mirror of
https://github.com/jmcorgan/fips.git
synced 2026-07-30 19:46:15 +00:00
Johnathan Corgan
a718cef8ce
Only the static family read FIPS_TEST_IMAGE; the firewall, ACL, nat, sidecar and both Tor compose files named the shared mutable tag directly, which is why the local CI runner has to retag its per-run image to that name. They now take the same defaulted form the static file already uses, so a harness run resolves the image it built and a bare hand run still resolves the shared tag exactly as before. Checked by rendering each file through `docker compose config` with the variables set: every service resolves to the supplied name and none is left naming the shared tag.
57 lines
1.5 KiB
YAML
57 lines
1.5 KiB
YAML
# Tor transport integration test — directory mode
|
|
#
|
|
# Topology:
|
|
# [fips-a] — Tor + FIPS co-located, HiddenServiceDir onion service
|
|
# [fips-b] — Tor + FIPS co-located, socks5-only, connects to fips-a's .onion
|
|
#
|
|
# Both nodes run Tor and FIPS in the same container. Node A's Tor manages
|
|
# the onion service via HiddenServiceDir. Node B connects outbound through
|
|
# its local Tor's SOCKS5 proxy.
|
|
|
|
networks:
|
|
dir-test:
|
|
driver: bridge
|
|
labels:
|
|
- "com.corganlabs.fips-ci=1"
|
|
|
|
services:
|
|
fips-a:
|
|
image: ${FIPS_TEST_IMAGE:-fips-test:latest}
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
sysctls:
|
|
- net.ipv6.conf.all.disable_ipv6=0
|
|
restart: "no"
|
|
container_name: fips-dir-a${FIPS_CI_NAME_SUFFIX:-}
|
|
hostname: fips-dir-a
|
|
volumes:
|
|
- ./configs/node-a.yaml:/etc/fips/fips.yaml:ro
|
|
- ./torrc:/etc/tor/torrc:ro
|
|
environment:
|
|
- RUST_LOG=info,fips::transport::tor=debug
|
|
- FIPS_TEST_MODE=tor-directory
|
|
networks:
|
|
dir-test:
|
|
|
|
fips-b:
|
|
image: ${FIPS_TEST_IMAGE:-fips-test:latest}
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
sysctls:
|
|
- net.ipv6.conf.all.disable_ipv6=0
|
|
restart: "no"
|
|
container_name: fips-dir-b${FIPS_CI_NAME_SUFFIX:-}
|
|
hostname: fips-dir-b
|
|
volumes:
|
|
- ./configs/node-b.yaml:/etc/fips/fips.yaml:ro
|
|
- ./torrc.socks5:/etc/tor/torrc:ro
|
|
environment:
|
|
- RUST_LOG=info,fips::transport::tor=debug
|
|
- FIPS_TEST_MODE=tor-directory
|
|
networks:
|
|
dir-test:
|