VirtualBox Oracle XE Test Harness

VBoxManage modifyvm "OracleXE" --natpf1 "ssh,tcp,,2222,,22"
VBoxManage modifyvm "OracleXE" --natpf1 "oracle,tcp,,1521,,1521"
VBoxManage modifyvm "OracleXE" --natpf1 "em-express,tcp,,8080,,8080"

ssh -p 2222 oracle@localhost
# Accept the host key fingerprint
# You should land in the Oracle Linux VM shell

# Quick TCP test (macOS / Linux)
timeout 3 bash -c "echo > /dev/tcp/localhost/1521" && echo "✓ Port 1521 reachable" || echo "✗ Not reachable"

# Or with sqlplus if you have Oracle client installed:
sqlplus TUNEVAULT_RO/password@localhost:1521/XE

ssh -p 2222 oracle@localhost
su - oracle
sqlplus / as sysdba

-- Create the monitoring user
CREATE USER TUNEVAULT_RO IDENTIFIED BY "TVReadOnly2024!";

-- Basic connection + catalog read
GRANT CREATE SESSION TO TUNEVAULT_RO;
GRANT SELECT_CATALOG_ROLE TO TUNEVAULT_RO;

-- V$ dynamic performance views (needed for all core checks)
GRANT SELECT ANY DICTIONARY TO TUNEVAULT_RO;

-- Additional grants for specific checks
GRANT SELECT ON v_$session        TO TUNEVAULT_RO;
GRANT SELECT ON v_$sql            TO TUNEVAULT_RO;
GRANT SELECT ON v_$sqlarea        TO TUNEVAULT_RO;
GRANT SELECT ON v_$sysstat        TO TUNEVAULT_RO;
GRANT SELECT ON v_$parameter      TO TUNEVAULT_RO;
GRANT SELECT ON v_$tablespace     TO TUNEVAULT_RO;
GRANT SELECT ON v_$datafile       TO TUNEVAULT_RO;
GRANT SELECT ON v_$sga            TO TUNEVAULT_RO;
GRANT SELECT ON v_$sgastat        TO TUNEVAULT_RO;
GRANT SELECT ON v_$pgastat        TO TUNEVAULT_RO;
GRANT SELECT ON v_$rman_backup_job_details TO TUNEVAULT_RO;
GRANT SELECT ON dba_segments      TO TUNEVAULT_RO;
GRANT SELECT ON dba_tablespaces   TO TUNEVAULT_RO;
GRANT SELECT ON dba_free_space    TO TUNEVAULT_RO;
GRANT SELECT ON dba_objects       TO TUNEVAULT_RO;
GRANT SELECT ON dba_users         TO TUNEVAULT_RO;
GRANT SELECT ON dba_sys_privs     TO TUNEVAULT_RO;

-- Confirm grants
SELECT granted_role FROM dba_role_privs WHERE grantee = 'TUNEVAULT_RO';
exit

# With sqlplus (if Oracle client installed on host):
sqlplus TUNEVAULT_RO/"TVReadOnly2024!"@localhost:1521/XE

# Verify V$ access:
SELECT banner FROM v$version WHERE ROWNUM = 1;

# Download oracle-proxy.py from TuneVault dashboard or use the validator bundle below

# Create proxy.env (copy from proxy.env.template, edit values)
cat > proxy.env << 'EOF'
ORACLE_HOST=localhost
ORACLE_PORT=1521
ORACLE_SERVICE=XE
ORACLE_USER=TUNEVAULT_RO
ORACLE_PASSWORD=TVReadOnly2024!
TUNEVAULT_API_KEY=local-test-key
EOF

# Self-test without starting the HTTP server:
python3 oracle-proxy.py --validate-only
# Exit 0 = all pass, 1 = failures

# Copy proxy to VM:
scp -P 2222 oracle-proxy.py oracle@localhost:~/

# SSH in + set up:
ssh -p 2222 oracle@localhost

# Inside VM:
pip3 install cx_Oracle

cat > proxy.env << 'EOF'
ORACLE_HOST=localhost
ORACLE_PORT=1521
ORACLE_SERVICE=XE
ORACLE_USER=TUNEVAULT_RO
ORACLE_PASSWORD=TVReadOnly2024!
TUNEVAULT_API_KEY=local-test-key
EOF

# Self-test:
python3 oracle-proxy.py --validate-only

export TUNEVAULT_API_KEY=local-test-key
python3 oracle-proxy.py
# Listening on 127.0.0.1:3100

# From your host, hit the health endpoint:
curl http://localhost:3100/health
# {"status":"ok","version":"..."}

# Download the bundle (requires admin session cookie):
curl -O -b "$(cat ~/.tv_cookie)" https://tunevault.app/api/test-harness/validator-bundle
# File: tunevault-validator.tar

# Extract:
tar xf tunevault-validator.tar

# Edit config:
cp proxy.env.template proxy.env
nano proxy.env   # set ORACLE_HOST, PORT, SERVICE, USER, PASSWORD

chmod +x run-local-validation.sh
./run-local-validation.sh

# Or directly with Python:
python3 local_validation.py

# With explicit args (overrides proxy.env):
python3 local_validation.py \
  --host localhost --port 1521 --service XE \
  --user TUNEVAULT_RO --password "TVReadOnly2024!"

# Self-test mode — reads proxy.env, no HTTP server started
python3 oracle-proxy.py --validate-only

# Exit code 0 = all pass
# Exit code 1 = one or more failures
# Report: validation-report.json written to same directory