feat: separate handling of snaps for 24.04

Author: juju4

.secrets.baseline

@@ -90,6 +90,10 @@
     {
       "path": "detect_secrets.filters.allowlist.is_line_allowlisted"
     },
+    {
+      "path": "detect_secrets.filters.common.is_baseline_file",
+      "filename": ".secrets.baseline"
+    },
     {
       "path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
       "min_level": 2
@@ -157,18 +161,18 @@
         "filename": "tasks/remnux.yml",
         "hashed_secret": "33cf8de6d1638aa9a0186979d36f22f8800d76e6",
         "is_verified": true,
-        "line_number": 204,
+        "line_number": 213,
         "is_secret": false
       },
       {
         "type": "Secret Keyword",
         "filename": "tasks/remnux.yml",
         "hashed_secret": "6b42874e3cd20771d93096ec5ce36307a1f2ba14",
         "is_verified": true,
-        "line_number": 310,
+        "line_number": 319,
         "is_secret": false
       }
     ]
   },
-  "generated_at": "2024-11-11T21:38:52Z"
+  "generated_at": "2025-04-20T19:07:19Z"
 }

defaults/main.yml

@@ -24,6 +24,7 @@ remnux_with_xamarin_mono: false
 remnux_with_ghidra: true
 remnux_ghidra_url: 'https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_11.2.1_build/ghidra_11.2.1_PUBLIC_20241105.zip'
 remnux_ghidra_checksum: 'sha256:ce4db5117da0fbaf8f33863fec4f40902f754f06b68945a59fb1c0f9b1bc461c'
+remnux_snap_enable: false
 
 # remnux_webserver: apache2
 remnux_webserver: nginx

tasks/remnux-repos.yml

@@ -42,14 +42,17 @@
     mode: '0644'
   register: pkg_result
   until: pkg_result is success
+  when: false
 
 - name: Adding Draios repository (sysdig)
   ansible.builtin.apt_repository:
     repo: 'deb https://download.sysdig.com/stable/deb stable-$(ARCH)/'
     state: present
-  when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
   register: pkg_result
   until: pkg_result is success
+  when:
+    - ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
+    - false
 
 - name: Enabling multiverse repository
   ansible.builtin.replace:
@@ -59,6 +62,13 @@
     mode: '0644'
     backup: yes
 
+# https://www.jeffgeerling.com/blog/2022/aptkey-deprecated-debianubuntu-how-fix-ansible
+- name: Adding wireshark-dev gpg key
+  ansible.builtin.get_url:
+    url: "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xa2e402b85a4b70cd78d8a3d9d875551314eca0f0"
+    dest: /etc/apt/trusted.gpg.d/wireshark-dev.asc
+    mode: '0644'
+    owner: root
 - name: Adding wireshark-dev ppa repository
   ansible.builtin.apt_repository:
     repo: 'ppa:wireshark-dev/stable'

tasks/remnux.yml

@@ -45,6 +45,15 @@
   register: pkg_result
   until: pkg_result is success
 
+- name: REMNUX | packages install (snap-based)
+  ansible.builtin.apt:
+    name: "{{ remnux_snap_packages }}"
+    state: "present"
+  register: pkg_result
+  until: pkg_result is success
+  when:
+    - ansible_virtualization_type != 'lxc' or remnux_snap_enable | bool
+
 - name: REMNUX | remnux+sift ppa packages install
   ansible.builtin.apt:
     name: "{{ remnux_ppa_packages + sift_ppa_packages }}"

vars/Ubuntu-24.04.yml

@@ -87,7 +87,6 @@ remnux_packages:
   # - gdb-minimal
   - gdb
   - python3-virtualenv
-  - firefox
   - xmlstarlet
   - inspircd
   - epic5
@@ -271,4 +270,7 @@ remnux_pip_packages:
   - dnslib
   - pydivert
 
+remnux_snap_packages:
+  - firefox
+
 microsoft_dotnet: dotnet-runtime-8.0