anti
6708f26e6b
The docker build contexts and syslog_bridge.py lived at repo root, which meant setuptools (include = ["decnet*"]) never shipped them. Agents installed via `pip install $RELEASE_DIR` got site-packages/decnet/** but no templates/, so every deploy blew up in deployer._sync_logging_helper with FileNotFoundError on templates/syslog_bridge.py. Move templates/ -> decnet/templates/ and declare it as setuptools package-data. Path resolutions in services/*.py and engine/deployer.py drop one .parent since templates now lives beside the code. Test fixtures, bandit exclude path, and coverage omit glob updated to match.
42 lines
1.2 KiB
Python
42 lines
1.2 KiB
Python
from pathlib import Path
|
|
from decnet.services.base import BaseService
|
|
|
|
TEMPLATES_DIR = Path(__file__).parent.parent / "templates" / "sniffer"
|
|
|
|
|
|
class SnifferService(BaseService):
|
|
"""
|
|
Passive network sniffer deployed alongside deckies on the MACVLAN.
|
|
|
|
Captures TLS handshakes in promiscuous mode and extracts JA3/JA3S hashes
|
|
plus connection metadata. Requires NET_RAW + NET_ADMIN capabilities.
|
|
No inbound ports — purely passive.
|
|
"""
|
|
|
|
name = "sniffer"
|
|
ports: list[int] = []
|
|
default_image = "build"
|
|
fleet_singleton = True
|
|
|
|
def compose_fragment(
|
|
self,
|
|
decky_name: str,
|
|
log_target: str | None = None,
|
|
service_cfg: dict | None = None,
|
|
) -> dict:
|
|
fragment: dict = {
|
|
"build": {"context": str(TEMPLATES_DIR)},
|
|
"container_name": f"{decky_name}-sniffer",
|
|
"restart": "unless-stopped",
|
|
"cap_add": ["NET_RAW", "NET_ADMIN"],
|
|
"environment": {
|
|
"NODE_NAME": decky_name,
|
|
},
|
|
}
|
|
if log_target:
|
|
fragment["environment"]["LOG_TARGET"] = log_target
|
|
return fragment
|
|
|
|
def dockerfile_context(self) -> Path | None:
|
|
return TEMPLATES_DIR
|