Cisco ASAv Vagrant box

A procedure for creating a Cisco ASAv Vagrant box for the libvirt provider.

Prerequisites

• Git
• Python
• Ansible
• libvirt with client tools
• QEMU
• Vagrant >= 2.2.10
• vagrant-libvirt

Vagrant version 2.2.16 introduced a bug that breaks SSH connectivity - #12344

Steps

0. Verify the prerequisite tools are installed.

$ which git python ansible libvirtd virsh qemu-system-x86_64 vagrant
$ vagrant plugin list
vagrant-libvirt (0.5.1, global)

1. Install the genisoimage tool.

Ubuntu 18.04

$ sudo apt install genisoimage

Arch Linux

$ sudo pacman -S cdrtools

2. Log in and download the Cisco Adaptive Security Virtual Appliance qcow2 package for the Cisco ASAv Virtual Firewall file. Save the file to your Downloads directory.

3. Copy (and rename) the disk image file to the /var/lib/libvirt/images directory.

$ sudo cp $HOME/Downloads/asav9-16-1.qcow2 /var/lib/libvirt/images/cisco-asav.qcow2

4. Modify the file ownership and permissions. Note the owner may differ between Linux distributions.

Ubuntu 18.04

$ sudo chown libvirt-qemu:kvm /var/lib/libvirt/images/cisco-asav.qcow2
$ sudo chmod u+x /var/lib/libvirt/images/cisco-asav.qcow2

Arch Linux

$ sudo chown nobody:kvm /var/lib/libvirt/images/cisco-asav.qcow2
$ sudo chmod u+x /var/lib/libvirt/images/cisco-asav.qcow2

5. Clone this GitHub repo and cd into the directory.

$ git clone https://github.com/mweisel/cisco-asav-vagrant-libvirt
$ cd cisco-asav-vagrant-libvirt

6. Create the day0.iso file. The file provides the initial configuration for the Cisco ASAv. It will be mounted and read on first boot.

$ cd files
$ genisoimage -r -o day0.iso day0-config

7. Copy the day0.iso file to the /var/lib/libvirt/images directory.

$ sudo cp day0.iso /var/lib/libvirt/images/

8. Modify the file ownership and permissions.

Ubuntu 18.04

$ sudo chown libvirt-qemu:kvm /var/lib/libvirt/images/day0.iso
$ sudo chmod u+x /var/lib/libvirt/images/day0.iso

Arch Linux

$ sudo chown nobody:kvm /var/lib/libvirt/images/day0.iso
$ sudo chmod u+x /var/lib/libvirt/images/day0.iso

9. Create the boxes directory.

$ mkdir -p $HOME/boxes

10. Start the vagrant-libvirt network (if not already started).

$ virsh -c qemu:///system net-list
$ virsh -c qemu:///system net-start vagrant-libvirt

11. Run the Ansible playbook.

$ cd ..
$ ansible-playbook main.yml

12. Copy (and rename) the Vagrant box artifact to the boxes directory.

$ cp cisco-asav.box $HOME/boxes/cisco-asav-9.16.1.box

13. Copy the box metadata file to the boxes directory.

$ cp ./files/cisco-asav.json $HOME/boxes/

14. Change the current working directory to boxes.

$ cd $HOME/boxes

15. Substitute the HOME placeholder string in the box metadata file.

$ awk '/url/{gsub(/^ */,"");print}' cisco-asav.json
"url": "file://HOME/boxes/cisco-asav-VER.box"

$ sed -i "s|HOME|${HOME}|" cisco-asav.json

$ awk '/url/{gsub(/^ */,"");print}' cisco-asav.json
"url": "file:///home/marc/boxes/cisco-asav-VER.box"

16. Also, substitute the VER placeholder string with the Cisco ASA version you're using.

$ awk '/VER/{gsub(/^ */,"");print}' cisco-asav.json
"version": "VER",
"url": "file:///home/marc/boxes/cisco-asav-VER.box"

$ sed -i 's/VER/9.16.1/g' cisco-asav.json

$ awk '/\<version\>|url/{gsub(/^ */,"");print}' cisco-asav.json
"version": "9.16.1",
"url": "file:///home/marc/boxes/cisco-asav-9.16.1.box"

17. Add the Vagrant box to the local inventory.

$ vagrant box add cisco-asav.json

License

This project is licensed under the MIT License - see the LICENSE file for details