secstate/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ssh] Update git key

Browse Source
This commit is contained in:
Colin Powell
2024-10-28 13:14:30 -04:00
parent 98796b74e2
commit 04442676a3
5 changed files with 15 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
bin/.bin/newjail
View File

@ -1,27 +1,18 @@
#!/bin/sh
# Create the jail with dhcp on
iocage create -r 12.2-RELEASE --name $1 dhcp=on
# Install avahi and .local DNS
iocage exec -f $1 "pkg install -y avahi-app dbus nss_mdns && sysrc dbus_enable="YES" && sysrc avahi_daemon_enable="YES""
iocage exec $1 sed -i -e '/^hosts/s/dns/mdns dns/' /etc/nsswitch.conf
iocage exec $1 "service dbus start && service avahi-daemon start"
iocage create -r 14.1-RELEASE --name $1 dhcp=on boot=on
# Install mdnsd and .local DNS
iocage exec -f $1 "pkg install -y python311 openmdns && sysrc mdnsd_enable="YES" && sysrc mdnsd_flags=epair0b && service mdnsd start"
# Copy our jail public key to allow login
mkdir /zroot/iocage/jails/$1/root/root/.ssh
cp .ssh/jails.pub /zroot/iocage/jails/$1/root/root/.ssh/authorized_keys
mkdir /tank/iocage/jails/$1/root/root/.ssh
cp /home/powellc/.ssh/jails.pub /tank/iocage/jails/$1/root/root/.ssh/authorized_keys
# Allow root login and start SSH
iocage exec $1 sed -i -e '/^#PermitRootLogin/s/#Permit/Permit/' /etc/ssh/sshd_config
iocage exec $1 sed -i -e '/^PermitRootLogin/s/no/yes/' /etc/ssh/sshd_config
iocage exec $1 sysrc sshd_enable="YES"
iocage exec $1 service sshd start
iocage exec -f $1 "echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config && sysrc sshd_enable="YES" && service sshd start"
# Add our new IP address to our unbound local zone
ip_address=$(iocage exec $1 ifconfig epair0b | grep 'inet ' | awk '{print $2}')
echo 'local-data: "'$1'.local IN A '$ip_address'"' >> /zroot/iocage/jails/dns/root/var/unbound/local.zones
iocage exec dns service unbound restart
#ip_address=$(iocage exec $1 ifconfig epair0b | grep 'inet ' | awk '{print $2}')
#echo 'local-data: "'$1'.service IN A '$ip_address'"' >> /tank/iocage/jails/dns/root/var/unbound/service.zones
#iocage exec dns service unbound restart