init:
  - nemunaire/challenge:13104778e90d0f9e8f2928029cb9a9d5b2495ad5
  - nemunaire/adlin-shadow-up:c5e6c7f7afff788f6429a0ad1a7be982a47d5410

files:
  - path: etc/motd
    contents: |
      Welcome to AdLin course!

      You'll find your instructions in the manual.

      Good luck!

    mode: "0644"
  - path: etc/ssmtp/ssmtp.conf
    contents: |
      mailhub=172.23.200.4
    mode: "0644"
  - path: usr/share/man/man6/adlin.6.gz
    source: subject/adlin.6.gz
    mode: "0644"
  - path: root/adlin-TP1-topologie.png
    source: subject/adlin-TP1-topologie.png
    mode: "0644"

  - path: bin/adlin
    source: pkg/challenge/adlin
    mode: "0755"
  - path: etc/issue
    source: pkg/challenge/issue
    mode: "0644"
  - path: etc/passwd
    contents: |
      root:x:0:0:root:/root:/bin/ash
      bin:x:1:1:bin:/bin:/bin/false
      daemon:x:2:2:daemon:/sbin:/bin/false
      adm:x:3:4:adm:/var/adm:/bin/false
      lp:x:4:7:lp:/var/spool/lpd:/bin/false
      sync:x:5:0:sync:/sbin:/bin/sync
      shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
      halt:x:7:0:halt:/sbin:/sbin/halt
      news:x:9:13:news:/var/spool/news:/bin/false
      uucp:x:10:14:uucp:/var/spool/uucp:/bin/false
      operator:x:11:0:operator:/root:/bin/ash
      ntp:x:123:123:NTP:/var/empty:/sbin/nologin
    mode: "0644"
  - path: etc/shadow
    contents: |
      root:!:0::::::
      bin:!:0::::::
      daemon:!:0::::::
      adm:!:0::::::
      lp:!:0::::::
      sync:!:0::::::
      shutdown:!:0::::::
      halt:!:0::::::
      news:!:0::::::
      uucp:!:0::::::
      operator:!:0::::::
      ntp:!:0::::::
    mode: "0640"
  - path: etc/ntpd.conf
    contents: |
      # $OpenBSD: ntpd.conf,v 1.14 2015/07/15 20:28:37 ajacoutot Exp $
      #
      # See ntpd.conf(5) and /etc/examples/ntpd.conf

      # Pro tip: Change pool.ntp.org to a raw IP if you don't have access to a nameserver yet
      servers pool.ntp.org
      sensor *
    mode: "0644"
  - path: init
    source: pkg/challenge/init
    mode: "0755"
  - path: root/.ash_history
    contents: |
      cat my_ip
      ip a
      man 6 adlin
    mode: "0644"
  - path: etc/profile.d/cmd-colors.sh
    contents: |
      alias ip="ip -c"
      alias ls="ls -c"

      export LESS_TERMCAP_mb=$(printf "\e[1;37m")
      export LESS_TERMCAP_md=$(printf "\e[1;36m")
      export LESS_TERMCAP_me=$(printf "\e[0m")
      export LESS_TERMCAP_se=$(printf "\e[0m")
      export LESS_TERMCAP_so=$(printf "\e[1;47;30m")
      export LESS_TERMCAP_ue=$(printf "\e[0m")
      export LESS_TERMCAP_us=$(printf "\e[1;32m")
    mode: "0644"
  - path: sbin/fakelogin
    contents: |
      #!/bin/sh

      grep -q '^root:!' /etc/shadow && {
          [ "$2" = "root" ] &&
              echo -e "\\e[01mTip: vous souvenez-vous du mot de passe root ?\\e[0m" ||
              echo -e "\\e[01mTip: cette machine n'est pas reliée à l'authentification de l'école.\\e[0m"
          }

      exec login $@
    mode: "0755"
  - path: bin/progression
    source: pkg/challenge/progression.sh
    mode: "0755"
  - path: bin/my_ips
    source: pkg/challenge/my_ips.sh
    mode: "0755"
  - path: bin/wg-adlin
    contents: |
      #!/bin/sh

      privatekey="$(wg genkey)"
      grep PrivateKey /etc/wireguard/adlin.conf > /dev/null 2> /dev/null && {
          privatekey="$(grep PrivateKey /etc/wireguard/adlin.conf | head -n 1 | sed -r 's/^.*=\s*(.+)\s*$/\1/')"
      }
      publickey="$(echo $privatekey | wg pubkey)"

      umask 077
      mkdir -p /etc/wireguard
      cat > /etc/wireguard/adlin.conf <<EOF
      [Interface]
      PrivateKey = $privatekey
      EOF

      adlin "${publickey}" | curl -f -d @- http://wg.adlin.nemunai.re/register >> /etc/wireguard/adlin.conf &&
      echo -e "[\\e[01;32m+\\e[0m] \\e[01;32mSuccess.\\e[0m Tunnel configuration written to \\e[01m/etc/wireguard/adlin.conf\\e[0m; you have to use the address: \\e[01m$(grep Address= /etc/wireguard/adlin.conf | sed -r 's/^.*=(.*)$/\1/')\\e[0m" || echo -e "[\\e[01;31m-\\e[0m] \\e[01;31mFailure\\e[0m"
    mode: "0755"