Currently, (as of May 12) the module builds a version of nuclei that has incompatible client and templates

[S4lt5]

I have been test driving nuclearpond, and notice that while my nuclei version is set to 2.8.7 per https://github.com/DevSecOpsDocs/terraform-nuclear-pond/blob/main/variables.tf, the lambda always goes and grabs the latest templates directory even when it is in an incompatible upgrade, currently pulling 9.5.0 which is a breaking change.

Incidentally, it seems like terraform apply doesn't actually rebuild my lambda (since I can change the variables.tf to pull a different version, and it doesn't actually do anything)

When I tried to upgrade nuclearpond to 2.9.3, I had some other issues that I will try to remedy today.

When trying to run 2.9.3 with this recipe, the following occurs:

   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v2.9.3

		projectdiscovery.io

[ERR] nuclei version check failed got: [:RUNTIME] could not create nuclei config directory at /home/sbx_user1051/.config/nuclei <- mkdir /home/sbx_user1051: read-only file system
[INF] nuclei-templates are not installed, installing...
[WRN] failed to install nuclei templates: [:RUNTIME] failed to install templates at /home/sbx_user1051/nuclei-templates <- [:RUNTIME] failed to create directory at /home/sbx_user1051/nuclei-templates <- mkdir /home/sbx_user1051: read-only file system
[INF] nuclei-templates are not installed, installing...
[WRN] failed to update nuclei templates: [:RUNTIME] failed to install templates at /home/sbx_user1051/nuclei-templates <- [:RUNTIME] failed to create directory at /home/sbx_user1051/nuclei-templates <- mkdir /home/sbx_user1051: read-only file system
[WRN] failed to update nuclei ignore file: open /home/sbx_user1051/.config/nuclei/.nuclei-ignore: no such file or directory
[FTL] Could not create runner: [:RUNTIME] could not create config file <- open /home/sbx_user1051/.config/nuclei/reporting-config.yaml: no such file or directory

2023/05/12 14:27:08 Completed all parallel operations, best of luck! Completed in 3.029974354s

[S4lt5]

When building as-is:

[S4lt5]

I see that projectdiscovery/nuclei#3567 changes config management, and I think changing my $HOME in 2.9.4 does not change where nuclei writes to , maybe this broke the /tmp reassignment?

[S4lt5]

Looking at the error, it seems to be tracked @ projectdiscovery/nuclei#3576 I am patching it locally and altering the terraform job to just pull my local binary and see if all is well

I'm testing this but changing getDefaultConfigDir to look like

func getDefaultConfigDir() string {
...
	homedir, _ := os.UserConfigDir()
	userCfgDir := filepath.Join(homedir, ".config")
	return filepath.Join(userCfgDir, "nuclei")
}

should do the trick since this honors $HOME