mirror of
https://github.com/trailofbits/algo.git
synced 2025-06-07 07:33:52 +02:00
Move to LXD (#935)
This commit is contained in:
parent
e905220f61
commit
6f3ec658fe
4 changed files with 37 additions and 18 deletions
35
.travis.yml
35
.travis.yml
|
@ -13,15 +13,20 @@ matrix:
|
||||||
addons:
|
addons:
|
||||||
apt:
|
apt:
|
||||||
sources:
|
sources:
|
||||||
- sourceline: 'ppa:ubuntu-lxc/stable'
|
- sourceline: 'ppa:ubuntu-lxc/stable'
|
||||||
packages:
|
packages:
|
||||||
- python-pip
|
- python-pip
|
||||||
- lxc
|
- lxd
|
||||||
- lxc-templates
|
- expect-dev
|
||||||
- expect-dev
|
- debootstrap
|
||||||
- debootstrap
|
- shellcheck
|
||||||
- shellcheck
|
- tree
|
||||||
- tree
|
- bridge-utils
|
||||||
|
- dnsutils
|
||||||
|
- build-essential
|
||||||
|
- libssl-dev
|
||||||
|
- libffi-dev
|
||||||
|
- python-dev
|
||||||
|
|
||||||
cache:
|
cache:
|
||||||
directories:
|
directories:
|
||||||
|
@ -43,16 +48,14 @@ before_install:
|
||||||
|
|
||||||
install:
|
install:
|
||||||
- sudo tar xf $HOME/lxc/cache.tar -C / || echo "Didn't extract cache."
|
- sudo tar xf $HOME/lxc/cache.tar -C / || echo "Didn't extract cache."
|
||||||
- export LXC_ROOTFS=/var/lib/lxc/$LXC_NAME/rootfs
|
|
||||||
- 'sudo lxc-create -n $LXC_NAME -t ubuntu -- -r $LXC_RELEASE --mirror http://mirrors.us.kernel.org/ubuntu --packages python || true'
|
|
||||||
- 'sudo lxc-start -n $LXC_NAME && until (sudo lxc-info -n $LXC_NAME | grep -q ^IP:); do printf . && sleep 1; done && sleep 2'
|
|
||||||
- export LXC_IP="$(sudo lxc-info -Hin $LXC_NAME)"
|
|
||||||
- sudo /bin/bash -c "printf '\n$LXC_IP test.lxc\n' >> /etc/hosts"
|
|
||||||
- ssh-keygen -f ~/.ssh/id_rsa -t rsa -N ''
|
- ssh-keygen -f ~/.ssh/id_rsa -t rsa -N ''
|
||||||
- chmod 0644 ~/.ssh/config
|
- chmod 0644 ~/.ssh/config
|
||||||
- sudo mkdir -vm 0700 $LXC_ROOTFS/root/.ssh/
|
- echo -e "#cloud-config\nssh_authorized_keys:\n - $(cat ~/.ssh/id_rsa.pub)" | sudo lxc profile set default user.user-data -
|
||||||
- sudo cp -v ~/.ssh/id_rsa.pub $LXC_ROOTFS/root/.ssh/authorized_keys
|
- sudo cp -f tests/lxd-bridge /etc/default/lxd-bridge
|
||||||
- sudo apt-get install build-essential libssl-dev libffi-dev python-dev
|
- sudo service lxd restart
|
||||||
|
- sudo lxc launch ${LXC_DISTRO}:${LXC_RELEASE} ${LXC_NAME}
|
||||||
|
- until host ${LXC_NAME}.lxd 10.0.8.1 -t A; do sleep 3; done
|
||||||
|
- export LXC_IP="$(dig ${LXC_NAME}.lxd @10.0.8.1 +short)"
|
||||||
- pip install -r requirements.txt
|
- pip install -r requirements.txt
|
||||||
- pip install ansible-lint
|
- pip install ansible-lint
|
||||||
- gem install awesome_bot
|
- gem install awesome_bot
|
||||||
|
|
|
@ -2,7 +2,7 @@
|
||||||
|
|
||||||
set -ex
|
set -ex
|
||||||
|
|
||||||
DEPLOY_ARGS="server_ip=$LXC_IP server_user=root IP_subject_alt_name=$LXC_IP local_dns=true dns_over_https=true apparmor_enabled=false"
|
DEPLOY_ARGS="server_ip=$LXC_IP server_user=ubuntu IP_subject_alt_name=$LXC_IP local_dns=true dns_over_https=true apparmor_enabled=false"
|
||||||
|
|
||||||
if [ "${LXC_NAME}" == "docker" ]
|
if [ "${LXC_NAME}" == "docker" ]
|
||||||
then
|
then
|
||||||
|
|
16
tests/lxd-bridge
Normal file
16
tests/lxd-bridge
Normal file
|
@ -0,0 +1,16 @@
|
||||||
|
USE_LXD_BRIDGE="true"
|
||||||
|
LXD_BRIDGE="lxdbr0"
|
||||||
|
UPDATE_PROFILE="true"
|
||||||
|
LXD_CONFILE=""
|
||||||
|
LXD_DOMAIN="lxd"
|
||||||
|
LXD_IPV4_ADDR="10.0.8.1"
|
||||||
|
LXD_IPV4_NETMASK="255.255.255.0"
|
||||||
|
LXD_IPV4_NETWORK="10.0.8.0/24"
|
||||||
|
LXD_IPV4_DHCP_RANGE="10.0.8.2,10.0.8.254"
|
||||||
|
LXD_IPV4_DHCP_MAX="250"
|
||||||
|
LXD_IPV4_NAT="true"
|
||||||
|
LXD_IPV6_ADDR=""
|
||||||
|
LXD_IPV6_MASK=""
|
||||||
|
LXD_IPV6_NETWORK=""
|
||||||
|
LXD_IPV6_NAT="false"
|
||||||
|
LXD_IPV6_PROXY="true"
|
|
@ -3,7 +3,7 @@
|
||||||
set -ex
|
set -ex
|
||||||
|
|
||||||
CAPW=`cat /tmp/ca_password`
|
CAPW=`cat /tmp/ca_password`
|
||||||
USER_ARGS="server_ip=$LXC_IP server_user=root ssh_tunneling_enabled=y IP_subject=$LXC_IP easyrsa_CA_password=$CAPW"
|
USER_ARGS="server_ip=$LXC_IP server_user=ubuntu ssh_tunneling_enabled=y IP_subject=$LXC_IP easyrsa_CA_password=$CAPW"
|
||||||
|
|
||||||
sed -i 's/- jack$/- jack_test/' config.cfg
|
sed -i 's/- jack$/- jack_test/' config.cfg
|
||||||
|
|
||||||
|
|
Loading…
Add table
Reference in a new issue