diff options
Diffstat (limited to 'disposable')
| -rw-r--r-- | disposable/Vagrantfile | 42 |
1 files changed, 40 insertions, 2 deletions
diff --git a/disposable/Vagrantfile b/disposable/Vagrantfile index 6522b1e..b21d234 100644 --- a/disposable/Vagrantfile +++ b/disposable/Vagrantfile @@ -27,7 +27,7 @@ Vagrant.configure('2') do |config| libvirt.storage_pool_name = 'ramdisk' libvirt.default_prefix = 'disposable-' libvirt.driver = 'kvm' - libvirt.memory = '2048' + libvirt.memory = '3076' libvirt.cpus = 6 libvirt.sound_type = nil libvirt.qemuargs value: '-nographic' @@ -39,8 +39,9 @@ Vagrant.configure('2') do |config| end config.vm.provision 'update-upgrade', type: 'shell', name: 'update-upgrade', inline: <<-SHELL + set -ex sudo apk update && sudo apk upgrade - sudo apk add tor torsocks firefox-esr xauth font-dejavu wget + sudo apk add tor torsocks firefox-esr xauth font-dejavu wget openvpn unzip iptables wget -q https://addons.mozilla.org/firefox/downloads/file/4228676/foxyproxy_standard-8.9.xpi mv foxyproxy_standard-8.9.xpi foxyproxy@eric.h.jung.xpi mkdir -p ~/.mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/ @@ -48,10 +49,47 @@ Vagrant.configure('2') do |config| SHELL config.vm.provision 'update-upgrade-privileged', type: 'shell', name: 'update-upgrade-privileged', privileged: true, inline: <<-SHELL + set -ex sed -i 's/^#X11DisplayOffset .*/X11DisplayOffset 0/' /etc/ssh/sshd_config sed -i 's/^X11Forwarding .*/X11Forwarding yes/' /etc/ssh/sshd_config rc-service sshd restart + + #rc-update add tor default cp /vagrant/torrc /etc/tor/torrc rc-service tor start + + #rc-update add openvpn default + mkdir -p /tmp/mullvad/ && \ + cp /vagrant/mullvad_openvpn_linux_fi_hel.zip /tmp/mullvad/ && \ + cd /tmp/mullvad && \ + unzip mullvad_openvpn_linux_fi_hel.zip && \ + mv mullvad_config_linux_fi_hel/mullvad_fi_hel.conf /etc/openvpn/openvpn.conf && \ + mv mullvad_config_linux_fi_hel/mullvad_userpass.txt /etc/openvpn/ && \ + mv mullvad_config_linux_fi_hel/mullvad_ca.crt /etc/openvpn/ && \ + mv mullvad_config_linux_fi_hel/update-resolv-conf /etc/openvpn && \ + chmod 755 /etc/openvpn/update-resolv-conf + modprobe tun + echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.d/ipv4.conf + sysctl -p /etc/sysctl.d/ipv4.conf + rc-service openvpn start || true + SHELL + + config.vm.provision 'mullvad-test', type: 'shell', name: 'test', privileged: false, inline: <<-SHELL + set -ex + curl https://am.i.mullvad.net/connected | grep -i "you\ are\ connected" + SHELL + + config.vm.provision 'kill-switch', communicator_required: false, type: 'shell', name: 'kill-switch', privileged: true, inline: <<-SHELL + set -ex + iptables -P OUTPUT DROP + iptables -A OUTPUT -o tun+ -j ACCEPT + iptables -A INPUT -i lo -j ACCEPT + iptables -A OUTPUT -o lo -j ACCEPT + iptables -A OUTPUT -d 255.255.255.255 -j ACCEPT + iptables -A INPUT -s 255.255.255.255 -j ACCEPT + iptables -A OUTPUT -o eth+ -p udp -m multiport --dports 53,1300:1302,1194:1197 -d 141.98.255.0/24,193.138.218.0/24,45.83.220.0/24,185.213.152.0/24,185.213.154.0/24,185.65.135.0/24,185.65.134.0/24 -j ACCEPT + iptables -A OUTPUT -o eth+ -p tcp -m multiport --dports 53,443 -d 141.98.255.0/24,193.138.218.0/24,45.83.220.0/24,185.213.152.0/24,185.213.154.0/24,185.65.135.0/24,185.65.134.0/24 -j ACCEPT + ip6tables -P OUTPUT DROP + ip6tables -A OUTPUT -o tun+ -j ACCEPT SHELL end |