Epic: Set up ContainerSSH Honeypot

[paseaf]

Goal

Implement https://containerssh.io/guides/honeypot/

Major steps

Extracted from https://containerssh.io/guides/honeypot/
This section just includes major steps. Refer to the project board for detailed tasks.
Set up the following components:

• Set up gateway and sacrificial VMs and basic network #2
• Automate image build process for sacrificial VM #6
• Set up MinIO #3 For uploading audit logs
• Set up Prometheus #4 For monitoring audit logs.
• Set up CA for sacrificial VM and gateway VM #15
• Set up ContainerSSH #16
• Set up honeypot audit logging with MinIO #12
• Set up honeypot monitoring with Prometheus (and Grafana) #25
• Configure firewall rules #5
• Finalization steps #13
  Might need to modify disk_type for Packer.

Open Questions

Q: Should we use one subnet for both VM or split them?
A: Maybe split for security: https://community.cisco.com/t5/switching/ip-subnetting-best-practice/td-p/2191100

Q: How much disk space is sufficient for each VM?

Because "we need to have have sufficient disk space to hold audit logs and containers for both VMs."

Check out #42

Q: Which S3-compatible storage do we use?
A: MinIO is good enough. > It should be fairly simple to convert into a docker-compose file or similar.