2019-03-10 18:32:38 +00:00
kernel :
2020-03-29 14:12:17 +00:00
image : linuxkit/kernel:4.19.104
cmdline : "console=ttyS0 root=/dev/sda1 root=/dev/sr0 adlin.token=LqCdJDfniA"
# cmdline: "console=tty0"
2019-03-10 18:32:38 +00:00
init :
2020-03-29 14:12:17 +00:00
- linuxkit/init:a4fcf333298f644dfac6adf680b83140927aa85e
- linuxkit/runc:69b4a35eaa22eba4990ee52cccc8f48f6c08ed03
- linuxkit/containerd:09553963ed9da626c25cf8acdf6d62ec37645412
- linuxkit/ca-certificates:v0.7
- linuxkit/getty:v0.7
2019-03-10 18:32:38 +00:00
onboot :
2019-03-29 11:48:57 +00:00
- name : format
2020-03-29 14:12:17 +00:00
image : linuxkit/format:65b9e0a76d0b9fb8ac5c5f3bc8d3131109290f56
2019-03-29 11:48:57 +00:00
command : [ "/usr/bin/format" , "/dev/sda" ]
- name : mount
2020-03-29 14:12:17 +00:00
image : linuxkit/mount:v0.7
2019-03-29 11:48:57 +00:00
command : [ "/usr/bin/mountie" , "/dev/sda1" , "/var/lib/adlin" ]
2019-03-10 18:32:38 +00:00
- name : sysctl
2020-03-29 14:12:17 +00:00
image : linuxkit/sysctl:v0.7
2019-03-10 18:32:38 +00:00
binds :
- /etc/sysctl.d/:/etc/sysctl.d/:ro
2019-03-29 11:48:57 +00:00
- name : rngd1
2020-03-29 14:12:17 +00:00
image : linuxkit/rngd:02c555b50cd1887aa628836662d2eec54c0d7e81
2019-03-29 11:48:57 +00:00
command : [ "/sbin/rngd" , "-1" ]
2019-03-10 18:32:38 +00:00
# Network: external
- name : dhcpcd
2020-03-29 14:12:17 +00:00
image : linuxkit/dhcpcd:v0.7
2019-03-10 18:32:38 +00:00
command : [ "/sbin/dhcpcd" , "--nobackground" , "-f" , "/dhcpcd.conf" , "-1" ]
net : new
runtime :
interfaces :
- name : eth0
bindNS :
net : /run/netns/router
services :
- name : dhcpcd-wks1
2020-03-29 14:12:17 +00:00
image : linuxkit/dhcpcd:v0.7
2019-03-10 18:32:38 +00:00
net : new
runtime :
interfaces :
- name : eth1
- name : ethwks1
bindNS :
net : /run/netns/wks1
- name : dhcpcd-wks2
2020-03-29 14:12:17 +00:00
image : linuxkit/dhcpcd:v0.7
2019-03-10 18:32:38 +00:00
net : new
runtime :
interfaces :
- name : ethwks2
bindNS :
net : /run/netns/wks2
- name : sshd-wks1
2020-03-29 14:12:17 +00:00
image : linuxkit/sshd:v0.7
2019-03-10 18:32:38 +00:00
net : /run/netns/wks1
binds :
2019-04-30 09:39:51 +00:00
- /etc/ssh/sshd_config:/etc/ssh/sshd_config
2019-05-03 15:51:18 +00:00
- /etc/wpasswd:/etc/passwd
- /etc/wshadow:/etc/shadow
2019-03-10 18:32:38 +00:00
- name : sshd-wks2
2020-03-29 14:12:17 +00:00
image : linuxkit/sshd:v0.7
2019-03-10 18:32:38 +00:00
net : /run/netns/wks2
binds :
2019-04-30 09:39:51 +00:00
- /etc/ssh/sshd_config:/etc/ssh/sshd_config
2019-05-03 15:51:18 +00:00
- /etc/wpasswd:/etc/passwd
- /etc/wshadow:/etc/shadow
2019-03-10 18:32:38 +00:00
2019-03-29 11:48:57 +00:00
- name : mainrouter
2020-03-29 14:12:17 +00:00
image : nemunaire/adlin-tuto3:a8593e91cb830dede2ad25a205ef47141a5a3c22
2019-03-10 18:32:38 +00:00
net : /run/netns/router
2019-04-19 17:12:29 +00:00
command : [ "/sbin/init" ]
2019-03-10 18:32:38 +00:00
capabilities :
- all
2019-04-19 17:08:32 +00:00
mounts :
- type : cgroup
options : [ "rw" , "nosuid" , "noexec" , "nodev" , "relatime" ]
2019-03-10 18:32:38 +00:00
binds :
- /etc/dresolv.conf:/etc/resolv.conf
2019-03-29 11:48:57 +00:00
- name : matrix
2020-03-29 14:12:17 +00:00
image : nemunaire/tinydeb:eaa617bf726fb4cadfa22b3947709579e6001212
2019-03-29 11:48:57 +00:00
net : /run/netns/chat
2019-04-19 19:15:44 +00:00
command : [ "/sbin/init" ]
2019-03-29 11:48:57 +00:00
capabilities :
- all
2019-04-19 19:15:44 +00:00
mounts :
- type : cgroup
options : [ "rw" , "nosuid" , "noexec" , "nodev" , "relatime" ]
2019-03-29 11:48:57 +00:00
binds :
- /etc/dresolv.conf:/etc/resolv.conf
- name : ns-resolv
2020-03-29 14:12:17 +00:00
image : nemunaire/unbound:ed3ccbb5340aefd48c53a97743fdc6edc7011103
2019-03-10 18:32:38 +00:00
net : /run/netns/ns
capabilities :
2019-03-29 11:48:57 +00:00
- all
binds :
- /etc/unbound:/etc/unbound:ro
2019-04-19 17:46:09 +00:00
- /etc/services:/etc/services:ro
2019-03-29 11:48:57 +00:00
- name : ns-auth
2020-03-29 14:12:17 +00:00
image : nemunaire/nsd:8d1277be1eb28748ed7441ac82ac04edbacc3b5d
2019-03-29 11:48:57 +00:00
net : /run/netns/ns-auth
capabilities :
- all
2019-04-25 16:03:50 +00:00
mounts :
- type : cgroup
options : [ "rw" , "nosuid" , "noexec" , "nodev" , "relatime" ]
2019-03-10 18:32:38 +00:00
binds :
2019-03-29 11:48:57 +00:00
- /var/lib/adlin/nsd:/etc/nsd:rw
- /var/lib/adlin/nsd-db:/var/db/nsd:rw
- /etc/nsd:/etc/nsd.sample:ro
- /etc/network:/etc/network:ro
2019-04-19 17:46:09 +00:00
- /etc/services:/etc/services:ro
2019-03-29 11:48:57 +00:00
runtime :
mkdir :
- /var/lib/adlin/nsd
- /var/lib/adlin/nsd-db
2019-03-10 18:32:38 +00:00
- name : db
image : postgres:alpine
net : /run/netns/db
capabilities :
- all
env :
- LANG=en_US.utf8
- PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/"
- PGDATA=/var/lib/postgresql/data
2020-03-29 14:12:17 +00:00
- POSTGRES_PASSWORD=adlin2021
2019-03-10 18:32:38 +00:00
binds :
2019-04-19 17:46:09 +00:00
- /etc/services:/etc/services:ro
2020-03-29 14:12:17 +00:00
- /initdb/:/docker-entrypoint-initdb.d/:ro
- /var/lib/adlin/postgres:/var/lib/postgresql/data
runtime :
mkdir :
- /var/lib/adlin/postgres
2019-03-29 11:48:57 +00:00
# - name: chat
# image: nemunaire/mattermost:ecb81e668c64d07b4453f9b465a6998fc6ceb067-dirty
# net: /run/netns/chat
# capabilities:
# - all
# command: ["/entrypoint.sh", "/mattermost/bin/platform"]
# env:
# - MM_USERNAME=mattermost
# - MM_DBNAME=mattermost
2020-03-29 14:12:17 +00:00
# - MM_PASSWORD=adlin2021
2019-03-29 11:48:57 +00:00
# binds:
2019-04-19 17:46:09 +00:00
# - /etc/services:/etc/services:ro
2019-03-29 11:48:57 +00:00
# - /etc/hosts:/etc/hosts:ro
2020-03-29 14:12:17 +00:00
- name : miniflux
image : miniflux/miniflux:latest
2020-03-29 16:32:04 +00:00
net : /run/netns/ttrss
2019-03-10 18:32:38 +00:00
capabilities :
- all
2020-03-29 14:12:17 +00:00
command : [ "/bin/sh" , "-c" , "sleep 5; /usr/bin/miniflux" ]
2019-03-10 18:32:38 +00:00
env :
2020-03-29 14:12:17 +00:00
- DATABASE_URL=postgres://miniflux:adlin2021@db/miniflux?sslmode=disable
- RUN_MIGRATIONS=1
- CREATE_ADMIN=1
- ADMIN_USERNAME=adeline
- ADMIN_PASSWORD=adlin2021
- LISTEN_ADDR=0.0.0.0:8080
2019-03-10 18:32:38 +00:00
binds :
- /etc/hosts:/etc/hosts:ro
2019-04-19 17:46:09 +00:00
- /etc/services:/etc/services:ro
2019-03-10 18:32:38 +00:00
files :
- path : etc/hosts
contents : |
127.0 .0 .1 localhost
: : 1 localhost
172.23 .42 .4 db
mode : "0444"
2020-03-29 14:12:17 +00:00
- path : usr/bin/ask.sh
source : pkg/wg/ask.sh
mode : "0755"
2019-04-30 09:39:51 +00:00
- path : etc/ssh/sshd_config
source : pkg/nsd/sshd_config
mode : "0644"
2019-04-30 09:40:21 +00:00
- path : /usr/bin/reset-router-firewall
contents : |
#!/bin/sh
PS=$(pgrep systemd | head -1)
nsenter -t "${PS}" -a iptables -F
nsenter -t "${PS}" -a iptables -P INPUT ACCEPT
nsenter -t "${PS}" -a iptables -P FORWARD ACCEPT
nsenter -t "${PS}" -a iptables -P OUTPUT ACCEPT
nsenter -t "${PS}" -a iptables -t nat -F
mode : "0755"
2020-03-29 14:12:17 +00:00
- path : /usr/sbin/wg
2019-03-10 18:32:38 +00:00
contents : |
2020-03-29 14:12:17 +00:00
nsenter -n/run/netns/router /usr/bin/wg $@
mode : "0755"
2019-03-10 18:32:38 +00:00
2020-03-29 14:12:17 +00:00
- path : /initdb/init-miniflux.sh
2019-03-10 18:32:38 +00:00
contents : |
#!/bin/sh
set -e
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" <<-EOSQL
2020-03-29 14:12:17 +00:00
CREATE USER miniflux WITH PASSWORD 'adlin2021';
CREATE DATABASE miniflux;
GRANT ALL PRIVILEGES ON DATABASE miniflux TO miniflux;
EOSQL
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname miniflux <<-EOSQL
CREATE EXTENSION hstore;
2019-03-10 18:32:38 +00:00
EOSQL
mode : "0555"
2020-03-29 14:12:17 +00:00
- path : /initdb/init-matrix.sql
contents : |
CREATE USER matrix WITH PASSWORD 'adlin2021';
CREATE DATABASE matrix;
GRANT ALL PRIVILEGES ON DATABASE matrix TO matrix;
mode : "0444"
2020-03-29 16:32:04 +00:00
- path : etc/init.d/011-tuto-net
contents : |
#!/bin/sh
mkdir -p /var/lib/adlin/wireguard/
nsenter -n/run/netns/router /usr/bin/ask.sh
# Network: workstations
ip link add ethwks type veth peer name veth-wks
ip link set ethwks up
ip link set ethwks netns router
ip netns exec router ip a add 192.168.6.254/24 dev ethwks
grep MyIPv6= /var/lib/adlin/wireguard/adlin.conf > /dev/null &&
ip netns exec router ip a add $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#1::1/96#") dev ethwks
# Network: servers
ip link add ethsrv type veth peer name veth-srv
ip link set ethsrv netns router
ip netns exec router ip link set ethsrv up
ip netns exec router ip a add 172.23.42.1/24 dev ethsrv
grep MyIPv6= /var/lib/adlin/wireguard/adlin.conf > /dev/null &&
ip netns exec router ip a add $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:1/96#") dev ethsrv
ip netns add ns
ip link add vethin-ns type veth peer name veth-ns
ip link set vethin-ns netns ns
ip netns exec ns ip link set vethin-ns up
ip netns exec ns ip a add 172.23.42.2/24 dev vethin-ns
ip netns exec ns ip route add default via 172.23.42.1
grep MyIPv6= /var/lib/adlin/wireguard/adlin.conf > /dev/null && {
ip netns exec ns ip a add $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:2/96#") dev vethin-ns
ip netns exec ns ip route add default via $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:1#")
}
ip netns add ns-auth
ip link add vethin-nsauth type veth peer name veth-nsauth
ip link set vethin-nsauth netns ns-auth
ip netns exec ns-auth ip link set vethin-nsauth up
ip netns exec ns-auth ip a add 172.23.42.3/24 dev vethin-nsauth
ip netns exec ns-auth ip route add default via 172.23.42.1
grep MyIPv6= /var/lib/adlin/wireguard/adlin.conf > /dev/null && {
ip netns exec ns-auth ip a add $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:3/96#") dev vethin-nsauth
ip netns exec ns-auth ip route add default via $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:1#")
}
ip netns add db
ip link add vethin-db type veth peer name veth-db
ip link set vethin-db netns db
ip netns exec db ip link set vethin-db up
ip netns exec db ip a add 172.23.42.4/24 dev vethin-db
ip netns exec db ip route add default via 172.23.42.1
grep MyIPv6= /var/lib/adlin/wireguard/adlin.conf > /dev/null && {
ip netns exec db ip a add $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:4/96#") dev vethin-db
ip netns exec db ip route add default via $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:1#")
}
ip netns add chat
ip link add vethin-chat type veth peer name veth-chat
ip link set vethin-chat netns chat
ip netns exec chat ip link set vethin-chat up
ip netns exec chat ip a add 172.23.42.5/24 dev vethin-chat
ip netns exec chat ip route add default via 172.23.42.1
grep MyIPv6= /var/lib/adlin/wireguard/adlin.conf > /dev/null && {
ip netns exec chat ip a add $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:5/96#") dev vethin-chat
ip netns exec chat ip route add default via $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:1#")
}
ip netns add ttrss
ip link add vethin-ttrss type veth peer name veth-ttrss
ip link set vethin-ttrss netns ttrss
ip netns exec ttrss ip link set vethin-ttrss up
ip netns exec ttrss ip a add 172.23.42.6/24 dev vethin-ttrss
ip netns exec ttrss ip route add default via 172.23.42.1
grep MyIPv6= /var/lib/adlin/wireguard/adlin.conf > /dev/null && {
ip netns exec ttrss ip a add $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:6/96#") dev vethin-ttrss
ip netns exec ttrss ip route add default via $(sed 's/^.*MyIPv6=//p;d' /var/lib/adlin/wireguard/adlin.conf | sed "s#:[^:/]*/.*\$#:1#")
}
# Network: bridges
ip l add brsrv type bridge
ip link set veth-srv master brsrv
ip link set veth-ns master brsrv
ip link set veth-nsauth master brsrv
ip link set veth-db master brsrv
ip link set veth-chat master brsrv
ip link set veth-ttrss master brsrv
ip link set veth-srv up
ip link set veth-ns up
ip link set veth-nsauth up
ip link set veth-db up
ip link set veth-chat up
ip link set veth-ttrss up
ip link set brsrv up
ip l add brwks type bridge
ip link add veth-wks1 type veth peer name ethwks1
ip link add veth-wks2 type veth peer name ethwks2
ip link set veth-wks master brwks
ip link set veth-wks1 master brwks
ip link set veth-wks2 master brwks
ip link set veth-wks up
ip link set veth-wks1 up
ip link set veth-wks2 up
ip link set brwks up
ip l | grep eth2 > /dev/null && {
ip link set eth2 up
ip link set eth2 master brwks
}
mode : "0755"
2019-04-30 12:15:02 +00:00
- path : /etc/init.d/999-rw-passwd.sh
contents : |
#!/bin/sh
2020-03-29 14:12:17 +00:00
sed -ri '/^root/s@^.*$@root:$6$QNuPvO59Xk4UO3le$3P0V2ef6dHlKgO1FHsKcPPgOvL.YeCOPFqfIVTtpYn5eEn3xkgGYeM1RMCQ9l/eTc6rRc.l.WeRe1iJVznVGj/:17968:0:99999:7:::@' /containers/services/mainrouter/rootfs/etc/shadow
2019-05-03 16:44:02 +00:00
cp /etc/services /containers/services/mainrouter/rootfs/etc/services
2020-03-29 14:12:17 +00:00
sed -ri '/^root/s@^.*$@root:$6$QNuPvO59Xk4UO3le$3P0V2ef6dHlKgO1FHsKcPPgOvL.YeCOPFqfIVTtpYn5eEn3xkgGYeM1RMCQ9l/eTc6rRc.l.WeRe1iJVznVGj/:17968:0:99999:7:::@' /containers/services/matrix/rootfs/etc/shadow
2019-05-03 16:44:02 +00:00
cp /etc/services /containers/services/matrix/rootfs/etc/services
2020-03-29 14:12:17 +00:00
sed -ri '/^root/s@^.*$@root:$6$QNuPvO59Xk4UO3le$3P0V2ef6dHlKgO1FHsKcPPgOvL.YeCOPFqfIVTtpYn5eEn3xkgGYeM1RMCQ9l/eTc6rRc.l.WeRe1iJVznVGj/:17968:0:99999:7:::@' /containers/services/ns-auth/rootfs/etc/shadow
2019-04-30 12:15:02 +00:00
exit 0
mode : "0555"
2020-03-29 14:12:17 +00:00
- path : etc/issue.adlin
source : pkg/debian-tuto3/issue
mode : "0444"
2019-03-10 18:32:38 +00:00
- path : /etc/init.d/500-showip.sh
contents : |
#!/bin/sh
2020-03-29 14:12:17 +00:00
echo
cat /etc/issue.adlin
echo
nsenter -n/run/netns/router ip -c a show dev wg0 2> /dev/null || echo "You didn't define your token to connect the network. Please run here `join-p0m` and then reboot."
2019-04-19 17:10:55 +00:00
nsenter -n/run/netns/router ip -c a show dev eth0
2020-03-29 14:12:17 +00:00
nsenter -n/run/netns/wks1 ip -c a show dev eth1 2> /dev/null || echo "Attachez une seconde carte ethernet à la VM pour pouvoir vous connecter à un poste de travail."
2019-03-10 18:32:38 +00:00
exit 0
mode : "0555"
2019-03-29 11:48:57 +00:00
# - path: /etc/init.d/999-getty.sh
# contents: |
# #!/bin/sh
# while true
# do
# /usr/bin/setsid /usr/bin/nsenter -t $(echo $(ps a | grep sshd | head -1) | cut -d ' ' -f 1) -m -u -n -p -- /sbin/agetty -l /sbin/login 38400 tty1 linux
# sleep 1
# done &
# mode: "0555"
2020-03-29 14:12:17 +00:00
- path : /usr/sbin/join-p0m
contents : |
[ -f "/var/lib/adlin/wireguard/adlin.token" ] && echo "A token is already defined. You'll erase it it you continue."
echo -n "Please copy your token here: "
read WGTOKEN
mkdir -p /var/lib/adlin/wireguard/
echo $WGTOKEN > /var/lib/adlin/wireguard/adlin.token
echo "Token saved. You need to reboot now."
mode : "0755"
2019-03-29 11:48:57 +00:00
- path : etc/network/interfaces
2019-03-10 18:32:38 +00:00
contents : |
2019-03-29 11:48:57 +00:00
mode : "0440"
- path : etc/nsd/nsd.conf
contents : |
remote-control :
control-enable : yes
zone :
name : login-x.srs.p0m.fr
zonefile : /etc/nsd/login-x.srs.p0m.fr.zone
2019-04-25 16:03:50 +00:00
mode : "0644"
2019-03-29 11:48:57 +00:00
- path : etc/nsd/login-x.srs.p0m.fr.zone
contents : |
2020-03-29 14:12:17 +00:00
login-x.srs.p0m.fr. 900 SOA ns.login-x.srs.p0m.fr. root.login-x.srs.p0m.fr. 2020032900 172800 3600 2419200 86400
2019-03-29 11:48:57 +00:00
login-x.srs.p0m.fr. 900 NS ns.login-x.srs.p0m.fr.
2019-04-25 16:03:50 +00:00
ns.login-x.srs.p0m.fr. 900 AAAA 2a01:e0a:2b:2252:4242::3
mode : "0644"
2019-03-10 18:32:38 +00:00
- path : etc/unbound/unbound.conf
contents : |
server :
verbosity : 1
interface : 0.0 .0 .0
interface : : : 0
prefer-ip6 : no
access-control : 172.23 .0 .0 /16 allow
access-control : 192.168 .0 .0 /16 allow
log-queries : yes
log-replies : yes
use-syslog : no
hide-identity : yes
hide-version : yes
qname-minimisation : yes
domain-insecure : "."
val-permissive-mode : yes
trust-anchor-file : "/usr/share/dnssec-root/trusted-key.key"
2019-03-29 11:48:57 +00:00
local-zone : "adlin.p0m.fr" typetransparent
local-data : "news.adlin.p0m.fr A 172.23.42.1"
local-data : "matrix.adlin.p0m.fr A 172.23.42.1"
2019-03-10 18:32:38 +00:00
remote-control :
control-enable : no
forward-zone :
name : "."
forward-addr : 9.9 .9 .9
mode : "0440"
2019-05-03 15:51:18 +00:00
- path : etc/wpasswd
2019-03-10 18:32:38 +00:00
contents : |
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/bin/false
sshd:x:102:65534::/run/sshd:/usr/sbin/nologin
systemd-timesync:x:103:105:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:104:106:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:105:107:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:106:108:systemd Bus Proxy,,,:/run/systemd:/bin/false
mode : "0644"
2019-05-03 15:51:18 +00:00
- path : etc/wshadow
2019-03-10 18:32:38 +00:00
contents : |
2019-03-29 11:48:57 +00:00
root:$6$B0qzwsEh$vfWGpIFUrKGrkT0PVtGhhomBwc.60IBIxjMLyG8mz.NJLFRryjqLK9sA/mzxNSaQViiHsYYrsgmcWVHblfdHg1:17968:0:99999:7:: :
2019-03-10 18:32:38 +00:00
daemon:*:17575:0:99999:7:: :
bin:*:17575:0:99999:7:: :
sys:*:17575:0:99999:7:: :
sync:*:17575:0:99999:7:: :
games:*:17575:0:99999:7:: :
man:*:17575:0:99999:7:: :
lp:*:17575:0:99999:7:: :
mail:*:17575:0:99999:7:: :
news:*:17575:0:99999:7:: :
uucp:*:17575:0:99999:7:: :
proxy:*:17575:0:99999:7:: :
www-data:*:17575:0:99999:7:: :
backup:*:17575:0:99999:7:: :
list:*:17575:0:99999:7:: :
irc:*:17575:0:99999:7:: :
gnats:*:17575:0:99999:7:: :
nobody:*:17575:0:99999:7:: :
_apt:*:17575:0:99999:7:: :
sshd:*:17594:0:99999:7:: :
systemd-timesync:*:17594:0:99999:7:: :
systemd-network:*:17594:0:99999:7:: :
systemd-resolve:*:17594:0:99999:7:: :
systemd-bus-proxy:*:17594:0:99999:7:: :
mode : "0640"
- path : etc/dresolv.conf
contents : |
nameserver 172.23.42.2
mode : "0644"
2019-03-29 11:48:57 +00:00
- path : var/lib/adlin
directory : true
mode : "0755"
- path : etc/mresolv.conf
contents : |
nameserver 9.9.9.9
nameserver 1.1.1.1
mode : "0644"
2019-03-10 18:32:38 +00:00
trust :
org :
- linuxkit
- library