Add Terraform

Ansible/install.yml

@@ -10,5 +10,5 @@
   tasks:
     - name: Install Wazuh
       import_tasks: tasks/Security/wazuh.yml
-    - name: Install OSquery
-      import_tasks: tasks/Security/osquery.yml
+    # - name: Install OSquery
+    #   import_tasks: tasks/Security/osquery.yml

Terraform/init.sh

+#!/bin/bash
+
+source secret/login.sh
+
+PROJ_ID="3547"
+STATE_NAME="hacktivity"
+
+terraform init \
+    -backend-config="address=https://git.sch.bme.hu/api/v4/projects/${PROJ_ID}/terraform/state/${STATE_NAME}" \
+    -backend-config="lock_address=https://git.sch.bme.hu/api/v4/projects/${PROJ_ID}/terraform/state/${STATE_NAME}/lock" \
+    -backend-config="unlock_address=https://git.sch.bme.hu/api/v4/projects/${PROJ_ID}/terraform/state/${STATE_NAME}/lock" \
+    -backend-config="username=${GITLAB_USER}" \
+    -backend-config="password=${GITLAB_REPO_PAT}" \
+    -backend-config="lock_method=POST" \
+    -backend-config="unlock_method=DELETE" \
+    -backend-config="retry_wait_min=5" \
+    -reconfigure

Terraform/main.tf

+terraform {
+  required_providers {
+    proxmox = {
+      source  = "Telmate/proxmox"
+      version = "2.8.0"
+    }
+  }
+  backend "http" {
+  }
+}
+
+provider "proxmox" {
+  pm_api_url      = "https://10.151.107.183:8006/api2/json"
+  pm_tls_insecure = true
+}
+
+locals {
+  ssh_keys = <<EOF
+ssh-rsa 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 arcter (git.sch.bme.hu)
+ssh-rsa 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 arcter (git.sch.bme.hu)
+ssh-rsa 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 arcter (git.sch.bme.hu)
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDO7xrj6r82D6e8cEAgAomrZ5ln5KQGaCKfGh8eRKRRYZzVW7r16pThZMfq98Klh1fMFD9sGYqaOZSPTkd3HchePDd+YddFJPW8xArVoZ9MmnkEXMA/GJ3632FOEmmYhW2+SvVjtaEw7CnTAWvL6rEmHFJ8F4RIC4z1Vc4tJU5mVs8sKSCEZSSGTepb76LkbEYQ6Gew7x5uvq1WBqbY4MpyLmvZ62cAHVGAwfqbpsCUhkm/WIq7E28RNkjy8L+YeD8Zlil4l+KP2H9ceUC8Oh863HD2ktvXiahTkUnlUaCv+c3ETLG+hnjb0inCv13OJ/lhFrJjIJ+Bq9M1l//8MI4a1/AOlWoLTa8f0FVU3BdjYUY8xLwg2AILluya3VzeAHPnjdFq5SCZFa7ofC+XpY3Lnpj2eB76++1ys0Nf97/rsfhiDbCNZghaeSzhKiv3agzRGyEnwmUvurQL3NNkPPmUBSLxtUsrN+zo8amEiL0rKnctvPEXN1DzGtxcrdhnwIU= arcter (git.sch.bme.hu)
+ssh-rsa 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 arcter (git.sch.bme.hu)
+ssh-rsa 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 arcter (git.sch.bme.hu)
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPpH+TNAwcmxYc5cVctH04wUU83Pba6s/AkKXOnhDn+m rlacko@zen
+ssh-rsa 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 radlaci97 (git.sch.bme.hu)
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQD1g7etLbSwoKR6nr9t4e/ZJSGGf7xydXVo+T4hJOEFPxaN86rKd11KibRYOA34DbMRS7IGM2uqYzHMGQ+58QOu+33fJm3uwGgRmpM9Me4CVMSp3oI0CrXsmvER8UrfP/p9imHuYa0xwJIzOVvh9zYn2bLHIuOwSKyDZR+7FsTyiIYpiCs2c6AkiKK444N499YARtIEgHFmkcxPqX1jQnl3WlIbTw73Y7+fKhhyGwKkdg+4IpPhZ2OSe/+tzYsvBX5Yh49iAM3+RMPeedeOX9kjj9sypVTK+Y7XecCdFocsrKXWSTBk7w37fnv3+UeWqFrAJv29z0Fc3CGUTEHq77i0WscbbFFZwWPbxgV+9AQc9Alg/V640oe9Xmx1NnoQiC90zCAA2la1snsNkCAKbRfTjsX26Hkw20cWDaKaC5Rdt7MqrE2PZWuLOLCnztIKClatR6BFBZo4YUZEUN7rXKr+JsA43XOqbzgKVACOXsewl3hIsc9CJga2rYOONPSjZh0= josh@thinkpad
+ssh-rsa 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 josh@thinkpad
+EOF
+}

Terraform/mgmt.tf

+resource "proxmox_lxc" "mgmt" {
+  target_node  = "tempest"
+  hostname     = "mgmt"
+  ostemplate   = "ISOSTORE:vztmpl/ubuntu-20.04-standard_20.04-1_amd64.tar.gz"
+  password     = "KWL6v4rJoxcc36"
+  vmid         = 250
+  start        = true
+  memory       = 2048
+  cores        = 2
+  onboot       = true
+  startup      = "order=1"
+  unprivileged = true
+
+  ssh_public_keys = local.ssh_keys
+
+  rootfs {
+    storage = "local-lvm"
+    size    = "10G"
+  }
+
+  network {
+    name   = "eth0"
+    bridge = "vmbr2"
+    ip     = "192.168.255.200/24"
+    gw     = "192.168.255.254"
+    hwaddr = "7A:1A:00:4A:0D:FA"
+  }
+
+  network {
+    name   = "eth1"
+    bridge = "vmbr3"
+    ip     = "192.168.254.254/24"
+    hwaddr = "6E:58:E9:78:FD:87"
+  }
+}

Terraform/test.tf

+locals {
+    challenges = {
+        challenge-01 = {
+            vmid = 141
+        }
+        challenge-02 = {
+            vmid = 142
+        }
+        challenge-03 = {
+            vmid = 143
+        }
+        challenge-04 = {
+            vmid = 144
+        }
+    }
+}
+
+resource "proxmox_vm_qemu" "challenge" {
+  for_each = { for k, v in local.challenges : k => v }
+
+  name = each.key
+  desc = "Wargame 2021"
+  vmid = each.value.vmid
+
+  target_node = "tempest"
+
+  clone = "ubuntu-cloudinit-20.04"
+
+  agent = 1
+
+  cores   = 2
+  sockets = 1
+  vcpus   = 0
+  memory  = 1024
+
+  os_type = "cloud-init"
+
+  disk {
+    size    = "20G"
+    type    = "virtio"
+    storage = "local-lvm"
+  }
+
+  network {
+    model   = "virtio"
+    bridge  = "vmbr2"
+  }
+
+  nameserver = "8.8.8.8"
+  ipconfig0  = "ip=192.168.255.${each.value.vmid}/24,gw=192.168.255.254"
+  sshkeys    = local.ssh_keys
+}