|
@@ -29,13 +29,13 @@ docker run --name lighthouse1 --rm "$CONTAINER" -config lighthouse1.yml -test
|
|
|
docker run --name host2 --rm "$CONTAINER" -config host2.yml -test
|
|
|
|
|
|
vagrant up
|
|
|
-vagrant ssh -c "cd /nebula && /nebula/$1-nebula -config host3.yml -test"
|
|
|
+vagrant ssh -c "cd /nebula && /nebula/$1-nebula -config host3.yml -test" -- -T
|
|
|
|
|
|
docker run --name lighthouse1 --device /dev/net/tun:/dev/net/tun --cap-add NET_ADMIN --rm "$CONTAINER" -config lighthouse1.yml 2>&1 | tee logs/lighthouse1 | sed -u 's/^/ [lighthouse1] /' &
|
|
|
sleep 1
|
|
|
docker run --name host2 --device /dev/net/tun:/dev/net/tun --cap-add NET_ADMIN --rm "$CONTAINER" -config host2.yml 2>&1 | tee logs/host2 | sed -u 's/^/ [host2] /' &
|
|
|
sleep 1
|
|
|
-vagrant ssh -c "cd /nebula && sudo sh -c 'echo \$\$ >/nebula/pid && exec /nebula/$1-nebula -config host3.yml'" &
|
|
|
+vagrant ssh -c "cd /nebula && sudo sh -c 'echo \$\$ >/nebula/pid && exec /nebula/$1-nebula -config host3.yml'" 2>&1 -- -T | tee logs/host3 | sed -u 's/^/ [host3] /' &
|
|
|
sleep 15
|
|
|
|
|
|
# grab tcpdump pcaps for debugging
|
|
@@ -46,8 +46,8 @@ docker exec host2 tcpdump -i eth0 -q -w - -U 2>logs/host2.outside.log >logs/host
|
|
|
# vagrant ssh -c "tcpdump -i nebula1 -q -w - -U" 2>logs/host3.inside.log >logs/host3.inside.pcap &
|
|
|
# vagrant ssh -c "tcpdump -i eth0 -q -w - -U" 2>logs/host3.outside.log >logs/host3.outside.pcap &
|
|
|
|
|
|
-docker exec host2 ncat -nklv 0.0.0.0 2000 &
|
|
|
-vagrant ssh -c "ncat -nklv 0.0.0.0 2000" &
|
|
|
+#docker exec host2 ncat -nklv 0.0.0.0 2000 &
|
|
|
+#vagrant ssh -c "ncat -nklv 0.0.0.0 2000" &
|
|
|
#docker exec host2 ncat -e '/usr/bin/echo host2' -nkluv 0.0.0.0 3000 &
|
|
|
#vagrant ssh -c "ncat -e '/usr/bin/echo host3' -nkluv 0.0.0.0 3000" &
|
|
|
|
|
@@ -68,11 +68,11 @@ docker exec host2 ping -c1 192.168.100.1
|
|
|
# Should fail because not allowed by host3 inbound firewall
|
|
|
! docker exec host2 ping -c1 192.168.100.3 -w5 || exit 1
|
|
|
|
|
|
-set +x
|
|
|
-echo
|
|
|
-echo " *** Testing ncat from host2"
|
|
|
-echo
|
|
|
-set -x
|
|
|
+#set +x
|
|
|
+#echo
|
|
|
+#echo " *** Testing ncat from host2"
|
|
|
+#echo
|
|
|
+#set -x
|
|
|
# Should fail because not allowed by host3 inbound firewall
|
|
|
#! docker exec host2 ncat -nzv -w5 192.168.100.3 2000 || exit 1
|
|
|
#! docker exec host2 ncat -nzuv -w5 192.168.100.3 3000 | grep -q host3 || exit 1
|
|
@@ -82,18 +82,18 @@ echo
|
|
|
echo " *** Testing ping from host3"
|
|
|
echo
|
|
|
set -x
|
|
|
-vagrant ssh -c "ping -c1 192.168.100.1"
|
|
|
-vagrant ssh -c "ping -c1 192.168.100.2"
|
|
|
-
|
|
|
-set +x
|
|
|
-echo
|
|
|
-echo " *** Testing ncat from host3"
|
|
|
-echo
|
|
|
-set -x
|
|
|
+vagrant ssh -c "ping -c1 192.168.100.1" -- -T
|
|
|
+vagrant ssh -c "ping -c1 192.168.100.2" -- -T
|
|
|
+
|
|
|
+#set +x
|
|
|
+#echo
|
|
|
+#echo " *** Testing ncat from host3"
|
|
|
+#echo
|
|
|
+#set -x
|
|
|
#vagrant ssh -c "ncat -nzv -w5 192.168.100.2 2000"
|
|
|
#vagrant ssh -c "ncat -nzuv -w5 192.168.100.2 3000" | grep -q host2
|
|
|
|
|
|
-vagrant ssh -c "sudo xargs kill </nebula/pid"
|
|
|
+vagrant ssh -c "sudo xargs kill </nebula/pid" -- -T
|
|
|
docker exec host2 sh -c 'kill 1'
|
|
|
docker exec lighthouse1 sh -c 'kill 1'
|
|
|
sleep 1
|