TECH

Dive Into A new Pentesting Experience with Athena OS

Designed specifically for cybersecurity enthusiasts, Athena OS offers a cutting-edge platform for InfoSec professionals, bug bounty hunters, and students.

Explore robust tools and a dynamic community, enhancing your pentesting capabilities with the latest in cybersecurity innovation.

Hephaestus

Hephaestus is the Athena OS Continuous Integration/Continuous Delivery Builder to improve the integration and delivery of the packages.

As a container, it can be run in every platform supporting Docker or Podman. It is used to automate the building and delivery of Athena OS packages and for package debugging.

**===========================================================**
||     __  __           __                    __             ||
||    / / / /__  ____  / /_  ____ ____  _____/ /___  _______ ||
||   / /_/ / _ \/ __ \/ __ \/ __ `/ _ \/ ___/ __/ / / / ___/ ||
||  / __  /  __/ /_/ / / / / /_/ /  __(__  ) /_/ /_/ (__  )  ||
|| /_/ /_/\___/ .___/_/ /_/\__,_/\___/____/\__/\__,_/____/   ||
||            /_/                                            ||
**===========================================================**

The Athena OS CI/CD Builder

Usage: /build/packages/hephaestus [-a] [-c <ncores>] [-d] [-r] [-s] [-x] [package1 package2 ...]

Options:
-a     Build all packages.
-c     Set number of cores for building (maximum 4).
-d     Update the package repository database.
-h     Print this Help.
-r     Upload packages to the specified repository server. Use '-e SSH_SEC=' to specify the SSH secret object and '-e REPOSITORY_SERVER=' to define the target repository server as container environment variable arguments.
-s     Sign packages. Use '-e GPG_SEC' to specify the signing key secret object as container environment variable argument.
-x     Search for the fastest mirrors.

It builds the specified packages or all the repository packages if no package names are provided.

First to proceed, it is important to set the secret objects of GPG and SSH keys if needed. To do it in a secure manner:

  1. create a file named key-sec-file, write the secret inside it and save it;
  2. create a file named ssh-sec-file, write the secret inside it and save it.

Then, run:

podman secret create key-sec key-sec-file
podman secret create ssh-sec ssh-sec-file

Finally, remove the file storing the secrets because no needed anymore:

rm key-sec-file ssh-sec-file

Hephaestus can be run by using the following parameters:

systemctl start --user podman
podman run \
    -ti \
    --rm \
    --secret key-sec \
    --secret ssh-sec \
    --ulimit nofile=1024:524288 \ # Fix fakeroot hanging
    --userns=keep-id \ # Prevent to set root as owner of mounted volume directories
    -v "$HOME/output:/build/output" \ # Set the target directory to store packages
    -v "$HOME/keydir:/build/keydir" \ # Set the target directory to retrieve the signing key from the host
    -e GPG_SEC=$(key-sec) \ # Set the signing key secret object
    -e SSH_SEC=$(ssh-sec) \ # Set the SSH repository server secret object
    -e REPOSITORY_SERVER=username@server.com:/path/to/dir// \ # Set the target repository server
    -e PRE_EXEC="ls -la /build" \ # Pre-build command
    -e POST_EXEC="ls -la /build/output" # Post-build command
    docker.io/athenaos/hephaestus -a -d -r -s -x

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

Understanding the Model Context Protocol (MCP) and How It Works

Introduction to the Model Context Protocol (MCP) The Model Context Protocol (MCP) is an open…

5 days ago

The file Command – Quickly Identify File Contents in Linux

While file extensions in Linux are optional and often misleading, the file command helps decode what a…

5 days ago

How to Use the touch Command in Linux

The touch command is one of the quickest ways to create new empty files or update timestamps…

5 days ago

How to Search Files and Folders in Linux Using the find Command

Handling large numbers of files is routine for Linux users, and that’s where the find command shines.…

6 days ago

How to Move and Rename Files in Linux with the mv Command

Managing files and directories is foundational for Linux workflows, and the mv (“move”) command makes it easy…

6 days ago

How to Create Directories in Linux with the mkdir Command

Creating directories is one of the earliest skills you'll use on a Linux system. The mkdir (make…

6 days ago