Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate if there's a way to push flags as secrets to cloud providers #19

Open
C0deH4cker opened this issue Jun 19, 2023 · 0 comments
Assignees

Comments

@C0deH4cker
Copy link
Owner

Primarily considering GCP here because they offer a wonderful CTF sponsorship deal. If a CTF organizer is using GCP to run PwnableHarness Docker containers, it would be lovely if something like make docker-push could build and push both Docker images as well as secrets (currently, the "workdir" Docker volume which contains the flag.txt file).

For GCP, perhaps the flag could be pushed using the gcloud CLI tool as a secret (the GCP Secrets Manager product). Containers would then run with the secrets mounted as files. So the flag secret would be mounted as /ctf/flag.txt. It sounds like there's currently a GCP bug where two or more secrets can't be mounted as files in the same directory, so challenges with multiple flags or with other "secret" files beyond just a flag wouldn't work automatically. I think most challenges only have a single flag as a secret though, so this would be fine for 95% of use cases.

@C0deH4cker C0deH4cker self-assigned this Jun 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant