mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 00:04:54 +00:00
Johnathan Corgan
0e57216d98
The host (217.77.8.91:443) was renamed to test-us01 some time ago (canonical name shared with packaging/common/hosts and the docs); the test scaffold's alias labels and narrative comments hadn't been updated. Pure naming cleanup, no behavior change. The continued dependency on the live external host is tracked separately.
65 lines
1.5 KiB
YAML
65 lines
1.5 KiB
YAML
# Tor transport integration test — socks5-outbound
|
|
#
|
|
# Topology:
|
|
# [fips-a] --tor/socks5--> test-us01 (217.77.8.91:443) <--tor/socks5-- [fips-b]
|
|
#
|
|
# Both FIPS nodes connect outbound through a local Tor daemon's SOCKS5
|
|
# proxy to test-us01's TCP listener. test-us01 routes between them.
|
|
# Ping between fips-a and fips-b validates the full Tor transport path.
|
|
|
|
networks:
|
|
tor-test:
|
|
driver: bridge
|
|
|
|
services:
|
|
tor-daemon:
|
|
image: osminogin/tor-simple:latest
|
|
container_name: tor-daemon
|
|
restart: "no"
|
|
volumes:
|
|
- ../common/torrc:/etc/tor/torrc:ro
|
|
networks:
|
|
tor-test:
|
|
|
|
fips-a:
|
|
image: fips-test:latest
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
sysctls:
|
|
- net.ipv6.conf.all.disable_ipv6=0
|
|
restart: "no"
|
|
container_name: fips-tor-a
|
|
hostname: fips-tor-a
|
|
depends_on:
|
|
- tor-daemon
|
|
volumes:
|
|
- ./configs/node-a.yaml:/etc/fips/fips.yaml:ro
|
|
environment:
|
|
- RUST_LOG=info,fips::transport::tor=debug
|
|
- FIPS_TEST_MODE=tor-socks5
|
|
networks:
|
|
tor-test:
|
|
|
|
fips-b:
|
|
image: fips-test:latest
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
sysctls:
|
|
- net.ipv6.conf.all.disable_ipv6=0
|
|
restart: "no"
|
|
container_name: fips-tor-b
|
|
hostname: fips-tor-b
|
|
depends_on:
|
|
- tor-daemon
|
|
volumes:
|
|
- ./configs/node-b.yaml:/etc/fips/fips.yaml:ro
|
|
environment:
|
|
- RUST_LOG=info,fips::transport::tor=debug
|
|
- FIPS_TEST_MODE=tor-socks5
|
|
networks:
|
|
tor-test:
|