static-analysis-ttp/Vagrantfile at master · ProfessionallyEvil/static-analysis-ttp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
# -*- mode: ruby -*-
# vi: set ft=ruby :

Vagrant.configure("2") do |config|

  # configuring linux box
  config.vm.define "linux", primary: true do |linux|

    linux.vm.box = "bento/ubuntu-18.04"

    # Create a private network, which allows host-only access to the machine
    # using a specific IP.
    config.vm.network "private_network", ip: "192.168.33.10"

    # Provider-specific configuration so you can fine-tune various
    # backing providers for Vagrant. These expose provider-specific options.
    # Example for VirtualBox:
    #
    linux.vm.provider "virtualbox" do |vb|
    #   # Display the VirtualBox GUI when booting the machine
    #   vb.gui = true
    #
    #   # Customize the amount of memory on the VM:
      vb.cpus = "2"
      vb.memory = "4096"
      vb.customize ["modifyvm", :id, "--natdnshostresolver1", "on"] #Resolves nds for Win hosts
    end

    # Enable provisioning with a shell script. Additional provisioners such as
    # Puppet, Chef, Ansible, Salt, and Docker are also available. Please see the
    # documentation for more information about their specific syntax and use.
    config.vm.provision "shell", inline: <<-SHELL
      apt-get update
      # apt-get dist-upgrade -y
      curl -fsSL https://get.docker.com | sh
      adduser vagrant docker
    #   apt-get install -y apache2
    SHELL

    # config.vm.provision 'sonarqube', type: "shell", run: "never", path: "./prov_tools/sonarqube/notes.sh"
  end
  # config.vm.define "windows", autostart: false do |win|

  #   win.vm.box = "Microsoft/EdgeOnWindows10"

  #   # Create a private network, which allows host-only access to the machine
  #   # using a specific IP.
  #   config.vm.network "private_network", ip: "192.168.33.11"

  #   # Provider-specific configuration so you can fine-tune various
  #   # backing providers for Vagrant. These expose provider-specific options.
  #   # Example for VirtualBox:
  #   #
  #   win.vm.provider "virtualbox" do |vb|
  #   #   # Display the VirtualBox GUI when booting the machine
  #   #   vb.gui = true
  #   #
  #   #   # Customize the amount of memory on the VM:
  #     vb.cpus = "2"
  #     vb.memory = "4096"
  #   end
  # end


  # Share an additional folder to the guest VM. The first argument is
  # the path on the host to the actual folder. The second argument is
  # the path on the guest to mount the folder. And the optional third
  # argument is a set of non-required options.
  # config.vm.synced_folder "E:\\client_name\\someDir", "/client_code"


  ##################################################
  ### Tool provisioning
  ## general SASTs
  # sonarqube
  config.vm.provision 'sonarqube', type: 'ansible_local', run: 'never' do |ansible|
    ansible.playbook = 'prov_tools/sonarqube/install.yml'
    ansible.version = 'latest'
    ansible.pip_install_cmd = "curl -fsSL https://git.io/Jt9mk | sudo bash -xs"
    ansible.install_mode = 'pip'
    ansible.extra_vars = {
      ansible_python_interpreter: "/usr/bin/env python3"
    }
  end
  # Bandit
  config.vm.provision 'bandit', type: 'ansible_local', run: 'never' do |ansible|
    ansible.playbook = 'prov_tools/bandit/install.yml'
    ansible.version = 'latest'
    ansible.pip_install_cmd = "curl -fsSL https://git.io/Jt9mk | sudo bash -xs"
    ansible.install_mode = 'pip'
    ansible.extra_vars = {
      ansible_python_interpreter: "/usr/bin/env python3"
    }
  end

  # MobSF
  config.vm.provision 'mobsf', type: 'ansible_local', run: 'never' do |ansible|
    ansible.playbook = 'prov_tools/MobSF/install.yml'
    ansible.version = 'latest'
    ansible.pip_install_cmd = "curl -fsSL https://git.io/Jt9mk | sudo bash -xs"
    ansible.install_mode = 'pip'
    ansible.galaxy_command = "ansible-galaxy collection install -r %{role_file} --force && ansible-galaxy role install -r %{role_file} --force"
    ansible.galaxy_role_file = "prov_vagrant/requirements.yml"
    ansible.extra_vars = {
      ansible_python_interpreter: "/usr/bin/env python3"
    }
  end
  # Shellcheck
  config.vm.provision 'shellcheck', type: 'ansible_local', run: 'never' do |ansible|
    ansible.playbook = 'prov_tools/shellcheck.yml'
    ansible.version = 'latest'
    ansible.pip_install_cmd = "curl -fsSL https://git.io/Jt9mk | sudo bash -xs"
    ansible.install_mode = 'pip'
    ansible.extra_vars = {
      ansible_python_interpreter: "/usr/bin/env python3"
    }
  end
  ##################################################
  ## Docker tools
  # Clair
  # config.vm.provision 'clair', type: 'ansible_local', run: 'never' do |ansible|
  #   ansible.playbook = 'prov_tools/docker/clair/install.yml'
  #   ansible.version = 'latest'
  #   ansible.extra_vars = {
  #     ansible_python_interpreter: "/usr/bin/env python3"
  #   }
  # end
  ##################################################
  ## Template
  # <Tool_name>
  # config.vm.provision '<tool_name>', type: 'ansible_local', run: 'never' do |ansible|
  #   ansible.playbook = 'prov_tools/<tool_name>/install.yml'
  #   ansible.version = 'latest'
  #   ansible.extra_vars = {
  #     ansible_python_interpreter: "/usr/bin/env python3"
  #   }
  # end
end