
||||
dogpile.cache==1.1.8
|
||||
executing==1.2.0
|
||||
fastjsonschema==2.18.0
|
||||
filelock==3.12.2
|
||||
fonttools==4.42.0
|
||||
gevent==22.10.2
|
||||
git-filter-repo==2.38.0
|
||||
gpg==1.21.0
|
||||
greenlet==2.0.2
|
||||
html5lib==1.1
|
||||
httpie==3.2.1
|
||||
idna==3.4
|
||||
importlib-metadata==5.0.0
|
||||
inflect==7.0.0
|
||||
iotop==0.6
|
||||
iso8601==2.0.0
|
||||
jaraco.context==4.3.0
|
||||
jaraco.functools==3.8.1
|
||||
jaraco.text==3.11.1
|
||||
jedi==0.18.2
|
||||
jmespath==1.0.1
|
||||
jsonpatch==1.33
|
||||
jsonpointer==2.4
|
||||
jsonschema==4.19.0
|
||||
jsonschema-specifications==2023.7.1
|
||||
keystoneauth1==5.2.1
|
||||
kiwisolver==1.4.4
|
||||
lensfun==0.3.4
|
||||
LibAppArmor==3.1.6
|
||||
libfdt==1.7.0
|
||||
libtorrent==2.0.9
|
||||
libvirt-python==9.6.0
|
||||
lit==15.0.7.dev0
|
||||
louis==3.26.0
|
||||
lxml==4.9.2
|
||||
Mako==1.2.4
|
||||
mallard-ducktype==1.0.2
|
||||
Markdown==3.4.4
|
||||
markdown-it-py==2.2.0
|
||||
MarkupSafe==2.1.3
|
||||
matplotlib==3.7.2
|
||||
mdurl==0.1.2
|
||||
MemoizeDB==2021.11.20.2.41.2
|
||||
meson==1.2.1
|
||||
more-itertools==10.1.0
|
||||
msgpack==1.0.5
|
||||
multidict==6.0.4
|
||||
mypy-extensions==1.0.0
|
||||
netaddr==0.8.0
|
||||
netifaces==0.11.0
|
||||
nftables==0.1
|
||||
numpy==1.25.1
|
||||
openshot-qt==3.1.1
|
||||
openstacksdk==1.0.1
|
||||
ordered-set==4.1.0
|
||||
os-service-types==1.7.0
|
||||
osc-lib==2.8.0
|
||||
oslo.config==9.1.1
|
||||
oslo.i18n==6.0.0
|
||||
oslo.serialization==5.1.1
|
||||
oslo.utils==6.1.0
|
||||
packaging==23.1
|
||||
parso==0.8.3
|
||||
pathspec==0.11.2
|
||||
pbr==5.11.1
|
||||
perf==0.1
|
||||
Pillow==10.0.0
|
||||
pipenv==2023.7.23
|
||||
pipx==1.2.0
|
||||
platformdirs==3.10.0
|
||||
ply==3.11
|
||||
pm2ml==2021.11.20.2.41.2
|
||||
pooch==1.7.0
|
||||
Powerpill==2021.11.20.2.41.2
|
||||
prettytable==3.6.0
|
||||
protobuf==4.23.4
|
||||
psutil==5.9.5
|
||||
pwquality==1.4.5
|
||||
pyalpm==0.10.6
|
||||
pyasn1==0.4.8
|
||||
pybind11==2.11.1
|
||||
pycairo==1.24.0
|
||||
pycparser==2.21
|
||||
pycups==2.0.1
|
||||
pycurl==7.45.2
|
||||
pydantic==1.10.9
|
||||
Pygments==2.16.1
|
||||
PyGObject==3.44.1
|
||||
pynvim==0.4.3
|
||||
pyOpenSSL==23.2.0
|
||||
pyparsing==3.0.9
|
||||
pyperclip==1.8.2
|
||||
PyQt5==5.15.9
|
||||
PyQt5-sip==12.12.2
|
||||
PyQtWebEngine==5.15.6
|
||||
pyrsistent==0.19.3
|
||||
pysequoia==0.1.20
|
||||
PySocks==1.7.1
|
||||
python-cinderclient==9.3.0
|
||||
python-dateutil==2.8.2
|
||||
python-glanceclient==4.1.0
|
||||
python-keystoneclient==5.1.0
|
||||
python-novaclient==18.3.0
|
||||
python-openstackclient==6.2.0
|
||||
pytz==2023.3
|
||||
pyxdg==0.28
|
||||
PyYAML==6.0.1
|
||||
pyzmq==25.1.1
|
||||
redis==4.6.0
|
||||
referencing==0.30.2
|
||||
Reflector==2023.6.28.0.36.1
|
||||
requests==2.28.2
|
||||
requests-toolbelt==1.0.0
|
||||
requestsexceptions==1.4.0
|
||||
rfc3986==2.0.0
|
||||
rich==13.5.2
|
||||
rpds-py==0.9.2
|
||||
rpm==4.18.1
|
||||
scipy==1.11.1
|
||||
simplejson==3.19.1
|
||||
six==1.16.0
|
||||
soupsieve==2.4.1
|
||||
stevedore==5.1.0
|
||||
TBB==0.2
|
||||
tomli==2.0.1
|
||||
torbrowser-launcher==0.3.6
|
||||
tqdm==4.65.0
|
||||
trash-cli==0.23.2.13.2
|
||||
trimage==1.0.6
|
||||
trove-classifiers==2023.8.8
|
||||
typing_extensions==4.7.1
|
||||
uc-micro-py==1.0.2
|
||||
ufw==0.36.2
|
||||
urllib3==1.26.15
|
||||
userpath==1.8.0
|
||||
validate-pyproject==0.13.post1.dev0+gb752273.d20230520
|
||||
vboxapi==1.0
|
||||
virtualenv==20.24.3
|
||||
virtualenv-clone==0.5.7
|
||||
warlock==2.0.1
|
||||
wcwidth==0.2.6
|
||||
webencodings==0.5.1
|
||||
wrapt==1.14.1
|
||||
XCGF==2021.11.20.2.41.3
|
||||
XCPF==2021.12.24.10.22.41
|
||||
youtube-dl==2021.12.17
|
||||
yt-dlp==2023.7.6
|
||||
zipp==3.16.2
|
||||
zope.event==5.0
|
||||
zope.interface==6.0
|
||||
ansible==8.1.0
|
||||
ansible-compat==4.1.6
|
||||
ansible-core==2.15.1
|
||||
ansible-lint==6.17.2
|
||||
astroid==2.15.6
|
||||
attrs==23.1.0
|
||||
black==23.7.0
|
||||
bracex==2.3.post1
|
||||
certifi==2023.5.7
|
||||
cffi==1.15.1
|
||||
charset-normalizer==3.2.0
|
||||
click==8.1.6
|
||||
contextvars==2.4
|
||||
cryptography==41.0.2
|
||||
dill==0.3.7
|
||||
distro==1.8.0
|
||||
execnet==2.0.2
|
||||
filelock==3.12.2
|
||||
gitdb==4.0.10
|
||||
GitPython==3.1.32
|
||||
idna==3.4
|
||||
immutables==0.19
|
||||
iniconfig==2.0.0
|
||||
isort==5.12.0
|
||||
Jinja2==3.1.2
|
||||
jmespath==1.0.1
|
||||
jsonschema==4.19.0
|
||||
jsonschema-specifications==2023.7.1
|
||||
lazy-object-proxy==1.9.0
|
||||
lint==1.2.1
|
||||
looseversion==1.3.0
|
||||
markdown-it-py==3.0.0
|
||||
MarkupSafe==2.1.3
|
||||
mccabe==0.7.0
|
||||
mdurl==0.1.2
|
||||
msgpack==1.0.5
|
||||
mypy-extensions==1.0.0
|
||||
packaging==23.1
|
||||
pathspec==0.11.2
|
||||
platformdirs==3.10.0
|
||||
pluggy==1.2.0
|
||||
psutil==5.9.5
|
||||
pycparser==2.21
|
||||
pycryptodomex==3.18.0
|
||||
Pygments==2.16.1
|
||||
pylint==2.17.5
|
||||
pytest==7.4.0
|
||||
pytest-testinfra==8.1.0
|
||||
pytest-xdist==3.3.1
|
||||
PyYAML==6.0
|
||||
pyzmq==25.0.2
|
||||
referencing==0.30.2
|
||||
requests==2.31.0
|
||||
resolvelib==1.0.1
|
||||
rich==13.5.2
|
||||
rpds-py==0.9.2
|
||||
ruamel.yaml==0.17.32
|
||||
ruamel.yaml.clib==0.2.7
|
||||
salt==3006.1
|
||||
smmap==5.0.0
|
||||
subprocess-tee==0.4.1
|
||||
tomlkit==0.12.1
|
||||
urllib3==2.0.3
|
||||
wcmatch==8.4.1
|
||||
wrapt==1.15.0
|
||||
yamllint==1.32.0
|
45
terraform/dos/.gitignore
vendored
Normal file
45
terraform/dos/.gitignore
vendored
Normal file
|
@ -0,0 +1,45 @@
|
|||
# Compiled files
|
||||
*.tfstate
|
||||
*.tfstate.backup
|
||||
*.tfstate.lock.info
|
||||
|
||||
# logs
|
||||
*.log
|
||||
|
||||
# Directories
|
||||
.terraform/
|
||||
.vagrant/
|
||||
|
||||
# SSH Keys
|
||||
*.pem
|
||||
|
||||
# Backup files
|
||||
*.bak
|
||||
|
||||
# Ignored Terraform files
|
||||
*gitignore*.tf
|
||||
|
||||
# Ignore Mac .DS_Store files
|
||||
.DS_Store
|
||||
|
||||
# Ignored vscode files
|
||||
.vscode/
|
||||
|
||||
# Ignore Any Generated JSON Files
|
||||
operations/automation-script/apply.json
|
||||
operations/automation-script/configversion.json
|
||||
operations/automation-script/run.template.json
|
||||
operations/automation-script/run.json
|
||||
operations/automation-script/variable.template.json
|
||||
operations/automation-script/variable.json
|
||||
operations/automation-script/workspace.template.json
|
||||
operations/automation-script/workspace.json
|
||||
operations/sentinel-policies-scripts/create-policy.template.json
|
||||
operations/sentinel-policies-scripts/create-policy.json
|
||||
operations/variable-scripts/variable.template.json
|
||||
operations/variable-scripts/variable.json
|
||||
|
||||
# Sentinel runtime directory
|
||||
.sentinel
|
||||
dos
|
||||
hosts.ini
|
60
terraform/dos/.terraform.lock.hcl
Normal file
60
terraform/dos/.terraform.lock.hcl
Normal file
|
@ -0,0 +1,60 @@
|
|||
# This file is maintained automatically by "terraform init".
|
||||
# Manual edits may be lost in future updates.
|
||||
|
||||
provider "registry.terraform.io/dmacvicar/libvirt" {
|
||||
version = "0.7.1"
|
||||
constraints = "~> 0.7.0"
|
||||
hashes = [
|
||||
"h1:1yEJVPVFkRkbRY63+sFRAWau/eJ0xlecHWLCV8spkWU=",
|
||||
"zh:1c59f2ab68da6326637ee8b03433e84af76b3e3562f251a7f2aa239a7b262a8d",
|
||||
"zh:236e24ecf036e99d9d1e2081a39dc9cb4b8993850a37141a1449f20750f883d6",
|
||||
"zh:4519c22b1f00c1d37d60ac6c2cb7ad5ab9dbcd44a80b4f61e68aacb54eae017d",
|
||||
"zh:54de4e3c979c32af1dc71ec2846912f669a28bdb0990e8a3c1fb8fea4ede7b61",
|
||||
"zh:6270a757bcf4e1f9efe47726cf0caefba30a25e59d151103cf03d1656325783c",
|
||||
"zh:68b8586d5b29c0a1cb7c608a309b38db911449c072d60eee9e40e01881f1c23a",
|
||||
"zh:724ba2290fea704714378e9363541420c36091e790c7f39150cde8987d4e0754",
|
||||
"zh:7b6860c92376cdad98273aab4bea62546622e08f50733e4b2e58a7a859d3b49d",
|
||||
"zh:986a0a4f8d9511c64bcac8010337deb43110b4c2f91969b2491fd9edc290b60e",
|
||||
"zh:aff0f6f24d69cd97a44cd6059edaf355769fbb8a7643a6db4d52c9a94f98e194",
|
||||
"zh:c46ca3f8384d06c13a7ed3d4b83c65b4f8dccbf9d5f624843b68d176add5c5c2",
|
||||
"zh:ef310534e7d38153aca4ce31655b52a6e6c4d76f32e49732c96b62e9de1ee843",
|
||||
"zh:f1566b094f4267ef2674889d874962dd41e0cba55251645e16d003c77ca8a19c",
|
||||
"zh:f2e019df7b537069828c5537c481e5b7f41d2404eef6fe5c86702c20900b303d",
|
||||
]
|
||||
}
|
||||
|
||||
provider "registry.terraform.io/hashicorp/local" {
|
||||
version = "2.4.0"
|
||||
hashes = [
|
||||
"h1:R97FTYETo88sT2VHfMgkPU3lzCsZLunPftjSI5vfKe8=",
|
||||
"zh:53604cd29cb92538668fe09565c739358dc53ca56f9f11312b9d7de81e48fab9",
|
||||
"zh:66a46e9c508716a1c98efbf793092f03d50049fa4a83cd6b2251e9a06aca2acf",
|
||||
"zh:70a6f6a852dd83768d0778ce9817d81d4b3f073fab8fa570bff92dcb0824f732",
|
||||
"zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3",
|
||||
"zh:82a803f2f484c8b766e2e9c32343e9c89b91997b9f8d2697f9f3837f62926b35",
|
||||
"zh:9708a4e40d6cc4b8afd1352e5186e6e1502f6ae599867c120967aebe9d90ed04",
|
||||
"zh:973f65ce0d67c585f4ec250c1e634c9b22d9c4288b484ee2a871d7fa1e317406",
|
||||
"zh:c8fa0f98f9316e4cfef082aa9b785ba16e36ff754d6aba8b456dab9500e671c6",
|
||||
"zh:cfa5342a5f5188b20db246c73ac823918c189468e1382cb3c48a9c0c08fc5bf7",
|
||||
"zh:e0e2b477c7e899c63b06b38cd8684a893d834d6d0b5e9b033cedc06dd7ffe9e2",
|
||||
"zh:f62d7d05ea1ee566f732505200ab38d94315a4add27947a60afa29860822d3fc",
|
||||
"zh:fa7ce69dde358e172bd719014ad637634bbdabc49363104f4fca759b4b73f2ce",
|
||||
]
|
||||
}
|
||||
|
||||
provider "registry.terraform.io/hashicorp/template" {
|
||||
version = "2.2.0"
|
||||
hashes = [
|
||||
"h1:94qn780bi1qjrbC3uQtjJh3Wkfwd5+tTtJHOb7KTg9w=",
|
||||
"zh:01702196f0a0492ec07917db7aaa595843d8f171dc195f4c988d2ffca2a06386",
|
||||
"zh:09aae3da826ba3d7df69efeb25d146a1de0d03e951d35019a0f80e4f58c89b53",
|
||||
"zh:09ba83c0625b6fe0a954da6fbd0c355ac0b7f07f86c91a2a97849140fea49603",
|
||||
"zh:0e3a6c8e16f17f19010accd0844187d524580d9fdb0731f675ffcf4afba03d16",
|
||||
"zh:45f2c594b6f2f34ea663704cc72048b212fe7d16fb4cfd959365fa997228a776",
|
||||
"zh:77ea3e5a0446784d77114b5e851c970a3dde1e08fa6de38210b8385d7605d451",
|
||||
"zh:8a154388f3708e3df5a69122a23bdfaf760a523788a5081976b3d5616f7d30ae",
|
||||
"zh:992843002f2db5a11e626b3fc23dc0c87ad3729b3b3cff08e32ffb3df97edbde",
|
||||
"zh:ad906f4cebd3ec5e43d5cd6dc8f4c5c9cc3b33d2243c89c5fc18f97f7277b51d",
|
||||
"zh:c979425ddb256511137ecd093e23283234da0154b7fa8b21c2687182d9aea8b2",
|
||||
]
|
||||
}
|
23
terraform/dos/cloud_init.cfg
Normal file
23
terraform/dos/cloud_init.cfg
Normal file
|
@ -0,0 +1,23 @@
|
|||
#cloud-config
|
||||
# vim: syntax=yaml
|
||||
|
||||
users:
|
||||
- name: root
|
||||
ssh_authorized_keys:
|
||||
- ssh-rsa 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 aravinth7820@gmail.com
|
||||
- name: atm
|
||||
gecos: Aravinth Manivannan
|
||||
groups: users, admin
|
||||
sudo: ALL=(ALL) NOPASSWD:ALL
|
||||
shell: /bin/bash
|
||||
lock_passwd: true
|
||||
plain_text_passwd: fooabr12
|
||||
ssh_authorized_keys:
|
||||
- ssh-rsa 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 aravinth7820@gmail.com
|
||||
|
||||
ssh_pwauth: true
|
||||
chpasswd:
|
||||
list: |
|
||||
root:foobar12
|
||||
atm:foobar12
|
||||
expire: False
|
51
terraform/dos/demo-server.tf
Normal file
51
terraform/dos/demo-server.tf
Normal file
|
@ -0,0 +1,51 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
resource "libvirt_volume" "mcaptcha_demo_server_volume" {
|
||||
name = "mcaptcha_demo_server_volume-${count.index}"
|
||||
base_volume_id = libvirt_volume.debian-mcaptcha-qcow2.id
|
||||
count = var.mcaptcha_demo_server_vm_count
|
||||
pool = libvirt_pool.mcaptcha_basic.name
|
||||
size = var.mcaptcha_demo_server_vm_disk_size
|
||||
}
|
||||
|
||||
resource "libvirt_domain" "mcaptcha_demo_server" {
|
||||
count = var.mcaptcha_demo_server_vm_count
|
||||
|
||||
name = "mcaptcha_mcaptcha_demo_server_${count.index}"
|
||||
memory = var.mcaptcha_demo_server_vm_memory
|
||||
vcpu = var.mcaptcha_demo_server_vm_vcpu
|
||||
|
||||
cloudinit = libvirt_cloudinit_disk.commoninit.id
|
||||
|
||||
console {
|
||||
type = "pty"
|
||||
target_port = "0"
|
||||
target_type = "serial"
|
||||
}
|
||||
|
||||
console {
|
||||
type = "pty"
|
||||
target_type = "virtio"
|
||||
target_port = "1"
|
||||
}
|
||||
|
||||
network_interface {
|
||||
network_name = "default"
|
||||
wait_for_lease = true
|
||||
}
|
||||
|
||||
disk {
|
||||
volume_id = element(libvirt_volume.mcaptcha_demo_server_volume.*.id, count.index)
|
||||
}
|
||||
}
|
||||
|
||||
locals {
|
||||
mcaptcha_demo_server_vm_ips = [for i in libvirt_domain.mcaptcha_demo_server : i.network_interface.0.addresses[0]]
|
||||
mcaptcha_demo_server_vm_names = [for i in libvirt_domain.mcaptcha_demo_server : i.name]
|
||||
mcaptcha_demo_server_vm_map = [for i in libvirt_domain.mcaptcha_demo_server : {
|
||||
ip = i.network_interface.0.addresses[0],
|
||||
name = i.name
|
||||
}]
|
||||
}
|
51
terraform/dos/dos.tf
Normal file
51
terraform/dos/dos.tf
Normal file
|
@ -0,0 +1,51 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
resource "libvirt_volume" "mcaptcha_dos_volume" {
|
||||
name = "mcaptcha_dos_volume-${count.index}"
|
||||
base_volume_id = libvirt_volume.debian-mcaptcha-qcow2.id
|
||||
count = var.mcaptcha_dos_vm_count
|
||||
pool = libvirt_pool.mcaptcha_basic.name
|
||||
size = var.mcaptcha_dos_vm_disk_size
|
||||
}
|
||||
|
||||
resource "libvirt_domain" "mcaptcha_dos" {
|
||||
count = var.mcaptcha_dos_vm_count
|
||||
|
||||
name = "mcaptcha_mcaptcha_dos_${count.index}"
|
||||
memory = var.mcaptcha_dos_vm_memory
|
||||
vcpu = var.mcaptcha_dos_vm_vcpu
|
||||
|
||||
cloudinit = libvirt_cloudinit_disk.commoninit.id
|
||||
|
||||
console {
|
||||
type = "pty"
|
||||
target_port = "0"
|
||||
target_type = "serial"
|
||||
}
|
||||
|
||||
console {
|
||||
type = "pty"
|
||||
target_type = "virtio"
|
||||
target_port = "1"
|
||||
}
|
||||
|
||||
network_interface {
|
||||
network_name = "default"
|
||||
wait_for_lease = true
|
||||
}
|
||||
|
||||
disk {
|
||||
volume_id = element(libvirt_volume.mcaptcha_dos_volume.*.id, count.index)
|
||||
}
|
||||
}
|
||||
|
||||
locals {
|
||||
mcaptcha_dos_vm_ips = [for i in libvirt_domain.mcaptcha_dos : i.network_interface.0.addresses[0]]
|
||||
mcaptcha_dos_vm_names = [for i in libvirt_domain.mcaptcha_dos : i.name]
|
||||
mcaptcha_dos_vm_map = [for i in libvirt_domain.mcaptcha_dos : {
|
||||
ip = i.network_interface.0.addresses[0],
|
||||
name = i.name
|
||||
}]
|
||||
}
|
46
terraform/dos/main.tf
Normal file
46
terraform/dos/main.tf
Normal file
|
@ -0,0 +1,46 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
terraform {
|
||||
required_version = ">= 0.13"
|
||||
required_providers {
|
||||
libvirt = {
|
||||
source = "dmacvicar/libvirt"
|
||||
version = "~> 0.7.0"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
provider "libvirt" {
|
||||
uri = var.libvirt_uri
|
||||
}
|
||||
|
||||
resource "libvirt_pool" "mcaptcha_basic" {
|
||||
name = "mcaptcha_basic"
|
||||
type = "dir"
|
||||
path = var.libvirt_pool_path
|
||||
|
||||
}
|
||||
|
||||
resource "libvirt_volume" "debian-mcaptcha-qcow2" {
|
||||
name = "debian-mcaptcha-qcow2"
|
||||
pool = libvirt_pool.mcaptcha_basic.name
|
||||
source = var.libvirt_debian_src
|
||||
format = "qcow2"
|
||||
}
|
||||
|
||||
data "template_file" "user_data" {
|
||||
template = file("${path.module}/cloud_init.cfg")
|
||||
}
|
||||
|
||||
data "template_file" "network_config" {
|
||||
template = file("${path.module}/network_config.cfg")
|
||||
}
|
||||
|
||||
resource "libvirt_cloudinit_disk" "commoninit" {
|
||||
name = "commoninit.iso"
|
||||
user_data = data.template_file.user_data.rendered
|
||||
network_config = data.template_file.network_config.rendered
|
||||
pool = libvirt_pool.mcaptcha_basic.name
|
||||
}
|
52
terraform/dos/mcaptcha.tf
Normal file
52
terraform/dos/mcaptcha.tf
Normal file
|
@ -0,0 +1,52 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
resource "libvirt_volume" "mcaptcha_mcaptcha_volume" {
|
||||
name = "mcaptcha_mcaptcha_volume-${count.index}"
|
||||
base_volume_id = libvirt_volume.debian-mcaptcha-qcow2.id
|
||||
count = var.mcaptcha_mcaptcha_vm_count
|
||||
pool = libvirt_pool.mcaptcha_basic.name
|
||||
size = var.mcaptcha_mcaptcha_vm_disk_size
|
||||
}
|
||||
|
||||
resource "libvirt_domain" "mcaptcha_mcaptcha" {
|
||||
count = var.mcaptcha_mcaptcha_vm_count
|
||||
|
||||
name = "mcaptcha_mcaptcha_mcaptcha_${count.index}"
|
||||
memory = var.mcaptcha_mcaptcha_vm_memory
|
||||
vcpu = var.mcaptcha_mcaptcha_vm_vcpu
|
||||
|
||||
cloudinit = libvirt_cloudinit_disk.commoninit.id
|
||||
|
||||
console {
|
||||
type = "pty"
|
||||
target_port = "0"
|
||||
target_type = "serial"
|
||||
}
|
||||
|
||||
console {
|
||||
type = "pty"
|
||||
target_type = "virtio"
|
||||
target_port = "1"
|
||||
}
|
||||
|
||||
network_interface {
|
||||
network_name = "default"
|
||||
wait_for_lease = true
|
||||
}
|
||||
|
||||
disk {
|
||||
volume_id = element(libvirt_volume.mcaptcha_mcaptcha_volume.*.id, count.index)
|
||||
}
|
||||
}
|
||||
|
||||
locals {
|
||||
mcaptcha_mcaptcha_vm_ips = [for i in libvirt_domain.mcaptcha_mcaptcha : i.network_interface.0.addresses[0]]
|
||||
mcaptcha_mcaptcha_vm_names = [for i in libvirt_domain.mcaptcha_mcaptcha : i.name]
|
||||
mcaptcha_mcaptcha_vm_map = [for i in libvirt_domain.mcaptcha_mcaptcha : {
|
||||
ip = i.network_interface.0.addresses[0],
|
||||
name = i.name
|
||||
}]
|
||||
}
|
||||
|
4
terraform/dos/network_config.cfg
Normal file
4
terraform/dos/network_config.cfg
Normal file
|
@ -0,0 +1,4 @@
|
|||
version: 2
|
||||
ethernets:
|
||||
ens3:
|
||||
dhcp4: true
|
36
terraform/dos/output.tf
Normal file
36
terraform/dos/output.tf
Normal file
|
@ -0,0 +1,36 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
output "mcaptcha_mcaptcha_demo_server_ip" {
|
||||
value = local.mcaptcha_demo_server_vm_map
|
||||
}
|
||||
|
||||
output "mcaptcha_mcaptcha_dos_ip" {
|
||||
value = local.mcaptcha_dos_vm_map
|
||||
}
|
||||
|
||||
output "mcaptcha_mcaptcha_mcaptcha_ip" {
|
||||
value = local.mcaptcha_mcaptcha_vm_map
|
||||
}
|
||||
|
||||
resource "local_file" "hosts_yml" {
|
||||
content = templatefile("./templates/hosts.yml.tftpl",
|
||||
{
|
||||
mcaptcha_demo_server_vm_ips = local.mcaptcha_demo_server_vm_ips,
|
||||
mcaptcha_demo_server_vm_names = local.mcaptcha_demo_server_vm_names,
|
||||
mcaptcha_demo_server_vms = local.mcaptcha_demo_server_vm_map,
|
||||
|
||||
|
||||
mcaptcha_dos_vm_ips = local.mcaptcha_dos_vm_ips,
|
||||
mcaptcha_dos_vm_names = local.mcaptcha_dos_vm_names,
|
||||
mcaptcha_dos_vms = local.mcaptcha_dos_vm_map,
|
||||
|
||||
mcaptcha_mcaptcha_vm_ips = local.mcaptcha_mcaptcha_vm_ips,
|
||||
mcaptcha_mcaptcha_vm_names = local.mcaptcha_mcaptcha_vm_names,
|
||||
mcaptcha_mcaptcha_vms = local.mcaptcha_mcaptcha_vm_map
|
||||
|
||||
})
|
||||
|
||||
filename = "hosts.ini"
|
||||
}
|
7
terraform/dos/scripts/on.sh
Executable file
7
terraform/dos/scripts/on.sh
Executable file
|
@ -0,0 +1,7 @@
|
|||
#!/bin/bash
|
||||
|
||||
|
||||
for vm in $(virsh list --all --name --state-shutoff); do \
|
||||
echo "[*] Starting vm: $vm"; \
|
||||
virsh start $vm; \
|
||||
done
|
14
terraform/dos/templates/hosts.yml.tftpl
Normal file
14
terraform/dos/templates/hosts.yml.tftpl
Normal file
|
@ -0,0 +1,14 @@
|
|||
[mcaptcha_dos]
|
||||
%{ for vm in mcaptcha_dos_vms ~}
|
||||
${vm.name} ansible_host=${vm.ip} ansible_user=atm
|
||||
%{ endfor ~}
|
||||
|
||||
[mcaptcha_mcaptcha]
|
||||
%{ for vm in mcaptcha_mcaptcha_vms ~}
|
||||
${vm.name} ansible_host=${vm.ip} ansible_user=atm
|
||||
%{ endfor ~}
|
||||
|
||||
[mcaptcha_demo_server]
|
||||
%{ for vm in mcaptcha_demo_server_vms ~}
|
||||
${vm.name} ansible_host=${vm.ip} ansible_user=atm
|
||||
%{ endfor ~}
|
98
terraform/dos/variables.tf
Normal file
98
terraform/dos/variables.tf
Normal file
|
@ -0,0 +1,98 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
/* main.tf */
|
||||
variable "libvirt_uri" {
|
||||
description = "URI of libvert socket"
|
||||
type = string
|
||||
default = "qemu:///system"
|
||||
}
|
||||
|
||||
variable "libvirt_pool_path" {
|
||||
description = "Path of libvirt storage pool"
|
||||
type = string
|
||||
default = "/home/atm/code/libvirt/pool/mcaptcha_basic"
|
||||
}
|
||||
|
||||
variable "libvirt_debian_src" {
|
||||
description = "Location of Debian 11 qcow2 image"
|
||||
type = string
|
||||
default = "/home/atm/disk-images/debian/11/cloud/debian-11-genericcloud-amd64.qcow2"
|
||||
}
|
||||
|
||||
/* demo server */
|
||||
variable "mcaptcha_demo_server_vm_count" {
|
||||
description = "Number of VMs to be deployed to run demo server"
|
||||
type = number
|
||||
default = 1
|
||||
}
|
||||
|
||||
variable "mcaptcha_demo_server_vm_disk_size" {
|
||||
description = "Size of disk of VM running demo server in bytes"
|
||||
type = number
|
||||
default = 8000000000 # 8GB
|
||||
}
|
||||
|
||||
variable "mcaptcha_demo_server_vm_memory" {
|
||||
description = "Memory of VM running demo server in MB"
|
||||
type = number
|
||||
default = 2000 # 2GB
|
||||
}
|
||||
|
||||
variable "mcaptcha_demo_server_vm_vcpu" {
|
||||
description = "Number of CPUs of VM demo server locust"
|
||||
type = number
|
||||
default = 4
|
||||
}
|
||||
|
||||
|
||||
/* locust server server */
|
||||
variable "mcaptcha_dos_vm_count" {
|
||||
description = "Number of VMs to be deployed to run locust"
|
||||
type = number
|
||||
default = 2
|
||||
}
|
||||
|
||||
variable "mcaptcha_dos_vm_disk_size" {
|
||||
description = "Size of disk of VMs running locust in bytes"
|
||||
type = number
|
||||
default = 8000000000 # 8GB
|
||||
}
|
||||
|
||||
variable "mcaptcha_dos_vm_memory" {
|
||||
description = "Memory of VMs running locust in MB"
|
||||
type = number
|
||||
default = 2000 # 2GB
|
||||
}
|
||||
|
||||
variable "mcaptcha_dos_vm_vcpu" {
|
||||
description = "Number of CPUs of VMs running locust"
|
||||
type = number
|
||||
default = 4
|
||||
}
|
||||
|
||||
|
||||
/* mcaptcha/mcaptcha server server */
|
||||
variable "mcaptcha_mcaptcha_vm_count" {
|
||||
description = "Number of VMs to be deployed to run mcaptcha/mcaptcha"
|
||||
type = number
|
||||
default = 1
|
||||
}
|
||||
|
||||
variable "mcaptcha_mcaptcha_vm_disk_size" {
|
||||
description = "Size of disk of VMs running mcaptcha/mcaptcha in bytes"
|
||||
type = number
|
||||
default = 8000000000 # 8GB
|
||||
}
|
||||
|
||||
variable "mcaptcha_mcaptcha_vm_memory" {
|
||||
description = "Memory of VMs running mcaptcha/mcaptcha in MB"
|
||||
type = number
|
||||
default = 2000 # 2GB
|
||||
}
|
||||
|
||||
variable "mcaptcha_mcaptcha_vm_vcpu" {
|
||||
description = "Number of CPUs of VMs running mcaptcha/mcaptcha"
|
||||
type = number
|
||||
default = 4
|
||||
}
|
20
tests/locust/base.py
Normal file
20
tests/locust/base.py
Normal file
|
@ -0,0 +1,20 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
import os
|
||||
|
||||
|
||||
def test_locust_is_listening(host):
|
||||
socket = host.socket(f"tcp://0.0.0.0:8089")
|
||||
assert socket.is_listening
|
||||
|
||||
|
||||
def test_locust_config_exists(host):
|
||||
config = host.file("/etc/locust/docker-compose.yml")
|
||||
assert config.exists
|
||||
assert config.is_file
|
||||
|
||||
|
||||
def test_docker_is_installed(host):
|
||||
assert host.package("docker-compose").is_installed
|
44
tests/test_basic.py
Normal file
44
tests/test_basic.py
Normal file
|
@ -0,0 +1,44 @@
|
|||
# SPDX-FileCopyrightText: 2023 Aravinth Manivannan <realaravinth@batsense.net>
|
||||
#
|
||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||
|
||||
import os
|
||||
|
||||
|
||||
def test_ssh_is_listening(host):
|
||||
socket = host.socket(f"tcp://0.0.0.0:22")
|
||||
assert socket.is_listening
|
||||
|
||||
|
||||
def test_ufw_service_running_and_enabled(host):
|
||||
service = host.service("ufw")
|
||||
assert service.is_running
|
||||
assert service.is_enabled
|
||||
|
||||
|
||||
def test_ssh_service_running_and_enabled(host):
|
||||
service = host.service("ssh")
|
||||
assert service.is_running
|
||||
assert service.is_enabled
|
||||
|
||||
|
||||
def test_ssh_is_installed(host):
|
||||
pkg = host.package("openssh-server")
|
||||
assert pkg.is_installed
|
||||
|
||||
|
||||
def test_pkgis_installed(host):
|
||||
for pkg in [
|
||||
"git",
|
||||
"wget",
|
||||
"curl",
|
||||
"gpg",
|
||||
"ca-certificates",
|
||||
"zip",
|
||||
"python3-pip",
|
||||
"virtualenv",
|
||||
"python3-setuptools",
|
||||
"ntp",
|
||||
"ufw",
|
||||
]:
|
||||
assert host.package(pkg).is_installed
|
Loading…
Reference in a new issue