mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 16:24:45 +00:00
Arjen
733ee512d3
Operator-facing IPs in user-visible configs/docs (examples, tutorials, packaging, sidecar templates) are now the resolvable hostnames of the public test fleet (test-us01.fips.network, etc.) so they keep working without baking specific addresses into examples. Doc-comment and test fixtures in src/config/transport.rs use RFC 5737 TEST-NET-2 (198.51.100.1) so they cannot accidentally point at a real host. Also resyncs the openwrt-ipk fips.yaml with the common reference (merge from master) and applies the same DNS-name swap there.
65 lines
1.5 KiB
YAML
65 lines
1.5 KiB
YAML
# Tor transport integration test — socks5-outbound
|
|
#
|
|
# Topology:
|
|
# [fips-a] --tor/socks5--> test-us01 (test-us01.fips.network:443) <--tor/socks5-- [fips-b]
|
|
#
|
|
# Both FIPS nodes connect outbound through a local Tor daemon's SOCKS5
|
|
# proxy to test-us01's TCP listener. test-us01 routes between them.
|
|
# Ping between fips-a and fips-b validates the full Tor transport path.
|
|
|
|
networks:
|
|
tor-test:
|
|
driver: bridge
|
|
|
|
services:
|
|
tor-daemon:
|
|
image: osminogin/tor-simple:latest
|
|
container_name: tor-daemon
|
|
restart: "no"
|
|
volumes:
|
|
- ../common/torrc:/etc/tor/torrc:ro
|
|
networks:
|
|
tor-test:
|
|
|
|
fips-a:
|
|
image: fips-test:latest
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
sysctls:
|
|
- net.ipv6.conf.all.disable_ipv6=0
|
|
restart: "no"
|
|
container_name: fips-tor-a
|
|
hostname: fips-tor-a
|
|
depends_on:
|
|
- tor-daemon
|
|
volumes:
|
|
- ./configs/node-a.yaml:/etc/fips/fips.yaml:ro
|
|
environment:
|
|
- RUST_LOG=info,fips::transport::tor=debug
|
|
- FIPS_TEST_MODE=tor-socks5
|
|
networks:
|
|
tor-test:
|
|
|
|
fips-b:
|
|
image: fips-test:latest
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
sysctls:
|
|
- net.ipv6.conf.all.disable_ipv6=0
|
|
restart: "no"
|
|
container_name: fips-tor-b
|
|
hostname: fips-tor-b
|
|
depends_on:
|
|
- tor-daemon
|
|
volumes:
|
|
- ./configs/node-b.yaml:/etc/fips/fips.yaml:ro
|
|
environment:
|
|
- RUST_LOG=info,fips::transport::tor=debug
|
|
- FIPS_TEST_MODE=tor-socks5
|
|
networks:
|
|
tor-test:
|