28 Commits

Author SHA1 Message Date
Ronald Eytchison 77a3e77936 Create minikube config for a large machine (16 CPU, 128 GB) (#469)
* Create minikube config for a large machine (16 CPU, 128 GB)

* Address PR feedback and scale services

- Increase redis memory
- Disable redis in-memory backups to conserve memory
- Increase build bot replicas
- Increase dind CPU/Memory given build bot scaling
- Set reasonable limits for merger-bot and pov-reproducer
- increase coverage bot memory

* Configure /dev/shm size for corpus tmpfs
2026-02-12 08:32:55 -05:00
Dan Guido a18c86a3e0 docs: add local minikube deployment guide
Add comprehensive documentation for local development deployment:
- Docker Desktop resource configuration (CPU, memory, disk)
- Common errors and solutions (resource insufficiency, pending pods, GHCR auth)
- Resource expectations table for different memory allocations
- macOS ARM64 (Apple Silicon) notes
- Verification steps and useful debugging commands

Also update env.template with inline comments explaining minikube resource
settings and their relationship to Docker Desktop resources.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 10:29:46 +01:00
Riccardo Schirone 7690b5d173 Fix Gemini API Key configuration (#362) 2025-09-22 08:58:31 -04:00
Riccardo Schirone ba9f0e5571 Add Tailscale support to the custom scripts (#354) 2025-09-16 15:14:35 +02:00
Riccardo Schirone 3fd777063b Test and improve AKS deployment (#336)
* Test configuration for Azure deployment
* ci: re-enable docker build/push
* ci: docker push labeled PRs
* Use `make deploy` for both local and azure deployments
* doc: update AKS_DEPLOYMENT doc
* add confirmation in Makefile
* Make resource group location configurable
2025-09-08 16:57:08 +02:00
Ronald Eytchison 5d2df35efa Enable configuring minikube size (#249)
* Remove unused dind configuration

* Configure minikube cluster size
2025-08-06 10:55:18 -04:00
Riccardo Schirone 8fcf730d2c deployment: include Bearer/Basic in OTEL_TOKEN (#253)
Co-authored-by: Michael D Brown <michael.brown@trailofbits.com>
2025-08-06 09:39:14 -04:00
Riccardo Schirone a8ed0ccbbe feat: Add local SigNoz deployment support (#232)
* feat: Add simplified SigNoz integration using official Helm chart

- Add SigNoz as a Helm dependency with conditional deployment
- Enable SigNoz by default for minikube environments
- Auto-configure OTEL to use internal SigNoz when enabled
- Update Docker Compose to include existing SigNoz stack
- Minimal configuration following the official chart approach

Co-authored-by: Riccardo Schirone <ret2libc@users.noreply.github.com>

* Configure local signoz

* do not deploy signoz in ci

* makefile: ensure signoz is available

* feat: Simplify SigNoz integration for improved user experience

- Remove external SigNoz configuration prompts from setup-local script
- Make local SigNoz deployment the default for quickstart experience
- Move external SigNoz configuration to MANUAL_SETUP.md for advanced users
- Streamline README log access section to focus on local SigNoz UI
- Relocate kubectl commands to QUICK_REFERENCE.md as alternative method
- Improve documentation structure for better user onboarding

Addresses feedback from @michaelbrownuc to simplify the integration
before merging.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-authored-by: Riccardo Schirone <ret2libc@users.noreply.github.com>

* Update MANUAL_SETUP.md

---------

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
Co-authored-by: Riccardo Schirone <ret2libc@users.noreply.github.com>
2025-08-06 09:35:53 -04:00
Ronald Eytchison e2ff4edb62 Configure LiteLLM limit (#230)
* Configure LiteLLM limit

* Create Litellm user virtual key for components

This is because a budget cannot be enforced for a master key.

Based on prior work by Riccardo Schirone
<562321+ret2libc@users.noreply.github.com>:
https://github.com/aixcc-finals/afc-crs-trail-of-bits/pull/887

* Configure virtual key budget

* Make RBAC for litellm key setup more restrictive

---------

Co-authored-by: Michael D Brown <michael.brown@trailofbits.com>
2025-08-04 11:21:58 -04:00
Riccardo Schirone a08cbf1050 Make CRS more flexible (#202)
* Fix integration-test run

* use the proper oss-fuzz-aixcc commit to run integration-test
* determine OSS_FUZZ_CONTAINER_ORG at runtime
* use `git diff` in the patcher to create the patch to fix a problem
  with patches affecting non-newline terminated files

* fix parsing

* fix program-model lint
2025-07-31 09:34:28 -04:00
Brad Swain c7fc0f7c9a remove refs to aixcc resources (#195)
* remove refs to aixcc resources

* remove aixcc.tech

* change aixcc-finals to tob-challenges
2025-07-30 09:34:58 -05:00
Ronald Eytchison 913e51043c Support a Github fine-grained PAT for local deployment (#164) 2025-07-24 10:11:42 -04:00
Riccardo Schirone 1d385cf89f Make deployment easier (#158)
* deployment: just use the value in values.template

* ci: disable integration tests and private settings

* Download trailofbits cscope, not aixcc-finals one

* ci: fix docker login to ghcr.io

* Changes to allow non aixcc deployment

* buttercup-ui: basic skeleton for a CRS interface

* file-server implementation

* add ui to k8s

* other apis

* try to fix k8s

* remove some labels

* fix ui

* small fixes to doc

* ui: support for cloning private repos

* Add setup scripts for easy deployment

* update scripts

* update make/readme

* small adj

* address review

* we need 0.0.0.0 for k8s
2025-07-11 07:31:57 -04:00
Ronald Eytchison e2e5e45cee Build cscope image locally instead of pulling (#148)
* Add cscope as submodule

* Use cscope submodule instead of docker image

* Pass token to checkout private submodule in CI
2025-07-10 15:49:09 -04:00
Riccardo Schirone cdb67b0b60 Changes to allow non aixcc deployment (#147) 2025-07-09 12:22:54 +02:00
Riccardo Schirone 6f4b0118ac deployment: just use the LOG_MAX_LINE_LENGTH value in values.template (#126)
* deployment: just use the value in values.template

* ci: disable integration tests and private settings

* Download trailofbits cscope, not aixcc-finals one

* ci: fix docker login to ghcr.io
2025-07-07 15:13:29 +02:00
Evan Downing 0f68d6795f Propagate log max line length (#813) 2025-06-11 09:27:30 -04:00
Henrik Brodin ab454514c4 300 fuzzer pods and 50 nodes default (#709)
Will increase the node count to 50 and use fuzzers to occupy them.
2025-06-03 16:26:25 +02:00
Evan Downing af32025940 Add max line length to logs (#738) 2025-05-30 08:01:50 -04:00
Henrik Brodin 931c0a5852 ToB unscored round 2 (#621)
* Bump version to have a specific relase to run

* Correc the env var name for enabling the mock competition api

* Minor fixes for making it run

* Docker auth on all (hopefully)

* mock api

* fix mock api return values

* Bump the coverage bot resources

---------

Co-authored-by: Michael D Brown <michael.brown@trailofbits.com>
2025-05-19 13:48:16 -04:00
Henrik Brodin 42cc53cbd9 Mock competition api for replaying unscored rounds (#604)
* Mock competition api for replaying unscored rounds

* Update documentation

---------

Co-authored-by: Michael D Brown <michael.brown@trailofbits.com>
2025-05-14 10:00:07 -04:00
Henrik Brodin 18ba3fffc3 Increase fuzzer count, make three patches per found vuln (#539)
* Bump the number of patches and request three patches per vuln in prod

* Move the config value to scheduler section

* minor fixes

* bump version
2025-05-05 16:19:00 +02:00
Riccardo Schirone caabb07dd5 ci: allow to customize workflow dispatch (#427) 2025-04-22 13:51:28 +02:00
Riccardo Schirone f8707f5e9a Re-enable integration tests in CI (#374) 2025-04-15 15:27:30 +02:00
Riccardo Schirone fbe5b98dc1 deployment: make it easy to work in minikube (#347)
* deployment: add a minikube environment

* deployment: allow to use minikube for local dev

* deployment: make minikube use local images
2025-04-07 10:25:21 +02:00
Henrik Brodin a06006c2a6 Use docker auth to not be affected by rate limits (#335)
* Use docker auth to not be affected by rate limits

* Add the docker auth vars to the template env
2025-04-03 15:23:56 +02:00
Riccardo Schirone 42f010e913 deployment: create prod/staging environments (#256)
* update VM sizes to L16
2025-03-28 14:47:01 +01:00
Riccardo Schirone f4c4f75a2c deployment: support Tailscale (#235) 2025-03-26 08:49:25 +01:00