siemens / fluffi Goto Github PK

FLUFFI (Fully Localized Utility For Fuzzing Instantaneously) - A distributed evolutionary binary fuzzer for pentesters

License: MIT License

Dockerfile 1.00% Shell 3.22% Batchfile 2.36% Python 11.61% Go 3.27% Makefile 0.79% C++ 62.90% C 2.94% CMake 0.14% PowerShell 0.51% HTML 6.03% CSS 0.38% JavaScript 3.77% Perl 0.64% Assembly 0.37% Jinja 0.06%

fuzzing pentesting security

fluffi's Introduction

FLUFFI

FLUFFI - A distributed evolutionary binary fuzzer for pentesters.

Bugs found

So far, FLUFFI was almost exclusively used on SIEMENS products and solutions. Bugs found therein will not be published.

However, FLUFFI found the following published bugs (please help us keep this list up to date):

Buffer underflow in bc_shift_addsub(CVE-2019-11046)

fluffi's People

Contributors

Stargazers

Watchers

Forkers

joyride9999 maverickwoo gitttt vinamrabhatia tomsie jack51706 asdyxcyxc 5l1v3r1 rajivraj ufwt hack-payload-collection spormanndavid berdav sandi2382 xorman n0tty jdefrancesco sears-s rakhithjk

fluffi's Issues

AVX_512 handling in DynamoRIO breaks Fluffi execution

On newer machines Fluffi won't start properly, because we inherited following bug of DynamoRIO:
AVX-512 handling breaks DynamoRIO execution on Windows with full AVX-512 support

The described work-around, setting avx512_enabled to false works for now.

Usage and starting agents

In the docs it is mentioned "Alternatively, you can connect to the system directly (SSH, RDP), and start the agents there." ...
Using only the interface LM, TR, TG and TE did not start automatically after deployment of fluffi ... so it seems to me that they can be started only by remote ssh/rdp

Taking Internet offline too early

This step

fluffi/getting_started.md

Line 121 in a259d74

Now switch your environment form Internet-connected to offline:

seems too soon because the next step

fluffi/getting_started.md

Lines 129 to 134 in a259d74

 Finally, build all server services: 

 ``` 

 cd /srv/fluffi 

 docker-compose build 

 ```

still requires a working Internet connection in our deployment experience.

fluffi_fluffiweb_1 container error

Attached log(this is on refactor-and-deployment-and-doc branch):

*** Starting uWSGI 2.0.17 (64bit) on [Tue Apr 7 12:31:48 2020] ***
compiled with version: 6.4.0 on 27 March 2018 12:43:27
os: Linux-5.3.0-46-generic #38~18.04.1-Ubuntu SMP Tue Mar 31 04:17:56 UTC 2020
nodename: b6aec27acd92
machine: x86_64
clock source: unix
pcre jit disabled
detected number of CPU cores: 3
current working directory: /app
detected binary path: /usr/sbin/uwsgi
your memory page size is 4096 bytes
detected max file descriptor number: 1048576
lock engine: pthread robust mutexes
thunder lock: disabled (you can enable it with --thunder-lock)
uwsgi socket 0 bound to UNIX address /tmp/uwsgi.sock fd 3
uWSGI running as root, you can use --uid/--gid/--chroot options
*** WARNING: you are running uWSGI as root !!! (use the --uid flag) ***
Python version: 3.6.9 (default, Oct 17 2019, 12:14:22) [GCC 6.4.0]
Python main interpreter initialized at 0x5624d2ab9f40
uWSGI running as root, you can use --uid/--gid/--chroot options
*** WARNING: you are running uWSGI as root !!! (use the --uid flag) ***
python threads support enabled
your server socket listen backlog is limited to 100 connections
your mercy for graceful operations on workers is 60 seconds
mapped 1239640 bytes (1210 KB) for 16 cores
*** Operational MODE: preforking ***
2020-04-07 12:31:49,675 INFO success: uwsgi entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
Traceback (most recent call last):
File "./main.py", line 12, in
from app import app
File "./app/init.py", line 21, in
app.config.from_object("config")
File "/usr/local/lib/python3.6/site-packages/flask/config.py", line 170, in from_object
obj = import_string(obj)
File "/usr/local/lib/python3.6/site-packages/werkzeug/utils.py", line 546, in import_string
2020-04-07 12:31:54,332 INFO exited: uwsgi (exit status 22; not expected)
import(import_name)
File "./config.py", line 18, in
+ "/fluffi_gm"
socket.gaierror: [Errno -3] Try again
unable to load app 0 (mountpoint='') (callable not found or import error)
*** no app loaded. GAME OVER ***
2020-04-07 12:31:55,334 INFO spawned: 'uwsgi' with pid 74
[uWSGI] getting INI configuration from /app/uwsgi.ini
[uWSGI] getting INI configuration from /etc/uwsgi/uwsgi.ini

;uWSGI instance configuration
[uwsgi]
cheaper = 2
processes = 16
ini = /app/uwsgi.ini
module = main
callable = app
wsgi-disable-file-wrapper = true
enable-threads = true
ini = /etc/uwsgi/uwsgi.ini
socket = /tmp/uwsgi.sock
chown-socket = nginx:nginx
chmod-socket = 664
hook-master-start = unix_signal:15 gracefully_kill_them_all
need-app = true
die-on-term = true
plugin = python3
show-config = true
;end of configuration

ERROR: for fluffigm Cannot start service fluffigm: OCI runtime create failed: container_linux.go:349: starting container process caused "exec: \"./GlobalManager\": stat ./GlobalManager: no such file or directory": unknown"

While starting container getting error as

"ERROR: for fluffigm Cannot start service fluffigm: OCI runtime create failed: container_linux.go:349: starting container process caused "exec: "./GlobalManager": stat ./GlobalManager: no such file or directory": unknown"

`ubuntu@ubuntu1804:$ cd FLUFFI/srv/fluffi/
ubuntu@ubuntu1804:/FLUFFI/srv/fluffi$ sudo docker-compose -f /srv/fluffi/docker-compose.yaml up -d --force-recreate
Removing fluffi_fluffigm_1
Recreating fluffi_mon_1 ...
Recreating fluffi_polenext_1 ...
Recreating fluffi_fluffiweb_1 ...
Recreating fluffi_dnsmasq_1 ... done
Recreating fluffi_polenext_1 ... done
Recreating fluffi_mon_1 ... done
Recreating fluffi_smb_1 ...
Recreating fluffi_fluffiweb_1 ... done
Recreating 81e2bb49e3a6_fluffi_fluffigm_1 ... error
Recreating fluffi_dashsync_1 ... done
Recreating fluffi_grasync_1 ... done
Recreating fluffi_smb_1 ... done
Recreating fluffi_ftp_1 ... done
unkRecreating fluffi_ntp_1 ... done

ERROR: for fluffigm Cannot start service fluffigm: OCI runtime create failed: container_linux.go:349: starting container process caused "exec: "./GlobalManager": stat ./GlobalManager: no such file or directory": unknown
ERROR: Encountered errors while bringing up the project.
ubuntu@ubuntu1804:/FLUFFI/srv/fluffi$ cd data/fluffigm/
ubuntu@ubuntu1804:/FLUFFI/srv/fluffi/data/fluffigm$ ls
GlobalManager libmariadb.so.3 libsharedmemipc.so libzmq.so.5
ubuntu@ubuntu1804:/FLUFFI/srv/fluffi/data/fluffigm$ nano GlobalManager
ubuntu@ubuntu1804:/FLUFFI/srv/fluffi/data/fluffigm$ `

As per doc I have already added GlobalManager components into /srv/fluffi/data/fluffigm/

Missing directories when running deploy2FTP.sh

fluffi/build/ubuntu_based/deploy2FTP.sh

Line 31 in 4bb9d49

cd /fluffi/linux/x64

and the three other similar lines in the FTP commands in this shell script assume that the directories /srv/fluffi/data/ftp/files/fluffi/linux/{x64,x86,arm32,arm64} exist on Fluffi master. In our deployment, they don't exist after a fresh install.

P.S. It seems reasonable to add mkdir /fluffi/linux/x64 (and three similar commands) to the FTP commands in this shell script to ensure that these directories exist.

can we somehow allow an anonymously writable ftp root?

otherwise we cannot use ftp to create new subdirectories and files in root, as mentioned in #103

Declare fluffi as local domain in dnsmasq

Somewhere around this line:

fluffi/srv/fluffi/data/dnsmasq/dnsmasq.conf

Line 76 in ab9b81f

#local=/localnet/

we can declare fluffi to be a local domain:

local=/fluffi/

For example, dnsmasq will reply to AAAA queries with NODATA-IPv6 instead of REFUSED after this change. Example output after applying the proposed change:

dnsmasq_1    | dnsmasq: query[A] ftp.fluffi from 10.180.62.166
dnsmasq_1    | dnsmasq: /etc/hosts ftp.fluffi is 10.180.62.169
dnsmasq_1    | dnsmasq: query[AAAA] ftp.fluffi from 10.180.62.166
dnsmasq_1    | dnsmasq: config ftp.fluffi is NODATA-IPv6

As another benefit, a dig www.fluffi would not generate a storm of queries. (Note that www.fluffi does not exist in the dnsmasq hosts file.)

In a private network, whether declaring fluffi as local or not in dnsmasq would give rise to the same behavior because there is no upstream DNS resolver. Therefore, I think the proposed change is safe.

The real benefit of the proposed change is that it ensures the query issuer receives the correct response and can act accordingly. For example, the query issuer could be systemd in a Linux runner. Here is how we currently set up some Linux VM runners so that both *.fluffi and public Internet hostnames resolve:

# Add Fluffi Master as DNS server
sudo mkdir -p /etc/systemd/resolved.conf.d
cat <<HERE | sudo tee /etc/systemd/resolved.conf.d/fluffi.conf >/dev/null
[Resolve]
# Tell systemd to use Fluffi master for DNS queries in the Global scope
DNS=10.180.62.169
# Search .fluffi; this will also adjust "search" in /etc/resolv.conf
Domains=fluffi
HERE
sudo systemctl restart systemd-resolved.service

P.S. The reason for this runner DNS setup is because we do not intend to run our own apt.fluffi. In fact, a runner in a truly private network cannot pass the "Initial setup" step on the web interface because it requires access to some apt repository to run:

fluffi/srv/fluffi/data/polenext/projects/1/initialSetup.yml

Line 15 in ab9b81f

 raw: test -e /usr/bin/python || (echo {{ ansible_ssh_pass }} | sudo -S apt -y update && echo {{ ansible_ssh_pass }} | sudo -S apt install -y python-minimal) 

PREPARE_ENV flag

The flag has no effect on windows, it should be possible to have docker machines also on windows...

building on linux RAM

In the section for compiling fluffi on linux it say "please install/allocate at least 6 GB of RAM", however for safety reasons i think should also recommend setting the swap file of 8GB.
Saying this because having ~8gb RAM for the machine and 4 gb swap, it may happen that at some point will run OOM and will crash when compiling!

Fetch Rest-Instance-Starter-Autostart failed

[WARNING]: While constructing a mapping from /usr/local/lib/python3.6/dist-
packages/polemarch/projects/1/roles/general-windows-
syncToRamdisk/tasks/main.yml, line 25, column 3, found a duplicate dict key
(win_file). Using last defined value only.

[DEPRECATION WARNING]: Instead of sudo/sudo_user, use become/become_user and
make sure become_method is 'sudo' (default). This feature will be removed in
version 2.9. Deprecation warnings can be disabled by setting
deprecation_warnings=False in ansible.cfg.

PLAY [windows] *****************************************************************

TASK [Gathering Facts] *********************************************************
ok: [batrixwin]

TASK [deployment-windows-fluffi : Ensure directory exists] *********************
changed: [batrixwin]

TASK [deployment-windows-fluffi : Fetch FLUFFI from "ftp://ftp.fluffi/fluffi/windows/x64/fluffi.zip"] ***
changed: [batrixwin]

TASK [deployment-windows-fluffi : Unzip FLUFFI to persistent C] ****************
changed: [batrixwin]

TASK [deployment-windows-fluffi : Parse location to host] **********************
ok: [batrixwin] => (item={'key': 'batrixwin', 'value': 'FLUFFI'})

TASK [deployment-windows-fluffi : Create persistent shortcuts on desktop] ******
changed: [batrixwin] => (item={'key': 'TR', 'value': 'TestcaseRunner'})
changed: [batrixwin] => (item={'key': 'TG', 'value': 'TestcaseGenerator'})
changed: [batrixwin] => (item={'key': 'TE', 'value': 'TestcaseEvaluator'})
changed: [batrixwin] => (item={'key': 'LM', 'value': 'LocalManager'})

TASK [deployment-windows-fluffi : Create ramdisk shortcuts on desktop] *********
changed: [batrixwin] => (item={'key': 'TR', 'value': 'TestcaseRunner'})
changed: [batrixwin] => (item={'key': 'TG', 'value': 'TestcaseGenerator'})
changed: [batrixwin] => (item={'key': 'TE', 'value': 'TestcaseEvaluator'})
changed: [batrixwin] => (item={'key': 'LM', 'value': 'LocalManager'})

TASK [general-windows-syncToRamdisk : Obtain information about ramdisk] ********
ok: [batrixwin]

TASK [general-windows-syncToRamdisk : Check existence] *************************
skipping: [batrixwin]

TASK [general-windows-syncToRamdisk : Delete existing files on ramdisk (x64)] ***
ok: [batrixwin]

TASK [general-windows-syncToRamdisk : Ensure directories exists] ***************
changed: [batrixwin]

TASK [general-windows-syncToRamdisk : Execute copy command for x64] ************
changed: [batrixwin]

TASK [general-windows-syncToRamdisk : Execute copy command for x64/dynamorio] ***
changed: [batrixwin]

TASK [general-windows-syncToRamdisk : Execute copy command for x86] ************
changed: [batrixwin]

TASK [general-windows-syncToRamdisk : Execute copy command for x86/dynamorio] ***
changed: [batrixwin]

TASK [initial-windows-deployRestInstanceStarter : Set file path to fetch] ******
ok: [batrixwin]

TASK [initial-windows-deployRestInstanceStarter : Create a FLUFFI directory] ***
changed: [batrixwin]

TASK [initial-windows-deployRestInstanceStarter : Fetch Rest-Instance-Starter from "ftp://ftp.fluffi/restStarter/main.py"] ***
changed: [batrixwin]

TASK [initial-windows-deployRestInstanceStarter : Fetch Rest-Instance-Starter-Autostart from "ftp://ftp.fluffi/restStarter/restInstanceAutostart.bat"] ***
fatal: [batrixwin]: FAILED! => {"changed": false, "dest": "C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\restInstanceAutostart.bat", "elapsed": 0, "msg": "The path 'C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup' does not exist for destination 'C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\restInstanceAutostart.bat', or is not visible to the current user. Ensure download destination folder exists (perhaps using win_file state=directory) before win_get_url runs.", "url": "ftp://ftp.fluffi/restStarter/restInstanceAutostart.bat"}

PLAY RECAP *********************************************************************
batrixwin : ok=17 changed=12 unreachable=0 failed=1 skipped=1 rescued=0 ignored=0

Fuzzjobs sync systems failed

I keep getting the error
"Sync systems failed!

Something went wrong at the inital synchronization between PoleMarch and the database. Pleasy retry!"

Audit root directories that should be created in /srv/fluffi/data/ftp/files/

Due to this step:

fluffi/getting_started.md

Line 111 in ab9b81f

chmod 555 /srv/fluffi/data/ftp/files

it is not possible to create a new root directory in ftp.fluffi using the FTP protocol. As a consequence, we would create new missing root directories via terminal work on the host of the containers.

So far, we have already discovered three more missing directories. A code audit may identify others. From our current provision script:

mkdir -p \
  /srv/fluffi/data/dnsmasq \
  /srv/fluffi/data/ftp/files/fluffi/linux/{x64,x86,arm32,arm64} \
  /srv/fluffi/data/ftp/files/fluffi/windows/{x64,x86} \
  /srv/fluffi/data/ftp/files/{SUT,archive} `# BUG` \
  /srv/fluffi/data/ftp/files/initial/linux/activePackages `# BUG` \
  /srv/fluffi/data/tftp

Initial setup succeeds with stub binaries

Appatently, the initial setup step on windows succeeds in environments in which the binaries in /srv/fluffi/data/ftp/files/initial/windows/ansible were not replaced with actual files.

Please modify the /srv/fluffi/data/polenext/projects/1/roles/initial-windows* tasks to fail when the downloaded binaries are invalid (e.g. to small)

Changing location after adding first location does not work

Configure Instances Tab in Linux group doesn't work

With the master at following commit, http://web.fluffi:8880/systems shows multiple groups: windows, linux and odroids.

On going to Linux group, we have 4 options.
The current state of the system is not reflected in 4] Configure Instances. There were some active fuzzjobs, each with a few TG, TR and TE, but the configurations shows 0 for each of them.

Besides, on changing the number of TG, TR and TE for a fuzzjob, an error pop-up box is displayed with the message "Error: Could not configure Instances!"
The terminal output at the time is the following:

fluffiweb_1 | 'NoneType' object has no attribute 'ID'
fluffiweb_1 | [pid: 16|app: 0|req: 153/226] 10.180.62.198 () {50 vars in 1150 bytes} [Thu Mar 19 11:54:4$
2020] POST /systems/configureSystemInstances/linux => generated 223 bytes in 6 msecs (HTTP/1.1 302) 5 hea
ders in 377 bytes (1 switches on core 0)
fluffiweb_1 | 10.180.62.198 - - [19/Mar/2020:11:54:40 -0400] "POST /systems/configureSystemInstances/linu
x HTTP/1.1" 302 223 "http://web.fluffi:8880/systems/view/linux/linux" "Mozilla/5.0 (X11; Ubuntu; Linux x86
_64; rv:74.0) Gecko/20100101 Firefox/74.0" "-"
fluffiweb_1 | [pid: 16|app: 0|req: 154/227] 10.180.62.198 () {44 vars in 911 bytes} [Thu Mar 19 11:54:41
2020] GET /systems => generated 20860 bytes in 549 msecs (HTTP/1.1 200) 4 headers in 247 bytes (1 switches
on core 0)
fluffiweb_1 | 10.180.62.198 - - [19/Mar/2020:11:54:41 -0400] "GET /systems HTTP/1.1" 200 20860 "http://we
b.fluffi:8880/systems/view/linux/linux" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:74.0) Gecko/20100101 F
irefox/74.0" "-"

check qemu dependencies

qemu compiles and runs without flex and bison, but we should investigate if not having them introduces any regressions - see #112

Add task schedule to run lm script at start up failed

PLAY [linux, odroids] **********************************************************
skipping: no hosts matched

PLAY [windows] *****************************************************************

TASK [Gathering Facts] *********************************************************
ok: [batrixwin]

TASK [initial-windows-Timezone : Set timezone to 'Romance Standard Time' (GMT+01:00)] ***
ok: [batrixwin]

TASK [initial-windows-GFlags : Ensure source directory exists] *****************
ok: [batrixwin]

TASK [initial-windows-GFlags : Fetch GFlag zip file "ftp://ftp.fluffi/initial/windows/ansible/GFlags/GFlags.zip"] ***
changed: [batrixwin]

TASK [initial-windows-GFlags : Unzip GFlags] ***********************************
changed: [batrixwin]

TASK [initial-windows-PrepareEnvironment : Create a FLUFFI directory] **********
ok: [batrixwin]

TASK [initial-windows-PrepareEnvironment : Set ACL for C:\FLUFFI] **************
ok: [batrixwin]

TASK [initial-windows-PrepareEnvironment : Set AllowUnencrypted to True] *******
changed: [batrixwin]

TASK [initial-windows-GroupPolicy : Fetch LGPO from "ftp://ftp.fluffi/initial/windows/ansible/LGPO/LGPO.exe"] ***
changed: [batrixwin]

TASK [initial-windows-GroupPolicy : Copy registry.txt to remote machine via template] ***
changed: [batrixwin]

TASK [initial-windows-GroupPolicy : Execute LGPO.exe to generate group policy registry.pol] ***
changed: [batrixwin]

TASK [initial-windows-GroupPolicy : Execute LGPO.exe to apply group policy registry.pol] ***
changed: [batrixwin]

TASK [initial-windows-pagefile : Disabling pagefiles on windows] ***************
changed: [batrixwin]

TASK [initial-windows-Imdisk : Check architecture for x86 installer] ***********
skipping: [batrixwin]

TASK [initial-windows-Imdisk : Fetch ImDisk installer from "ftp://ftp.fluffi/initial/windows/ansible/ImDisk/ImDiskTk-x64.exe"] ***
changed: [batrixwin]

TASK [initial-windows-Imdisk : Install imdisk by executing ImDiskTk-x64.exe] ***
changed: [batrixwin]

TASK [initial-windows-Imdisk : Create new ramdisk] *****************************
changed: [batrixwin]

TASK [initial-windows-Imdisk : Ensure startup script directory exists] *********
changed: [batrixwin]

TASK [initial-windows-Imdisk : Copy startup script to machine] *****************
changed: [batrixwin]

TASK [initial-windows-Imdisk : Add task schedule to run script at start up] ****
fatal: [batrixwin]: FAILED! => {"changed": true, "msg": "failed to modify scheduled task: (17,8):UserId:"}

RUNNING HANDLER [initial-windows-GroupPolicy : Ensure Windows NTP service is running] ***

RUNNING HANDLER [initial-windows-GroupPolicy : Force Windows NTP time sync] ****

PLAY RECAP *********************************************************************
batrixwin : ok=18 changed=13 unreachable=0 failed=1 skipped=1 rescued=0 ignored=0

running in a vbox problems

dns does not seem to work, as i cant access using names .. probably configurion is wrong
trying to access localhost:8880 gives nginx error

Vbox machine is ubuntu 18.04, static ip set to 10.66.0.1

update copyright header

currently all files start with

Copyright 2017-2019 Siemens AG

This needs to be changed to

Copyright 2017-2020 Siemens AG

Setting up FUN (unclear doc) (2)

In the setting up Fun there is the following section
"Replace the following dummy textfiles with their respective binaries. A link to obtain these is contained in the dummy files:

/srv/fluffi/data/smb/files/initial/updatesWS2008
/srv/fluffi/data/ftp/files/initial/windows/ansible"

However is not really clear what it should be done here ... what files should be replaced?

Covered Blocks field is always 0

With the master at following commit, http://web.fluffi:8880/index shows the list of fuzzjobs.

On going to any particular fuzzjob ( e.g. http://web.fluffi:8880/projects/view/1 will list the properties of the first fuzzed job), the number of covered blocks are reported as 0, even when the fuzzjob has performed a significant number of testcase executions.

PFA a zip SUT for which the issue took place.

div-by-filecontent-1804-install.zip

Windows shortcuts on runner after deploy of fluffi are wrong

After deploy fluffi action, the shortcuts are created with wrong path.
Also the path seems to be the only difference between "disk" and "ram" shortcuts

setting up FUN (unclear)

Would help if there is a bit of continuity between step 2) (compiling) and step 3 (setting up).

is this this step "git clone --depth 1 --branch master https://github.com/siemens/fluffi.git ./fluffigit necessary? As this was already done on step 2?
would also help if the checkout folder is the same as previous ... here it is used "fluffigit"
touch /srv/fluffi/data/dnsmasq/dnsmasq.leases should be done after the rsync command otherwise results in error "touch: cannot touch '/srv/fluffi/data/dnsmasq/dnsmasq.leases': No such file or directory
"
Would be helpful if examples on how to change the default configuration are provided . E.g. using other ip then 10.66.0.1

Links not working without ngnix

mon.fluffi not working -> mon.fluffi:8885 works

/srv/fluffi/data/fluffiweb/app/static/bootstrap does not exist

After the commit cbc2cfd#diff-c65083bf5529e8821f2c7d386c933379, /srv/fluffi/data/fluffiweb/app/static/bootstrap does not exist in a fresh install. However, the generated html page still refers to it.

Examples quoted from view-source:http://web.fluffi:8880/ after a fresh install:

The head block:

  <head>

    <title>FLUFFI - Home</title>
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <!-- Bootstrap -->
    <link href="/static/bootstrap/css/bootstrap.min.css?bootstrap=3.3.7.1.dev1" rel="stylesheet">

    <!--[if lt IE 9]>
          <script src="/static/html5shiv.min.js"></script>
          <script src="/static/respond.min.js"></script>
    <![endif]-->


<link href="/static/css/fluffi.css" rel="stylesheet" />
<link href="/static/images/favicon.ico" rel="shortcut icon">
<script src="/static/3rdParty/jquery/jquery-2.1.4.js"></script>
<script src="/static/3rdParty/socket.io-client/socket.io.slim.js"></script>


  </head>

After footer towards the end of body:

<footer class="container">
    <p>&copy; Siemens AG, Corporate Technology 2020 | FLUFFI 1.0</p>
</footer>



    
<script src="/static/javascript/fuzzjobNavigation.js" type="text/javascript"></script>

    <script src="/static/bootstrap/jquery.min.js?bootstrap=3.3.7.1.dev1"></script>
    <script src="/static/bootstrap/js/bootstrap.min.js?bootstrap=3.3.7.1.dev1"></script>

  </body>

/srv/fluffi/data/tftp does not exist in a fresh installation

/srv/fluffi/data/tftp is excluded in the rsync step to create or update /srv/fluffli. So we created it by hand for now.

The first point of interest would be:

fluffi/getting_started.md

Line 107 in 9306937

chown -R 1000:1000 /srv/fluffi/data/tftp

Missing dependencies info "smbclient"

In usage section, there is :
"smbclient '//smb.fluffi/install' -c 'cd initial; get MAC2Host.csv; get initialConfiguration.sh' -U"

At least on ubuntu18.04 desktop, this is not installed by default ... anyway because of the ip changing, and dns resolving stuff by the time i arrived to this part the machine had no internet so had to remake it again with inet :)

Originally posted by @joyride9999 in #112 (comment)

deploy fluffi fails with "connection types on this machine is set to Public"

PLAY [windows] *****************************************************************

TASK [Gathering Facts] *********************************************************
ok: [batrix3]

TASK [initial-windows-Timezone : Set timezone to 'Romance Standard Time' (GMT+01:00)] ***
ok: [batrix3]

TASK [initial-windows-GFlags : Ensure source directory exists] *****************
ok: [batrix3]

TASK [initial-windows-GFlags : Fetch GFlag zip file "ftp://ftp.fluffi/initial/windows/ansible/GFlags/GFlags.zip"] ***
changed: [batrix3]

TASK [initial-windows-GFlags : Unzip GFlags] ***********************************
changed: [batrix3]

TASK [initial-windows-PrepareEnvironment : Create a FLUFFI directory] **********
ok: [batrix3]

TASK [initial-windows-PrepareEnvironment : Set ACL for C:\FLUFFI] **************
ok: [batrix3]

TASK [initial-windows-PrepareEnvironment : Set AllowUnencrypted to True] *******
fatal: [batrix3]: FAILED! => {"changed": true, "cmd": "Set-Item -Path WSMan:\localhost\Service\AllowUnencrypted -Value $true", "delta": "0:00:03.234031", "end": "2020-04-16 09:33:04.872752", "msg": "non-zero return code", "rc": 1, "start": "2020-04-16 09:33:01.638721", "stderr": "Set-Item : WinRM firewall exception will not work since one of the network connection types on this machine is set to \r\nPublic. Change the network connection type to either Domain or Private and try again. \r\nAt line:1 char:65\r\n+ ... ing $false; Set-Item -Path WSMan:\localhost\Service\AllowUnencrypted ...\r\n+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n + CategoryInfo : NotSpecified: (:) [Set-Item], InvalidOperationException\r\n + FullyQualifiedErrorId : System.InvalidOperationException,Microsoft.PowerShell.Commands.SetItemCommand", "stderr_lines": ["Set-Item : WinRM firewall exception will not work since one of the network connection types on this machine is set to ", "Public. Change the network connection type to either Domain or Private and try again. ", "At line:1 char:65", "+ ... ing $false; Set-Item -Path WSMan:\localhost\Service\AllowUnencrypted ...", "+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~", " + CategoryInfo : NotSpecified: (:) [Set-Item], InvalidOperationException", " + FullyQualifiedErrorId : System.InvalidOperationException,Microsoft.PowerShell.Commands.SetItemCommand"], "stdout": "", "stdout_lines": []}

PLAY RECAP *********************************************************************
batrix3 : ok=7 changed=2 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0

Cannot add system when starting from scratch

When starting with a new database and not configuring any hosts, "Add system" fails with an error message:

Deploy fluffi reports OK but has error