virtual-machines/suasploitable-devbox.pkr.hcl at main · SUASecLab/virtual-machines · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
variable "ssh_password" {
  type    = string
  default = "TH3P455W0RD"
}

variable "output_directory" {
  type    = string
  default = "DEVBOX_OUTPUT_DIR"
}

# Some sources:
# https://github.com/multani/packer-qemu-debian/tree/master

source "qemu" "suasploitable-devbox" {
  iso_url          = "https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-12.11.0-amd64-netinst.iso"
  iso_checksum     = "30ca12a15cae6a1033e03ad59eb7f66a6d5a258dcf27acd115c2bd42d22640e8"
  output_directory = "${var.output_directory}"
  shutdown_command = "echo '${var.ssh_password}'  | sudo -S /sbin/shutdown -hP now"
  disk_size        = "40G"
  format           = "qcow2"
  cpus             = "4"
  memory           = "4096"
  accelerator      = "kvm"
  http_directory   = "http"
  http_port_min    = "9000"
  http_port_max    = "9010"
  ssh_username     = "vagrant"
  ssh_password     = "${var.ssh_password}"
  ssh_timeout      = "40m"
  host_port_min    = "2000"
  host_port_max    = "2010"
  vm_name          = "suasploitable_devbox.qcow2"
  net_device       = "virtio-net"
  disk_interface   = "virtio"
  boot_wait        = "5s"
  headless         = "true"
  boot_command = [
    "<down><tab>",
    "preseed/url=http://{{ .HTTPIP }}:{{ .HTTPPort }}/suasploitable-basic-preseed.cfg ",
    "language=en locale=de_DE.UTF-8 ",
    "country=DE keymap=de ",
    "hostname=debian domain=example.com ",
  "<enter><wait>"]
}

# Necessary:
# https://askubuntu.com/questions/1309029/qemu-display-gtk-and-display-sdl-not-available-ubuntu-20-04-1-lts

build {
  sources = ["source.qemu.suasploitable-devbox"]

  # Installation scripts
  provisioner "file" {
    sources = [
      # Scripts called by other scripts or python
      "scripts/programs/suasploitable/data_center/python/devbox.py",
      "scripts/programs/suasploitable/data_center/python/configuration.py",
      "scripts/programs/suasploitable/data_center/python/environment.py",
      "scripts/programs/suasploitable/data_center/python/gacha.py",
      "scripts/programs/suasploitable/data_center/python/identities.py",
      "scripts/programs/suasploitable/data_center/python/password.py",
      "scripts/programs/suasploitable/data_center/python/devbox/gitea_setup.py",
      "scripts/programs/suasploitable/data_center/python/devbox/jenkins_setup.py",
      "scripts/programs/suasploitable/data_center/python/devbox/rocket_chat_setup.py",

      # Files
      "files/devbox/docker-compose.yml",
      "files/devbox/environment",
      "files/devbox/gitea/app.ini",
      "files/devbox/gitea/Dockerfile.gitea",
      "files/devbox/jenkins/init_scripts/00-users.groovy",
      "files/devbox/jenkins/init_scripts/01-ctf.groovy",
      "files/devbox/jenkins/plugins/ionicons-api.hpi",
      "files/devbox/jenkins/plugins/matrix-auth.hpi",
      "files/devbox/jenkins/Dockerfile.jenkins",

      # Joker
      "files/joker.sh",
      "files/ssh-betterdefaultpasslist.txt",

      # Password list
      "files/500-worst-passwords.txt"
    ]
    destination = "/tmp/"
  }

  # Set hostname
  provisioner "shell" {
    execute_command = "echo 'packer' | sudo -S env {{ .Vars }} {{ .Path }}"
    inline = ["hostnamectl set-hostname dev.suaseclab.de"]
  }

  # Install and set up programs
  provisioner "shell" {
    environment_vars = [
      "DEBIAN_FRONTEND=noninteractive",
      "SSH_PASSWORD=${var.ssh_password}"
    ]
    execute_command = "echo 'packer' | sudo -S env {{ .Vars }} {{ .Path }}"
    scripts = [
      # Set up main system
      "scripts/autostart.sh",
      "scripts/programs/suasploitable/environment.sh",

      # Install DevBox
      "scripts/programs/suasploitable/data_center/bash/devbox.sh",

      # Fix permissions (must be called last)
      "scripts/permissions.sh",
    ]
  }

  # Save configuration and flags
  provisioner "file" {
    sources = [
      "/tmp/configuration.json",
      "/tmp/install_script.sh",
      "/tmp/flags.txt"
    ]
    destination = "${var.output_directory}/"
    direction   = "download"
  }
}