mirror of
https://github.com/trailofbits/algo
synced 2024-11-04 06:00:21 +00:00
35faf4bca7
* Draft works with ECDSA RSA support for Windows * update-users with local_openssl_tasks * move prompts to the algo script * additional directory for SSH keys * move easyrsa_p12_export_password to pre_tasks * update-users testing * Fix hardcoded vars * Delete the CA key * Hardcoded IP. Fixes #219 * Some fixes
51 lines
1.5 KiB
YAML
51 lines
1.5 KiB
YAML
---
|
|
language: python
|
|
python: "2.7"
|
|
sudo: required
|
|
dist: trusty
|
|
|
|
matrix:
|
|
fast_finish: true
|
|
|
|
addons:
|
|
apt:
|
|
sources:
|
|
- sourceline: 'ppa:ubuntu-lxc/stable'
|
|
packages:
|
|
- python-pip
|
|
- lxc
|
|
- lxc-templates
|
|
- expect-dev
|
|
- debootstrap
|
|
|
|
cache:
|
|
directories:
|
|
- $HOME/lxc/
|
|
pip: true
|
|
|
|
before_cache:
|
|
- mkdir $HOME/lxc
|
|
- sudo tar cf $HOME/lxc/cache.tar /var/cache/lxc/
|
|
- sudo chown $USER. $HOME/lxc/cache.tar
|
|
|
|
env:
|
|
- LXC_NAME=ubuntu1604 LXC_DISTRO=ubuntu LXC_RELEASE=xenial
|
|
|
|
install:
|
|
- sudo tar xf $HOME/lxc/cache.tar -C / || echo "Didn't extract cache."
|
|
- export LXC_ROOTFS=/var/lib/lxc/$LXC_NAME/rootfs
|
|
- 'sudo lxc-create -n $LXC_NAME -t ubuntu -- -r $LXC_RELEASE --mirror http://mirrors.us.kernel.org/ubuntu --packages python || true'
|
|
- 'sudo lxc-start -n $LXC_NAME && until (sudo lxc-info -n $LXC_NAME | grep -q ^IP:); do printf . && sleep 1; done && sleep 2'
|
|
- export LXC_IP="$(sudo lxc-info -Hin $LXC_NAME)"
|
|
- sudo /bin/bash -c "printf '\n$LXC_IP test.lxc\n' >> /etc/hosts"
|
|
- ssh-keygen -f ~/.ssh/id_rsa -t rsa -N ''
|
|
- sudo mkdir -vm 0700 $LXC_ROOTFS/root/.ssh/
|
|
- sudo cp -v ~/.ssh/id_rsa.pub $LXC_ROOTFS/root/.ssh/authorized_keys
|
|
- sudo apt-get install build-essential libssl-dev libffi-dev python-dev && sudo pip install -r requirements.txt
|
|
|
|
script:
|
|
- ansible-playbook deploy.yml --syntax-check
|
|
- ansible-playbook deploy.yml -t local,vpn,dns,ssh_tunneling,security,tests -e "server_ip=$LXC_IP server_user=root IP_subject_alt_name=$LXC_IP local_dns=Y"
|
|
|
|
after_script:
|
|
- ./tests/update-users.sh |