From 42435984dbfbb9863093017c8a8e5fbb02d11611 Mon Sep 17 00:00:00 2001 From: Vlastimil Holer Date: Thu, 8 Jun 2017 15:47:00 +0200 Subject: [PATCH] Add ESX VNC firewall rules VIB package and build info. --- .gitignore | 3 ++ share/esx-fw-vnc/Makefile | 14 ++++++ share/esx-fw-vnc/README.md | 44 ++++++++++++++++++ share/esx-fw-vnc/Vagrantfile | 35 ++++++++++++++ share/esx-fw-vnc/fw-vnc.vib | Bin 0 -> 1632 bytes share/esx-fw-vnc/fw-vnc.zip | Bin 0 -> 4055 bytes share/esx-fw-vnc/vib/descriptor.xml | 33 +++++++++++++ .../fw-vnc/etc/vmware/firewall/vnc.xml | 16 +++++++ 8 files changed, 145 insertions(+) create mode 100644 share/esx-fw-vnc/Makefile create mode 100644 share/esx-fw-vnc/README.md create mode 100644 share/esx-fw-vnc/Vagrantfile create mode 100644 share/esx-fw-vnc/fw-vnc.vib create mode 100644 share/esx-fw-vnc/fw-vnc.zip create mode 100644 share/esx-fw-vnc/vib/descriptor.xml create mode 100644 share/esx-fw-vnc/vib/payloads/fw-vnc/etc/vmware/firewall/vnc.xml diff --git a/.gitignore b/.gitignore index 47fa967b0e..a6056c833a 100644 --- a/.gitignore +++ b/.gitignore @@ -26,3 +26,6 @@ src/sunstone/public/css/app.min.css src/sunstone/public/dist/ src/sunstone/public/locale/languages/*.js .tx/config + +share/esx-fw-vnc/*.rpm +share/esx-fw-vnc/.vagrant* diff --git a/share/esx-fw-vnc/Makefile b/share/esx-fw-vnc/Makefile new file mode 100644 index 0000000000..6fb0a210a1 --- /dev/null +++ b/share/esx-fw-vnc/Makefile @@ -0,0 +1,14 @@ +.PHONY: fw-vnc.vib clean + +fw-vnc.vib: vmware-esx-vib-author-5.0.0-0.0.847598.i386.rpm + vagrant plugin install vagrant-sshfs + vagrant up + vagrant destroy -f + @echo "Package successfully $@ built" + +vmware-esx-vib-author-5.0.0-0.0.847598.i386.rpm: + wget -O $@ https://download3.vmware.com/software/vmw-tools/vibauthor/vmware-esx-vib-author-5.0.0-0.0.847598.i386.rpm + +clean: + -rm -rf fw-vnc.vib fw-vnc.zip vmware-esx-vib-author*.rpm + -vagrant destroy -f diff --git a/share/esx-fw-vnc/README.md b/share/esx-fw-vnc/README.md new file mode 100644 index 0000000000..3cdae62ae0 --- /dev/null +++ b/share/esx-fw-vnc/README.md @@ -0,0 +1,44 @@ +# Building ESX VIB package + +Requirements: + +1. [Vagrant](https://www.vagrantup.com/) +2. [VirtualBox](https://www.virtualbox.org/) + +Other requirements (automatically get by `Makefile`): + +3. Vagrant plugin vagrant-sshfs +4. [VIB Author](https://labs.vmware.com/flings/vib-author) tool RPM in current directory + +# Build + +VIB package build is based on a deprecated, but still working, *VIB Author* tool. +This tool works fine on old EL/CentOS 6, that's why the build process +(unfortunately) requires the Vagrant+VirtualBox to provide the build +environment with the CentOS 6. + +There are two possible approaches to building the VIB package. + +### 1. Makefile + +Just start the `make` and required Vagrant plugin and latest known +VIB Author tool will be automatically downloaded and new VIB +packages built. + +``` +$ make +``` + +You can find the fresh packages in `fw-vnc.vib` and `fw-vnc.zip`. + +### 2. Manual + +1. download [VIB Author](https://labs.vmware.com/flings/vib-author) tool RPM into the current directory +2. start Vagrant + +``` +$ vagrant plugin install vagrant-sshfs +$ vagrant up && vagrant destroy -f +``` + +You can find the fresh packages in `fw-vnc.vib` and `fw-vnc.zip`. diff --git a/share/esx-fw-vnc/Vagrantfile b/share/esx-fw-vnc/Vagrantfile new file mode 100644 index 0000000000..37037553c9 --- /dev/null +++ b/share/esx-fw-vnc/Vagrantfile @@ -0,0 +1,35 @@ +# -*- mode: ruby -*- +# vi: set ft=ruby : +# +if Dir.glob('vmware-esx-vib-author*.rpm').size != 1 + STDERR.puts <7~2FRiDH`A8nrjOJDVGCU)kB) z^MX<>kw!`j2?g`mm`3S3IfK? zPeyFr%Rv`$9_$MMq$nTfqW&z^iL#jxTOL)&QW0m`8r>Oa5Cr%u{8Y1*SREUPGcfUF z5STLZRNglOI$kgD0#A22=p{fsG^6w@W1y-c$15@$$VY~(+NPPcu$Kq?6)|97A92_s z9^G4xzIG02vgc-Ltyc||04_3Zin~hwiU?4#X`56SO5l1G6)txI8uRFe6GHQ#mM_z< z^a9H08Zcj(q%s5!%o{e;sOn{l3EIDjEgc4y3C>3o>-PfuB|*}ZNE|{%jf%Rcp@yg)(_jNF8YYk^DJZ6E z5g{tYBk@F10(@oWemFK)r$Qw$SKeEt@$%cN zf}t9hlT)EP_pDmQcPF=3U00eVOnV{h(@)jh)*0&I`n4m^_UO<9pUNKhizS-i_bT!!zd>w)tx|oviyTA{;oLXnp8gyMJ?w+p?`kOVl%8 zrDsR>KYsZAp?h+(qvyDNpSRU5>^wbJ|K7Wct7k91mU`udnu7i8bA`PZpV)Cb`E9o| zUKm_Ad92WTCSJI)xB2PwCnjfyZWz1eQrF1e3(Xr=U)uT92cgb0NB%hS=P%dRe!5}d zqp`g|j5pqPd{ak$^sfV%b<-0c-fHuieN64z@p#+KLxVN1SAVzt;M~;jJ#KV#>b^s{ zqo-zv9{gl|hcWVM&DpW;7XO+bhq<4ItG<8p(8s%E^~5(2WWH!WTKDC~w*JKYGe2{Q zmu7aKJ2h3eao4ZikM^ggd*5EH4YOOiUaUU({B-rfx3;Y3US7PuV`Be&`%P6<{{T;e BQThM? literal 0 HcmV?d00001 diff --git a/share/esx-fw-vnc/fw-vnc.zip b/share/esx-fw-vnc/fw-vnc.zip new file mode 100644 index 0000000000000000000000000000000000000000..c90d44620135cf3755e27133b52074a7f355fb2f GIT binary patch literal 4055 zcmbtXWl$VUlU^*iYaqA;f@>fIS=?Qg;ET&*K^F@W-~|>9&ISpx5OjkCSs(-_KyU~i zf)m{Jc<-zGBz5=eW~yguruwPssh)cJX&rS8ObP%1fCCtW^r^j^V;6PD0RY5t0RV!B zTZo;vwXL&6${xrzPogXI!PR8k5xHQN7E3aV$G9YM?(MbbH+U28P4=~7b`@wOI)o3Nq>wGECdevYT$Ac&V}(KGqI4@6+6Y)o zT>FwkxBXjG12u}aQ*cV53RG)!i%S$Am@L{aoVz%aJAZ*K);?fyOG+P6rlM&1oHc2_ z2<~5xq`!0hHDtAnE#gA*o*s(s-fdBFv%VT%nJ`5jT2=o7p78i9Yl=55IXTsL`b*J+ zPfy^YZzlQSFY3T6o+Vl@D})0bn0-jUtk6DHQ_hI2(!$JDcF+;M1QQfNlWeT zXHmDmmE_-A{!shQdEWI}f=d1q>#?j!)ss|w;hM=>XJ;S0QH}<-*{zqBWkX4ON~Q;d zHN@Osb0yWk3qCZ3XMw4o)ktp=vErHa*M8CHfWUH3GjCT_SvNrKe^>=Ik`53jLh!tMiPo`O1J} z8kud>dZCeozwCO7ZI?@n0Y^k{EiLLZDdtYl3;64D>z{*&Y32PF6;jGH5(fKVz587c z!|~tb9QFnq9|Zi|t+5-+@>x3#w&qa!_}F$bU5wjZgjdSk>8#_r3QNgql2@MzFRTq> zTPv{=<1SaEpJUY4g=q!}6mHi~$>-u9&$T$@yD@w2r8)4f^HR%UKzzjUKjGGJ=0(;_ zdX~OJ?85kMqL$MPP}56`m-dXTIbJC(mbbc>Kl_SUo&`p5IwwSzOm+8;S}B%>Y*J+^ zCc2Z?uMdi9%B0(vSE2r@xRdTE5s$C`QkIXwxmMxz9Mh*#t~F65(J8uCjG35^4T&BQ zUNyr4&!tH%PX@hZkTvoXBCc;pz?B4@UpAjOSbqEQ^`ea1}T9RDf`7 zK+;kgdUr(Z8J=r#E&J_%}oE5AK8aK{?#=o(xoA)GQ!XdKwfP% zFvU*@#L_M7f&N8`ta5GqqZX(wr9r{Zp$%8C!&(C;p-`H!y==0DZs^-iNWZ1zeVY1? z|7!*>*S6WtR@XK8$p}rOQ-V1boH2(BFBXosT!qnm2|1V2cfkH!uHl#`y3I>Qvp%qi zMm@GQ;~aLF&!)+v;BhMgR-vGxJ>xm^JWScBpJQj_kIT=L|P(Y5C+h|0ZUi>3*-e-^nE9{3~9OiwqG9MM#Dt z0p66o*Lmp=`Qs#w2PSG-KBT~P1Iv#7yd>)!NA8Qnb)Esl=oTe(@f~hkvhDo*;JdQ zW!cpAFPg<2a5#N}?L4WN`4U=4p(#?-SfBb_$_RT_qKv(5hkLXhh4qkga-C`i!QVtX z_}4$BGQB5Yd7fHGOqrd!p4k>lek2bTi;vJJMAc zs-84f|Bd7GNhMd_*hY3RK@;yA3$zRr%>}ngStf#0%lBx2q?Q!r5)Lonp7xt^Hl_3C zE}{#VhBtf)#YzxTT`&^44y6A*`ElMiUeS`)oK=%y1A&de5$nN^LOOtUDnW>1HBv!f9XP-_9#f%}g@PK-?2X0@mKir&KdMqPXMY z6wpN$MQpyhI9Y~wyY&wq7Y&CA#Sz3@{5*VbSVpT34|05jO~o$q4y*QX;V^!qrpIC< zRlRf}gLPvc`J%{Me6W>&NvSm~nyn;w=E!W%OxtpRo+nL2@tI6(yDV~=ha1l%u4Kve zvt+zO9}w2rP-4g~zv6ZFs>yf2a0{~Us55pto>i2lojz4Aq&-$QD5YLk3)yJsyjGrr zYs5)}ZR*#*E=V?6*-)KRh+u!-H?bL}nVrB^4b#Y?(Pk?c5|`(hliyg zp8%f#uOQz83}%4u_(YK=A@&tmQ>{J*^s|{slkUv-+^f-#nu9JL5}vH!ls!XRpS1uV zf;Cp}?*0w{mZht(7Qc-Qcce7sQRu#6YQuL@%fZxu5x?RL9}CCp=1@Wq#-8P(l*idB z{XHb_Z|?7d?``g~t^wYYMP^mZh0QaEuFp^6odn`Lcy1!?ETc#j3pjlC1i*YihfEYXP?(vXO_bk4$s~NycZ-m{yx~ zrUhZ9a$$P?z`A>E6fK&WEt3jKDUi6|8W`^x-i3R}3x=30l;clFu^cLhGgOjBz5oJl zSp1TF2|G6=tU8oZW|)CWbs$~=L_;wh=oC*Y0nLyiCc)(zB#%WrUI5BowV6@Z!)lL= zpJ~nrM7MvRg9j^mzTgkZw)M=qy6c&Hp9O(0P zl|Ewk_9BTPyIG)d(z1TV;B>=!rQ$}tz-+nipoSe1v@3-WRn%!p~t~OPDs-3Si zCmb;smynk780@3Zn2Wy4asf3S9VIx(@VH9`o{W45y@lFLI_#`VGt3^ZIxd($6|1w4 zzL!pVB`k3^3Kz@!F=$Z9025u3{%(0`-+ewuG^}wmx}_BLl;K6LgfA4jJgPn2Kr3Hu z{GM*h@x=YYDd{?(W;eQ#C={u0q#c3}+#XD~nY65Q--C@v-{Vt<`Z!Ntj+0OB_}xt% zD!8B9PD>seGW+UZb5oXDWLJn^oR!qi-(BXI_MQzj%o`b<@$0Cgp;KV|-@WPs7yb7r z3j2He_s;cC5= literal 0 HcmV?d00001 diff --git a/share/esx-fw-vnc/vib/descriptor.xml b/share/esx-fw-vnc/vib/descriptor.xml new file mode 100644 index 0000000000..b6d76dcc20 --- /dev/null +++ b/share/esx-fw-vnc/vib/descriptor.xml @@ -0,0 +1,33 @@ + + + bootbank + fw-vnc + 1.0.0-1 + OpenNebulaSystems + Firewall rules to enable VNC traffic + Firewall rules to enable VNC traffic + + + + + + + + + + + false + + + etc/vmware/firewall/vnc.xml + + community + true + true + false + true + false + + + + diff --git a/share/esx-fw-vnc/vib/payloads/fw-vnc/etc/vmware/firewall/vnc.xml b/share/esx-fw-vnc/vib/payloads/fw-vnc/etc/vmware/firewall/vnc.xml new file mode 100644 index 0000000000..9990c60716 --- /dev/null +++ b/share/esx-fw-vnc/vib/payloads/fw-vnc/etc/vmware/firewall/vnc.xml @@ -0,0 +1,16 @@ + + + VNC + + inbound + tcp + dst + + 5900 + 65535 + + + true + false + +