From 46f10b5e3f39804f6b44d7806c65c1274d6e20ad Mon Sep 17 00:00:00 2001
From: lolli001 <braxton.r.lollis@census.gov>
Date: Thu, 1 Aug 2024 16:26:01 -0400
Subject: [PATCH] Updated Proxy settings

---
 build.pkr.hcl          | 25 +++++++++++++++++++++++++
 rhel-arm-baseline.yaml | 32 ++++++++++++++++++++------------
 2 files changed, 45 insertions(+), 12 deletions(-)

diff --git a/build.pkr.hcl b/build.pkr.hcl
index 3f3ef12..3f408e2 100644
--- a/build.pkr.hcl
+++ b/build.pkr.hcl
@@ -13,13 +13,38 @@ source "amazon-ebs" "rhel" {
   region        = "us-gov-west-1"
   source_ami    = "ami-03fadeeea589a106b"  # Updated AMI ID for RHEL x86_64
   ssh_username  = "ec2-user"
+
+  # Set environment variables for proxy
+  user_data = <<EOF
+#!/bin/bash
+export http_proxy=http://proxy.tco.census.gov:3128
+export https_proxy=http://proxy.tco.census.gov:3128
+export no_proxy=.census.gov,169.254.169.254,148.129.*,10.*,172.18.*,172.22.*,172.23.*,172.24.*,172.25.*,.eks.amazonaws.com,.s3.amazonaws.com,.amazonaws.com,.gcr.io,.pkg.dev,us-gov-west-1.compute.internal,.us-gov-west-1.compute.internal
+EOF
 }
 
 build {
   sources = ["source.amazon-ebs.rhel"]
 
+  provisioner "shell" {
+    inline = [
+      "export http_proxy=http://proxy.tco.census.gov:3128",
+      "export https_proxy=http://proxy.tco.census.gov:3128",
+      "export no_proxy=.census.gov,169.254.169.254,148.129.*,10.*,172.18.*,172.22.*,172.23.*,172.24.*,172.25.*,.eks.amazonaws.com,.s3.amazonaws.com,.amazonaws.com,.gcr.io,.pkg.dev,us-gov-west-1.compute.internal,.us-gov-west-1.compute.internal",
+      "yum -y install epel-release",
+      "yum -y install python3-pip",
+      "pip3 install --trusted-host pypi.org --trusted-host files.pythonhosted.org --proxy=$http_proxy passlib"
+    ]
+  }
+
   provisioner "ansible" {
     playbook_file = "${var.ansible_dir}/rhel-arm-baseline.yaml"
+    extra_arguments = ["-e", "ansible_python_interpreter=/usr/bin/python3"]
+    environment_vars = {
+      HTTP_PROXY  = "http://proxy.tco.census.gov:3128"
+      HTTPS_PROXY = "http://proxy.tco.census.gov:3128"
+      NO_PROXY    = ".census.gov,169.254.169.254,148.129.*,10.*,172.18.*,172.22.*,172.23.*,172.24.*,172.25.*,.eks.amazonaws.com,.s3.amazonaws.com,.amazonaws.com,.gcr.io,.pkg.dev,us-gov-west-1.compute.internal,.us-gov-west-1.compute.internal"
+    }
   }
 
   post-processor "shell-local" {
diff --git a/rhel-arm-baseline.yaml b/rhel-arm-baseline.yaml
index 491569b..1f5c81f 100644
--- a/rhel-arm-baseline.yaml
+++ b/rhel-arm-baseline.yaml
@@ -1,19 +1,16 @@
----
 - name: RHEL ARM Baseline
   hosts: all
   become: true
   vars:
-    ansible_python_interpreter: /usr/bin/python3.9 # Explicitly define the Python interpreter
-
+    http_proxy: "http://proxy.tco.census.gov:3128"
+    https_proxy: "http://proxy.tco.census.gov:3128"
+    no_proxy: ".census.gov,169.254.169.254,148.129.*,10.*,172.18.*,172.22.*,172.23.*,172.24.*,172.25.*,.eks.amazonaws.com,.s3.amazonaws.com,.amazonaws.com,.gcr.io,.pkg.dev,us-gov-west-1.compute.internal,.us-gov-west-1.compute.internal"
   tasks:
-    - name: Install pip
-      package:
-        name: python3-pip
-        state: present
-
-    - name: Install passlib
-      pip:
-        name: passlib
+    - name: Set proxy environment variables
+      set_fact:
+        http_proxy: "{{ http_proxy }}"
+        https_proxy: "{{ https_proxy }}"
+        no_proxy: "{{ no_proxy }}"
 
     - name: Ensure latest packages are installed
       package:
@@ -41,13 +38,24 @@
         name: curl
         state: present
 
+    - name: Install passlib for password hashing
+      pip:
+        name: passlib
+        state: present
+        extra_args: "--trusted-host pypi.org --trusted-host files.pythonhosted.org --proxy={{ http_proxy }}"
+        executable: /usr/bin/pip3
+      environment:
+        http_proxy: "{{ http_proxy }}"
+        https_proxy: "{{ https_proxy }}"
+        no_proxy: "{{ no_proxy }}"
+
     - name: Create example user
       user:
         name: exampleuser
         state: present
         groups: wheel
         shell: /bin/bash
-        password: "{{ 'password' | password_hash('sha512') }}" # Change 'password' to a secure password or hash
+        password: "{{ 'secure_password' | password_hash('sha512') }}" # Replace 'secure_password' with an actual secure password or hash
 
     - name: Configure SSH for exampleuser
       authorized_key: