Archives
/
algo
mirror of https://github.com/trailofbits/algo
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
810 Commits
5 Branches
2 Tags
10 MiB
fix/14704
dependabot/pip/ansible-9.4.0
master
dependabot/github_actions/actions/setup-python-5.1.0
dependabot/pip/jinja2-approx-eq-3.1.3
v1.1
v1.0
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '65b0239625'
${ noResults }
Commit Graph

132 Commits (65b02396253d0eadd48af570f9e9086cc4637a62)

Author SHA1 Message Date
in-in 244a698531 improve readability (#1085) 6 years ago
Jack Ivanov cbe57991db Update docs (#1089) 6 years ago
Mike Myers d9634eca8a Update screenshot of AWS EC2 minimum permissions with ec2:DescribeRegions (#1095) 6 years ago
Jack Ivanov 0188b2ff64
Update deploy-to-ubuntu.md 6 years ago
Jack Ivanov 687bab9e54
Update troubleshooting.md 
Fixes #744
 6 years ago
David Myers ee3cb979f7 Document how to use WireGuard on Ubuntu clients (#1071) 6 years ago
TC1977 3144458ac7 Update cloud-amazon-ec2.md (#1081) 6 years ago
TC1977 6d3bb1cf2b Update minimum required IAM changes for deployment (#1080) 
Ansible2.5 allows Algo to directly ask AWS for the region list, rather than have it hardcoded and updated manually. Updated the documented minimum required permissions to include "DescribeRegions".
 6 years ago
Jack Ivanov e8947f318b Large refactor to support Ansible 2.5 (#976) 
* Refactoring, booleans declaration and update users fix

* Make server_name more FQDN compatible

* Rename variables

* Define the default value for store_cakey

* Skip a prompt about the SSH user if deploying to localhost

* Disable reboot for non-cloud deployments

* Enable EC2 volume encryption by default

* Add default server value (localhost) for the local installation

Delete empty files

* Add default region to aws_region_facts

* Update docs

* EC2 credentials fix

* Warnings fix

* Update deploy-from-ansible.md

* Fix a typo

* Remove lightsail from the docs

* Disable EC2 encryption by default

* rename droplet to server

* Disable dependencies

* Disable tls_cipher_suite

* Convert wifi-exclude to a string. Update-users fix

* SSH access congrats fix

* 16.04 > 18.04

* Dont ask for the credentials if specified in the environment vars

* GCE server name fix
 6 years ago
Josh Dimarsky a57a0adf5e Fixed broken link; clarified example docker command (#1064) 6 years ago
Quentin Moss e0c317a958 Update documentation link (#1043) 6 years ago
Quentin Moss b88f697b28 Update troubleshooting docs to include iOS reconnection loop (#1042) 
* Update troubleshooting docs to include iOS reconnection loop

* nits
 6 years ago
Mike Myers c65961a1f3 Amazon ec2 documentation (#1035) 
* Add link to documentation on Amazon EC2 setup

* Add images to document the AWS EC2 account setup

* Create AWS EC2 setup instructions

* remove line breaks

* remove line breaks

* Add images documenting AWS EC2 policy creation

* Update image showing advised minimum AWS policy

* Add instructions for minimum AWS permission policy

* Delete aws-ec2-attach-policy.png

* Updated image to reflect new AWS policy guidance

* Delete aws-ec2-new-user-confirm.png

* Updated image to reflect new AWS policy guidance
 6 years ago
TC1977 facd55c635 Update deploy-to-ubuntu.md (#1019) 
* Update deploy-to-ubuntu.md

rewrite of #813

* Update deploy-to-ubuntu.md
 6 years ago
Jack Ivanov 07a6bbe652
Move max_mss to config.cfg (#1015) 
* Move max_mss to config.cfg

* Add docs about max_mss

* Update troubleshooting.md
 6 years ago
Jack Ivanov 4ca8c03e3c New default cipher suite (#991) 
* New ciphers enabled

* Update CHANGELOG.md

* Switch ecparam to secp384r1

* Change CertificateType to ECDSA384
 6 years ago
Mikael Forsgren 2931227db4 New Google Cloud Region (#1013) 
Added the new Google Cloud Region Finland (europe-north1) with 3 zones
 6 years ago
TC1977 6faac307af Update troubleshooting.md (#992) 
Many times people are reaching VPC limits not because they're running other VPCs on AWS, but because they've already deployed several times (AWS allows five VPCs per region). This lets people know they can simply delete their old VPCs instead of contacting AWS support.
 6 years ago
Jack Ivanov daca84b640 Update references to 18.04 6 years ago
Paul Kehrer b928e4ff06 fix faq entry about cryptography build failure (#967) 6 years ago
Jack Ivanov 3488e660ad Add WireGuard support for Android (#910) 
* WireGuard Implementation

* Update client-android.md

* Update README.md

* WireGuard unattended upgrades

* Update README.md

* reload-module-on-update and syntax fix

* SaveConfig to true

* Azure firewall. Fixes #962

* Update README.md

* Update client-android.md
 6 years ago
Jack Ivanov c82bd8c5ff DNS-over-HTTPS (#875) 7 years ago
Cat Jones e78df40468 adds DigitalOcean documentation (#869) 7 years ago
iliyan jeliazkov a8b4a47a88 Updating the language of the instructions (#880) 7 years ago
Anton T Johansson 7c087aeed9 Fixed path in Network Manager section (#860) 
"configs" directory missing in paths.
 7 years ago
Micah R Ledbetter a2e051ef00 Add a workaround for disabling DNS filtering to the FAQ (#852) 
* Add a workaround for disabling DNS filtering to the FAQ

* Update faq.md
 7 years ago
Micah R Ledbetter e944ee993a Embed certs into Windows deployment scripts (#840) 
- Obviate need to copy separate script and certificate files
- Allow execution from any directory, not just the script's parent
  directory (no assumption of any particular working directory)
- Fix docs that neglected to mention copying cacert.pem
- Fix docs that incorrectly referred to the user cert store

As part of this work, rewrite the windows_client.ps1.j2 deployment
script template

- Add comment-based help
- Require admin privileges
- Use a Param() block
- Use parameter sets with -Add and -Remove switches
- Add the -GetInstalledCerts switch, to list any Algo certificates
  installed the machine's cert store
- Add the -SaveCerts switch, to save the embedded certificates to files
- Put Jinja2 variables inside Powershell variables,
- Use native Powershell cmdlets rather than shell out to certutil.exe
- Add a playbook to regenerate the windows_USER.ps1 scripts
 7 years ago
Micah R Ledbetter a8784bc0f4 Add FAQ entry regarding IPSEC backdoor (#460) (#853) 7 years ago
Arun John Kuruvilla aea9c9a5e2 Removed ssh_public_key variable for AWS. Issue #773 (#817) 7 years ago
Rob 1edb95df9c Update client-android.md (#842) 
* Update client-android.md

Changed Installation via profiles sections - Opening the helper html file in Chrome (v65.0.3325.109 on Android 6.0.1) does not work correctly.

* Update client-android.md

* Update client-android.md
 7 years ago
Damian Gerow 62fc22ab59 Creates a Docker container to run algo (#331) 
* Creates a Docker container to run algo

* Simplistic testing of the Docker image

This simply uses the same LXC system that was just tested.
It's functional, but minimal.

* More thorough tests against Docker

This doubles the number of LXC containers in use,
but does provide a more thorough test of the Docker
image.
 7 years ago
Zac Connelly 3bb6c32abb update troubleshooting doc (#827) 
* update troubleshooting doc

* remove breakline

* bump issue to the bottom
 7 years ago
Achim Staebler 054dc0afcd Instructions for Ubuntu needed compiler install (#791) 
build-essential and python-dev are required when compiling pycrypt. Added the necessary packages to the apt-get install line.
 7 years ago
Brian Harrington bd4ea1235f GCE correct variable key (#734) 
`server_name` should be `gce_server_name` for Google Compute Engine
 7 years ago
Allan e01521bbf4 Update to deploy-to-ubuntu.md (#628) 
* Update to deploy-to-ubuntu.md

A fresh install (Off CD / ISO) doesn't include python-pip or python virtualenv module.
The fixes above take care of the additional requirements, as well as updating pip.

* Update deploy-to-ubuntu.md

Fix Typo
 7 years ago
Jurgen Verhasselt d08e525906 Docs to deploy from, and setup client on, Fedora Workstation (#711) 
* docs/client-linux.md housekeeping

* add fedora-workstation instructions to client-linx.md

* add deploy-from-fedora-workstation doc

* change client-linux.md to internal link

* add deploy-from-fedora-workstation links

* correct markup

* correct typo
 7 years ago
Stev Witzel 8009778012 Add new GCP zones in Frankfurt (#656) 
* add new Frankfurt zones to algo script and ansible docs
* backfill ansible docs for recently added GCP zones in London and Sydney
 7 years ago
Dan Guido 0a1d64e629 Update client-linux.md 7 years ago
Jack Ivanov 78bd5b017c client fixes (#605) 7 years ago
Jack Ivanov 5755493382 Update faq.md 
chloe.re is unavailable anymore. awesome_bot breaks travisci
 7 years ago
Jack Ivanov 91c375d63f Update cloud-azure.md 7 years ago
Dan Guido fa466caeb2 Modify guidance 7 years ago
defunct ae2a2b522e Add UpdateStack to IAM template (#588) 
Resolves #585
 7 years ago
Martey Dodoo 2f4d0c016a Add new Google Cloud us-west1-c zone. (#583) 
Add new Google Cloud zone (see
https://cloudplatform.googleblog.com/2017/05/Oregon-region-us-west1-adds-third-zone-Cloud-SQL-and-Regional-Managed-Instance-Groups.html).
Restore original default zone (europe-west1-b; see a470bf071e).
 7 years ago
defunct 220da6eb53 Update AWS policy in documentation (#587) 
Resolves #579
 7 years ago
Jack Ivanov a20e0eed55 Update deploy-from-windows.md 7 years ago
Jack Ivanov 91d9eb8f88 Update deploy-from-windows.md 7 years ago
Christopher De Vries 87e1282ebb Make documentation on iptables for local installation clearer. (#575) 7 years ago
Martey Dodoo d59d67f0ea Add additional Gloud Cloud Engine zones. (#569) 
* Add additional Gloud Cloud Engine zones.

Add GCE zones for Northern Virginia (us-east4), Singapore
(asia-southeast1), and Tokyo (asia-northeast1) regions.

* Update possible GCE zones in documentation.
 7 years ago
Jack Ivanov 0131505195 Enhance PS1 script (#510) 
update docs

Update README.md

update readme
 7 years ago