#!/bin/bash # Target DMZ set -e if [ -z $SNSTERGUARD ] ; then exit 1; fi DIR=`dirname $0` cd `dirname $0` # disable systemd-resolved which conflicts with nsd echo "DNSStubListener=no" >> /etc/systemd/resolved.conf systemctl stop systemd-resolved DEBIAN_FRONTEND=noninteractive apt-get update DEBIAN_FRONTEND=noninteractive apt-get remove -y apache2 DEBIAN_FRONTEND=noninteractive apt-get autoremove -y # Go KAZ ! # KAZ specific things #installation de docker, docker-compose et on y fourre le user debian dans le groupe idoine DEBIAN_FRONTEND=noninteractive apt-get install -y docker.io docker-compose docker-clean git apg curl sudo unzip rsync btrfs-progs ldap-utils # fuse-overlayfs usermod -G docker debian # activation dans alias dans /root/.bashrc sed -i \ -e 's/^\# alias/alias/g' \ -e 's/^\# export/export/g' \ -e 's/^\# eval/eval/g' \ /root/.bashrc if ! grep -q "for file in /dockers" /root/.bashrc 2>/dev/null; then cat >> /root/.bashrc <> /root/.bashrc # On active fuse-overlayfs pour docker cat >> /etc/docker/daemon.json <> /etc/rc.local #chmod +x /etc/rc.local # lxc.cgroup2.devices.allow = b 7:* rwm # lxc.cgroup2.devices.allow = c 10:237 rwm # # mknod -m 666 /dev/loop0 b 7 0 # mknod -m 666 /dev/loop-control c 10 237 # truncate -s 30G /root/varlibdocker.img # mkfs.btrfs /root/varlibdocker.img # losetup -f /root/varlibdocker.img # mount /dev/loop0 /var/lib/docker # On place les certifs if [ -d letsencrypt ]; then cp -ar letsencrypt /etc/ cp /etc/letsencrypt/local/rootCA.pem /usr/local/share/ca-certificates/rootCA.crt /usr/sbin/update-ca-certificates --fresh fi # ./kaz.sh # On démarre au boot echo -e '#!/bin/sh\n/kaz/bin/container.sh start' >> /etc/rc.local chmod +x /etc/rc.local # On sauve le proxy APT proxy=$(/sbin/ip route | awk '/default/ { print $3 }' | head -1) sed -i -e "s/^proxy.*$/proxy=$proxy/" /usr/local/sbin/detect_proxy.sh #echo "export http_proxy=\"http://$proxy:3142\"" > /etc/profile.d/proxy.sh #echo "export https_proxy=\"http://$proxy:3142\"" >> /etc/profile.d/proxy.sh mkdir /root/.docker echo "{ \"proxies\": { \"default\": { \"httpProxy\": \"http://$proxy:3142\", \"httpsProxy\": \"http://$proxy:3142\", \"noProxy\": \"*.sns,127.0.0.0/8,100.64.0.0/10\" } } }" > /root/.docker/config.json echo "http_proxy=\"http://$proxy:3142\" https_proxy=\"http://$proxy:3142\" " >> /etc/default/docker # clear apt cache DEBIAN_FRONTEND=noninteractive apt-get autoremove -y DEBIAN_FRONTEND=noninteractive apt-get clean