Reflect changes made

feature-restruct
darksider3 5 years ago
parent 93e846e775
commit e00e587fac

@ -0,0 +1,47 @@
FROM python:3-slim
MAINTAINER n1trux
RUN apt-get update &&\
apt-get -y upgrade &&\
DEBIAN_FRONTEND=noninteractive apt-get -y install \
nano rsync openssh-server acl
# Clean up APT when done.
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
# private/{scripts, administrate.py}, public/{scripts, userapplications.py}, config/userapplicatonsconfig.ini
#configs, logs, db
COPY config/applicationsconfig.ini /app/data/applicationsconfig.ini
# admin scripts
COPY private/ /app/admin/
# user accessible scripts
# Make TILDE_ENV
COPY config/environment /app/user/.ssh/environment
COPY public/ /app/user/
#SSH config into /etc :)
COPY config/etc /etc
# create user for applications
RUN useradd -Md /app/user/ -s /app/user/userapplication.py tilde
# make tilde's password empty
RUN passwd -d tilde
RUN usermod -U tilde
# add admin user
RUN useradd -Md /app/admin -s /app/admin/administrate.py admin
# privilege separation directory
RUN mkdir -p /var/run/sshd
# expose SSH port
EXPOSE 22
ENV TILDE_CONF="/app/data/applicationsconfig.ini"
RUN touch /app/data/applications.sqlite
RUN touch /app/data/applications.log
# Doesnt work, @TODO why
#RUN setfacl -R -m u:tilde:rwx /app/data/
RUN chown -R tilde /app/data
CMD ["/usr/sbin/sshd", "-D"]

@ -1,9 +1,9 @@
[DEFAULT] [DEFAULT]
base_path=/application/ base_path=/app/data/
applications_db=%(base_path)sapplications.sqlite applications_db=%(base_path)sapplications.sqlite
log_dir=/application/ log_dir=/app/data/
log_file=%(log_dir)sapplications.log log_file=%(log_dir)sapplications.log
user_creationscript=%(base_path)smake-tilde-user.sh user_creationscript=%(base_path)s/scripts/make-tilde-user.sh
[USERS] [USERS]
UserGroup=tilde UserGroup=tilde

@ -0,0 +1 @@
TILDE_CONF=/app/data/applicationsconfig.ini

@ -2,6 +2,7 @@ UseDNS no
Protocol 2 Protocol 2
SyslogFacility AUTHPRIV SyslogFacility AUTHPRIV
PermitRootLogin no PermitRootLogin no
PermitUserEnvironment yes
PubkeyAuthentication yes PubkeyAuthentication yes
ChallengeResponseAuthentication no ChallengeResponseAuthentication no
Subsystem sftp /usr/lib/openssh/sftp-server Subsystem sftp /usr/lib/openssh/sftp-server

Loading…
Cancel
Save