Reflect changes made
This commit is contained in:
parent
93e846e775
commit
e00e587fac
5 changed files with 52 additions and 3 deletions
47
Dockerfile
Normal file
47
Dockerfile
Normal file
|
@ -0,0 +1,47 @@
|
|||
FROM python:3-slim
|
||||
|
||||
MAINTAINER n1trux
|
||||
RUN apt-get update &&\
|
||||
apt-get -y upgrade &&\
|
||||
DEBIAN_FRONTEND=noninteractive apt-get -y install \
|
||||
nano rsync openssh-server acl
|
||||
|
||||
# Clean up APT when done.
|
||||
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
|
||||
# private/{scripts, administrate.py}, public/{scripts, userapplications.py}, config/userapplicatonsconfig.ini
|
||||
#configs, logs, db
|
||||
COPY config/applicationsconfig.ini /app/data/applicationsconfig.ini
|
||||
|
||||
# admin scripts
|
||||
COPY private/ /app/admin/
|
||||
|
||||
# user accessible scripts
|
||||
# Make TILDE_ENV
|
||||
COPY config/environment /app/user/.ssh/environment
|
||||
COPY public/ /app/user/
|
||||
#SSH config into /etc :)
|
||||
COPY config/etc /etc
|
||||
|
||||
# create user for applications
|
||||
RUN useradd -Md /app/user/ -s /app/user/userapplication.py tilde
|
||||
|
||||
# make tilde's password empty
|
||||
RUN passwd -d tilde
|
||||
RUN usermod -U tilde
|
||||
|
||||
# add admin user
|
||||
RUN useradd -Md /app/admin -s /app/admin/administrate.py admin
|
||||
# privilege separation directory
|
||||
RUN mkdir -p /var/run/sshd
|
||||
|
||||
# expose SSH port
|
||||
EXPOSE 22
|
||||
ENV TILDE_CONF="/app/data/applicationsconfig.ini"
|
||||
RUN touch /app/data/applications.sqlite
|
||||
RUN touch /app/data/applications.log
|
||||
# Doesnt work, @TODO why
|
||||
#RUN setfacl -R -m u:tilde:rwx /app/data/
|
||||
RUN chown -R tilde /app/data
|
||||
CMD ["/usr/sbin/sshd", "-D"]
|
|
@ -1,9 +1,9 @@
|
|||
[DEFAULT]
|
||||
base_path=/application/
|
||||
base_path=/app/data/
|
||||
applications_db=%(base_path)sapplications.sqlite
|
||||
log_dir=/application/
|
||||
log_dir=/app/data/
|
||||
log_file=%(log_dir)sapplications.log
|
||||
user_creationscript=%(base_path)smake-tilde-user.sh
|
||||
user_creationscript=%(base_path)s/scripts/make-tilde-user.sh
|
||||
|
||||
[USERS]
|
||||
UserGroup=tilde
|
||||
|
|
1
config/environment
Normal file
1
config/environment
Normal file
|
@ -0,0 +1 @@
|
|||
TILDE_CONF=/app/data/applicationsconfig.ini
|
|
@ -2,6 +2,7 @@ UseDNS no
|
|||
Protocol 2
|
||||
SyslogFacility AUTHPRIV
|
||||
PermitRootLogin no
|
||||
PermitUserEnvironment yes
|
||||
PubkeyAuthentication yes
|
||||
ChallengeResponseAuthentication no
|
||||
Subsystem sftp /usr/lib/openssh/sftp-server
|
||||
|
|
Loading…
Add table
Reference in a new issue