Vagrantfile

Vagrant.configure("2") do |config|
  # CI/local testing can override the playbook used by the Ansible provisioner.
  # Order of precedence:
  # 1) TEST_PLAYBOOK env var (recommended)
  # 2) testing/being_tested.yml (legacy CI/local workflow)
  # 3) testing/test-new-version-hardening.yml (default)
  test_playbook =
    ENV["TEST_PLAYBOOK"] ||
    (File.exist?("testing/being_tested.yml") ? "testing/being_tested.yml" : "testing/test-new-version-hardening.yml")

  # Optional plugins: keep Vagrant usable even if local plugins are not installed.
  # CI should install any required plugins explicitly.
  if Vagrant.has_plugin?("vagrant-vbguest")
    config.vbguest.installer_options = { allow_kernel_upgrade: true }
  end

  config.vm.provider "virtualbox" do |vb|
    vb.customize ["modifyvm", :id, "--uart1", "0x3F8", "4"]
    vb.customize ["modifyvm", :id, "--uartmode1", "disconnected"]
  end

  # Version-agnostic label: bumping to a future Ubuntu LTS only touches the
  # box line below, never the CI workflows that run `vagrant up ubuntu ...`.
  config.vm.define "ubuntu" do |ubuntu|
    ubuntu.vm.box = "cloud-image/ubuntu-26.04"
    ubuntu.ssh.insert_key = true
    ubuntu.vm.hostname = "ubuntu"
    ubuntu.vm.boot_timeout = 600
    if Vagrant.has_plugin?("vagrant-vbguest")
      ubuntu.vbguest.auto_update = false
    end
    ubuntu.vm.provision "shell",
      inline: "apt-get update && DEBIAN_FRONTEND=noninteractive apt-get -y install python3 python3-apt curl zstd",
      upload_path: "/var/tmp/vagrant-shell"
    ubuntu.vm.provision "ansible" do |a|
      a.verbose = "v"
      a.limit = "all"
      a.playbook = test_playbook
      a.extra_vars = {
        "sshd_admin_net" => ["0.0.0.0/0"],
        "sshd_allow_groups" => ["vagrant", "sudo", "ubuntu"],
        "ansible_python_interpreter" => "/usr/bin/python3",
        # AIDE init is slow; only exercise it when asked (CI enables it for
        # konstruktoid version bumps). Defaults off for fast local/dep runs.
        "manage_aide" => ENV.fetch("MANAGE_AIDE", "false") == "true",
      }
     end
   end

  config.vm.define "debian13" do |debian13|
    debian13.vm.box = "bento/debian-13"
    if Vagrant.has_plugin?("vagrant-disksize")
      debian13.disksize.size = '25GB'
    end
    debian13.ssh.insert_key = true
    debian13.vm.hostname = "debian13"
    debian13.vm.boot_timeout = 600
    if Vagrant.has_plugin?("vagrant-vbguest")
      debian13.vbguest.auto_update = false
    end
    debian13.vm.provision "shell",
      inline: "apt-get update && apt-get remove -y dkms && apt-get -y install dkms && DEBIAN_FRONTEND=noninteractive apt-get -y install python3 python3-apt curl zstd",
      upload_path: "/var/tmp/vagrant-shell"
    debian13.vm.provision "ansible" do |a|
      a.verbose = "v"
      a.limit = "all"
      a.playbook = test_playbook
      a.extra_vars = {
        "ansible_become_pass" => "vagrant",
        "ansible_python_interpreter" => "/usr/bin/python3",
        "sshd_admin_net" => ["0.0.0.0/0"],
        "sshd_allow_groups" => ["vagrant", "sudo", "debian", "ubuntu"],
        "system_upgrade" => "false",
        "manage_aide" => "false"
      }
    end
  end

end