wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-08-02 19:03:04 +02:00
Code Issues Projects Releases Wiki Activity
1006 commits 5 branches 2 tags 10 MiB
Commit graph

1006 commits

This branch
This branch
All branches
Author SHA1 Message Date
TC1977
6253e944d3
Update index.md 2019-10-27 13:35:46 -04:00
TC1977
b7e0ae3980
road warrior instructions 2019-10-27 13:30:13 -04:00
TC1977
e89c2abc61 Merge branch 'master' into update-docs 2019-10-27 13:09:41 -04:00
TC1977
5f5aac19cb
Python version README fix for #1622 2019-10-23 14:18:13 -04:00
TC1977
fe4883873e
fixed broken link/absent link in FAQ 2019-10-23 01:25:05 -04:00
TC1977
c97c6d108d
More "IPsec" and "WireGuard" changes 2019-10-23 01:19:37 -04:00
TC1977
d14cb0d6e4
Update features list 2019-10-23 01:13:15 -04:00
TC1977
b9f40f80e8
Update-users from cloud-init 2019-10-23 00:56:19 -04:00
TC1977
dfae24fc8a
Correct locations of install log and user configs 2019-10-23 00:44:21 -04:00
Jack Ivanov
88eaf30e65
Update README.md (#1602) 
* Update README.md

As noted in #1599 we don't have any instructions for CentOS 7. Closes #1599

* Update README.md

Co-Authored-By: David Myers <dem@myersnet.net>
 2019-10-09 08:34:06 +02:00
TC1977
4cb505f64f
Update FAQ about WireGuard, fix typos 2019-10-09 00:35:12 -04:00
TC1977
bc6b370428
Fix typo 2019-10-09 00:24:02 -04:00
TC1977
de7bf3eb9d
How to monitor user activity 2019-10-09 00:12:49 -04:00
TC1977
1e384a54d5
How to update users from cloud-init 2019-10-08 23:45:47 -04:00
TC1977
38b4a4f091
VPN On Demand is for Apple IPSEC clients only 2019-10-08 23:41:09 -04:00
TC1977
450b1ab93c
Update faq.md 2019-10-08 23:15:14 -04:00
TC1977
7c67fc95b3
Update README.md 2019-10-08 23:11:58 -04:00
TC1977
66da491b03
Document BetweenClients_DROP 2019-10-08 23:07:29 -04:00
TC1977
1a004e7c4b
update variable name to store_pki 2019-10-08 22:55:29 -04:00
Jack Ivanov
d0ce162559
Update PULL_REQUEST_TEMPLATE.md 2019-10-07 13:11:33 +02:00
Jon Stewart
792e991442 Troubleshooting docs addition for CA certificate failure with MacPorts (#1595) 
* Added troubleshooting entry related to lack of a CA certificate in MacPorts.

* Try to fix the link

* Try to fix the link

* Try to fix the link

* line-breaking of error message

* update error message and text
 2019-10-05 19:31:30 +02:00
Nil Admirari
0b4ec243a7 Fix for interactive Docker deployments (#1589) 2019-10-02 12:03:10 +02:00
Jack Ivanov
8bdd99c05d Refactor to support Ansible 2.8 (#1549) 
* bump ansible to 2.8.3

* DigitalOcean: move to the latest modules

* Add Hetzner Cloud

* Scaleway and Lightsail fixes

* lint missing roles

* Update roles/cloud-hetzner/tasks/main.yml

Add api_token

Co-Authored-By: phaer <phaer@phaer.org>

* Update roles/cloud-hetzner/tasks/main.yml

Add api_token

Co-Authored-By: phaer <phaer@phaer.org>

* Try to run apt until succeeded

* Scaleway modules upgrade

* GCP: Refactoring, remove deprecated modules

* Doc updates (#1552)

* Update README.md

Adding links and mentions of Exoscale aka CloudStack and Hetzner Cloud.

* Update index.md

Add the Hetzner Cloud to the docs index

* Remove link to Win 10 IPsec instructions

* Delete client-windows.md

Unnecessary since the deprecation of IPsec for Win10.

* Update deploy-from-ansible.md

Added sections and required variables for CloudStack and Hetzner Cloud.

* Update deploy-from-ansible.md

Added sections for CloudStack and Hetzner, added req variables and examples, mentioned environment variables, and added links to the provider role section.

* Update deploy-from-ansible.md

Cosmetic changes to links, fix typo.

* Update GCE variables

* Update deploy-from-script-or-cloud-init-to-localhost.md

Fix a finer point, and make variables list more readable.

* update azure requirements

* Python3 draft

* set LANG=c to the p12 password generation task

* Update README

* Install cloud requirements to the existing venv

* FreeBSD fix

* env->.env fixes

* lightsail_region_facts fix

* yaml syntax fix

* Update README for Python 3 (#1564)

* Update README for Python 3

* Remove tabs and tweak instructions

* Remove cosmetic command indentation

* Update README.md

* Update README for Python 3 (#1565)

* DO fix for "found unpermitted parameters: id"

* Verify Python version

* Remove ubuntu 16.04 from readme

* Revert back DigitalOcean module

* Update deploy-from-script-or-cloud-init-to-localhost.md

* env to .env
 2019-09-28 08:10:20 +08:00
Jack Ivanov
61729ac9b5
Update client.conf.j2 (#1580) 2019-09-12 12:52:10 +02:00
Nil Admirari
0c3aada66f Support for scripted Docker deployments (#1582) 2019-09-12 12:51:40 +02:00
Nil Admirari
fc27b439b5 Do not copy existing env to Docker image (#1581) 2019-09-12 12:13:38 +02:00
Nian Wang
71e49eb2c8 Add spacing, list format for readability. (#1560) 2019-09-06 10:56:24 +02:00
Squirrel
1ca8ee5554 Generates a password by native module (#1576) 
* use password module to generate password

* fix variable reference

* reduce character set to meet origin design

*  CA and p12 password chanes

- Move the CA_password generation task to the native lookup plugin
- Get rid of unneeded tasks
 2019-09-06 10:55:57 +02:00
Jack Ivanov
c6f45ead69
Allow OnDemand to be toggled later (#1557) 2019-09-06 09:33:36 +02:00
Jack Ivanov
95eddccfb7
EC2: Enable EBS single step encryption by default (#1556) 
* EC2: EBS single step encryption by default

* return back the encryption variable
 2019-08-26 17:25:29 +02:00
Jack Ivanov
3c30074a7f
Revert "More robust use of our virtualenv (#1412)" (#1559) 
This reverts commit 2909107554.
 2019-08-22 12:54:05 +02:00
Jack Ivanov
fe7755e6a0
Allow to unblock smb and netbios in config.cfg (#1558) 2019-08-21 12:03:10 +02:00
John Wesley
fe19859b00 Docker makefile (#1553) 
* makefile for docker deploys

* update docs for makefile
 2019-08-19 15:07:24 +02:00
Jack Ivanov
655729ef54
Update CHANGELOG.md 2019-08-15 15:24:52 +02:00
Julien Bachmann
3dc08c94cf New cloud provider CloudStack (#1420) 
* clean commits from branch cloud-cloudstack w/ proper committer email/name

* fixed ansible-lint errors

* corrected typo in prompted message

* standalone cloudstack zones module

* added missing environment variables

* remove `_cloudstack_zones` default variable

* Move to Ubuntu 19.04

* Update cloud-cloudstack.md

* Update cloud-cloudstack.md

Markdown doesn't render `<your account>`

* Update prompts.yml

* Update main.yml
 2019-08-15 15:23:10 +02:00
James Polley
2909107554 More robust use of our virtualenv (#1412) 
Prior to this change, the script tests if it's running inside a
virtualenv; and if it is, it assumes that it must be inside its own
virtualenv.

This change switches to testing for the activate binary in the
place we expect; and if it's found, using it directly. This avoids
false positives (running the script inside the wrong virtualenv) and
makes sure that we're running inside the right virtualenv.
 2019-08-15 12:31:29 +02:00
Jack Ivanov
211d1b2cab
Google Cloud: remove sshguard (#1548) 
* Google Cloud: remove sshguard

* Remove whitespace
 2019-08-15 09:27:54 +02:00
Jack Ivanov
561afe18f9
Remove WireGuard pki from tmpfs (#1547) 2019-08-13 17:36:07 +02:00
Jack Ivanov
f8ce1f84a2
Update CHANGELOG.md 2019-07-31 17:47:11 +02:00
Jack Ivanov
e8ae7b2341
Update CHANGELOG.md 2019-07-31 17:42:50 +02:00
Jack Ivanov
38d8a6d0e2 Deprecate IKEv2 for Windows (#1521) 
* Windows to WireGuard

* Add note about WireGuard

* change wireguard faq

* Clarify Windows instructions

* Correct Wireguard description

* Update README.md
 2019-07-31 11:28:33 -04:00
dependabot[bot]
ab0f0c00fe Bump ansible from 2.7.10 to 2.7.12 (#1536) 
* Bump ansible from 2.7.10 to 2.7.12

Bumps [ansible](https://github.com/ansible/community) from 2.7.10 to 2.7.12.
- [Release notes](https://github.com/ansible/community/releases)
- [Commits](https://github.com/ansible/community/commits)

Signed-off-by: dependabot[bot] <support@github.com>

* Parse required ansible version
 2019-07-31 10:24:08 -04:00
Jack Ivanov
545ad480a4
Add tags to EC2 encrypted images (#1530) 2019-07-27 15:47:17 +02:00
David Myers
902fdab3a0 Update local install instructions (#1527) 2019-07-22 11:28:23 +02:00
TC1977
37e4f46673 Update deploy-from-ansible.md (#1518) 
Further clarifies that the usage of `-t` is deprecated (other than `--skip-tags`) and using variables is preferred.
 2019-07-14 10:56:43 +02:00
Jack Ivanov
090a60d48d PKI to tmpfs (#1496) 
* PKI to tmpfs

* Fixes
- diskutil to full path
- unmount and eject fixes

* Umount fix

* run diskutil info only on Darwin kernels

* fix shell tasks
 2019-07-10 12:31:25 -04:00
Jack Ivanov
f986811d64
remove pycrypto from the gce role (#1489) 
pycrypto is dead
 2019-07-04 18:00:15 +02:00
Jack Ivanov
0e6554943f
Add default IPv6 routes to the windows powershell script (#1501) 2019-06-24 20:32:08 +02:00
Daniel Néri
14ee323eca Fix outdated task name in DNS role (#1499) 2019-06-24 14:10:20 +02:00
David Myers
f152d3a746 Troubleshooting IPsec NAT issues (#1498) 2019-06-24 10:24:05 +02:00