adlin/challenge.yml

init:
  - nemunaire/challenge:f1ec8b779c0d1bd15e68f7fbdddc96dbd213ce81

files:
  - path: etc/motd
    contents: |
      Welcome to AdLin!
    mode: "0644"
  - path: etc/ssmtp/ssmtp.conf
    contents: |
      mailhub=172.23.200.4
    mode: "0644"
  - path: usr/share/man/man6/adlin.6.gz
    source: subject/adlin.6.gz
    mode: "0644"
  - path: root/adlin-TP1-topologie.png
    source: subject/adlin-TP1-topologie.png
    mode: "0644"

  # Fonts
  - path: /usr/share/consolefonts/Inconsolata-16b.psf.gz
    source: fonts/Inconsolata-16b.psf.gz
    mode: "0644"
  - path: /usr/share/consolefonts/Inconsolata-16r.psf.gz
    source: fonts/Inconsolata-16r.psf.gz
    mode: "0644"
  - path: /usr/share/consolefonts/Inconsolata-32b.psf.gz
    source: fonts/Inconsolata-32b.psf.gz
    mode: "0644"
  - path: /usr/share/consolefonts/Inconsolata-32r.psf.gz
    source: fonts/Inconsolata-32r.psf.gz
    mode: "0644"

  - path: bin/adlin
    source: pkg/challenge/adlin
    mode: "0755"
  - path: etc/issue
    source: pkg/challenge/issue
    mode: "0644"
  - path: etc/passwd
    contents: |
      root:x:0:0:root:/root:/bin/ash
      bin:x:1:1:bin:/bin:/bin/false
      daemon:x:2:2:daemon:/sbin:/bin/false
      adm:x:3:4:adm:/var/adm:/bin/false
      lp:x:4:7:lp:/var/spool/lpd:/bin/false
      sync:x:5:0:sync:/sbin:/bin/sync
      shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
      halt:x:7:0:halt:/sbin:/sbin/halt
      news:x:9:13:news:/var/spool/news:/bin/false
      uucp:x:10:14:uucp:/var/spool/uucp:/bin/false
      operator:x:11:0:operator:/root:/bin/ash
    mode: "0644"
  - path: etc/shadow
    contents: |
      root:!:0::::::
      bin:!:0::::::
      daemon:!:0::::::
      adm:!:0::::::
      lp:!:0::::::
      sync:!:0::::::
      shutdown:!:0::::::
      halt:!:0::::::
      news:!:0::::::
      uucp:!:0::::::
      operator:!:0::::::
    mode: "0640"
  - path: init
    source: pkg/challenge/init
    mode: "0755"
  - path: sbin/fakelogin
    contents: |
      #!/bin/sh

      [ "$2" = "root" ] &&
          echo -e "\\e[01mTip: vous souvenez-vous du mot de passe root ?\\e[0m" ||
          echo -e "\\e[01mTip: cette machine n'est pas reliée au LDAP de l'école.\\e[0m"

      exec login $@
    mode: "0755"
  - path: bin/wg-adlin
    contents: |
      #!/bin/sh

      privatekey="$(wg genkey)"
      grep PrivateKey /etc/wireguard/adlin.conf > /dev/null 2> /dev/null && {
          privatekey="$(grep PrivateKey /etc/wireguard/adlin.conf | head -n 1 | sed -r 's/^.*=\s*(.+)\s*$/\1/')"
      }
      publickey="$(echo $privatekey | wg pubkey)"

      umask 077
      mkdir -p /etc/wireguard
      cat > /etc/wireguard/adlin.conf <<EOF
      [Interface]
      PrivateKey = $privatekey
      EOF

      curl -f -d @- http://wg.adlin.nemunai.re:81/register <<EOF >> /etc/wireguard/adlin.conf &&
      {"PubKey": "${publickey}"}
      EOF
      echo -e "[\\e[01;32m+] \\e[01;32mSuccess.\\e[0m Tunnel configuration written to \\e[01m/etc/wireguard/adlin.conf\\e[0m; you have to use the address: \\e[01m$(grep Address= /etc/wireguard/adlin.conf | sed -r 's/^.*=(.*)$/\1/')\\e[0m" || echo -e "[\\e[01;31m-\\e[0m] \\e[01;31mFailure\\e[0m"
    mode: "0755"