removed unused images
parent
4ff60951df
commit
23020b8398
|
|
@ -1,24 +0,0 @@
|
||||||
FROM alpine:3.12
|
|
||||||
|
|
||||||
RUN apk add --no-cache openssh python3 py3-pip && \
|
|
||||||
apk add --no-cache --virtual .build-deps \
|
|
||||||
gcc \
|
|
||||||
libffi-dev \
|
|
||||||
musl-dev \
|
|
||||||
openssl-dev \
|
|
||||||
python3-dev && \
|
|
||||||
pip install \
|
|
||||||
ansible==2.9 \
|
|
||||||
cryptography \
|
|
||||||
mitogen && \
|
|
||||||
apk del .build-deps
|
|
||||||
|
|
||||||
RUN apk add --no-cache openssl
|
|
||||||
|
|
||||||
COPY get_password.sh /usr/local/bin/get_password
|
|
||||||
RUN chmod +x /usr/local/bin/get_password
|
|
||||||
|
|
||||||
COPY ansible.cfg /etc/ansible/ansible.cfg
|
|
||||||
|
|
||||||
RUN mkdir -p /srv
|
|
||||||
WORKDIR /srv
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = ansible
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,528 +0,0 @@
|
||||||
# Example config file for ansible -- https://ansible.com/
|
|
||||||
# =======================================================
|
|
||||||
|
|
||||||
# Nearly all parameters can be overridden in ansible-playbook
|
|
||||||
# or with command line flags. Ansible will read ANSIBLE_CONFIG,
|
|
||||||
# ansible.cfg in the current working directory, .ansible.cfg in
|
|
||||||
# the home directory, or /etc/ansible/ansible.cfg, whichever it
|
|
||||||
# finds first
|
|
||||||
|
|
||||||
# For a full list of available options, run ansible-config list or see the
|
|
||||||
# documentation: https://docs.ansible.com/ansible/latest/reference_appendices/config.html.
|
|
||||||
|
|
||||||
[defaults]
|
|
||||||
inventory = /etc/ansible/hosts.yml
|
|
||||||
interpreter_python = auto_silent
|
|
||||||
#library = ~/.ansible/plugins/modules:/usr/share/ansible/plugins/modules
|
|
||||||
#module_utils = ~/.ansible/plugins/module_utils:/usr/share/ansible/plugins/module_utils
|
|
||||||
#remote_tmp = ~/.ansible/tmp
|
|
||||||
#local_tmp = ~/.ansible/tmp
|
|
||||||
#forks = 5
|
|
||||||
#poll_interval = 0.001
|
|
||||||
#ask_pass = False
|
|
||||||
#transport = smart
|
|
||||||
strategy_plugins = /usr/lib/python3.8/site-packages/ansible_mitogen/plugins/strategy
|
|
||||||
strategy = mitogen_linear
|
|
||||||
|
|
||||||
# Plays will gather facts by default, which contain information about
|
|
||||||
# the remote system.
|
|
||||||
#
|
|
||||||
# smart - gather by default, but don't regather if already gathered
|
|
||||||
# implicit - gather by default, turn off with gather_facts: False
|
|
||||||
# explicit - do not gather by default, must say gather_facts: True
|
|
||||||
#gathering = implicit
|
|
||||||
|
|
||||||
# This only affects the gathering done by a play's gather_facts directive,
|
|
||||||
# by default gathering retrieves all facts subsets
|
|
||||||
# all - gather all subsets
|
|
||||||
# network - gather min and network facts
|
|
||||||
# hardware - gather hardware facts (longest facts to retrieve)
|
|
||||||
# virtual - gather min and virtual facts
|
|
||||||
# facter - import facts from facter
|
|
||||||
# ohai - import facts from ohai
|
|
||||||
# You can combine them using comma (ex: network,virtual)
|
|
||||||
# You can negate them using ! (ex: !hardware,!facter,!ohai)
|
|
||||||
# A minimal set of facts is always gathered.
|
|
||||||
#
|
|
||||||
#gather_subset = all
|
|
||||||
|
|
||||||
# some hardware related facts are collected
|
|
||||||
# with a maximum timeout of 10 seconds. This
|
|
||||||
# option lets you increase or decrease that
|
|
||||||
# timeout to something more suitable for the
|
|
||||||
# environment.
|
|
||||||
#
|
|
||||||
#gather_timeout = 10
|
|
||||||
|
|
||||||
# Ansible facts are available inside the ansible_facts.* dictionary
|
|
||||||
# namespace. This setting maintains the behaviour which was the default prior
|
|
||||||
# to 2.5, duplicating these variables into the main namespace, each with a
|
|
||||||
# prefix of 'ansible_'.
|
|
||||||
# This variable is set to True by default for backwards compatibility. It
|
|
||||||
# will be changed to a default of 'False' in a future release.
|
|
||||||
#
|
|
||||||
#inject_facts_as_vars = True
|
|
||||||
|
|
||||||
# Paths to search for collections, colon separated
|
|
||||||
# collections_paths = ~/.ansible/collections:/usr/share/ansible/collections
|
|
||||||
|
|
||||||
# Paths to search for roles, colon separated
|
|
||||||
#roles_path = ~/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles
|
|
||||||
|
|
||||||
# Host key checking is enabled by default
|
|
||||||
#host_key_checking = True
|
|
||||||
|
|
||||||
# You can only have one 'stdout' callback type enabled at a time. The default
|
|
||||||
# is 'default'. The 'yaml' or 'debug' stdout callback plugins are easier to read.
|
|
||||||
#
|
|
||||||
#stdout_callback = default
|
|
||||||
#stdout_callback = yaml
|
|
||||||
#stdout_callback = debug
|
|
||||||
|
|
||||||
|
|
||||||
# Ansible ships with some plugins that require whitelisting,
|
|
||||||
# this is done to avoid running all of a type by default.
|
|
||||||
# These setting lists those that you want enabled for your system.
|
|
||||||
# Custom plugins should not need this unless plugin author disables them
|
|
||||||
# by default.
|
|
||||||
#
|
|
||||||
# Enable callback plugins, they can output to stdout but cannot be 'stdout' type.
|
|
||||||
#callback_whitelist = timer, mail
|
|
||||||
|
|
||||||
# Determine whether includes in tasks and handlers are "static" by
|
|
||||||
# default. As of 2.0, includes are dynamic by default. Setting these
|
|
||||||
# values to True will make includes behave more like they did in the
|
|
||||||
# 1.x versions.
|
|
||||||
#
|
|
||||||
#task_includes_static = False
|
|
||||||
#handler_includes_static = False
|
|
||||||
|
|
||||||
# Controls if a missing handler for a notification event is an error or a warning
|
|
||||||
#error_on_missing_handler = True
|
|
||||||
|
|
||||||
# Default timeout for connection plugins
|
|
||||||
#timeout = 10
|
|
||||||
|
|
||||||
# Default user to use for playbooks if user is not specified
|
|
||||||
# Uses the connection plugin's default, normally the user currently executing Ansible,
|
|
||||||
# unless a different user is specified here.
|
|
||||||
#
|
|
||||||
#remote_user = root
|
|
||||||
|
|
||||||
# Logging is off by default unless this path is defined.
|
|
||||||
#log_path = /var/log/ansible.log
|
|
||||||
|
|
||||||
# Default module to use when running ad-hoc commands
|
|
||||||
#module_name = command
|
|
||||||
|
|
||||||
# Use this shell for commands executed under sudo.
|
|
||||||
# you may need to change this to /bin/bash in rare instances
|
|
||||||
# if sudo is constrained.
|
|
||||||
#
|
|
||||||
#executable = /bin/sh
|
|
||||||
|
|
||||||
# By default, variables from roles will be visible in the global variable
|
|
||||||
# scope. To prevent this, set the following option to True, and only
|
|
||||||
# tasks and handlers within the role will see the variables there
|
|
||||||
#
|
|
||||||
#private_role_vars = False
|
|
||||||
|
|
||||||
# List any Jinja2 extensions to enable here.
|
|
||||||
#jinja2_extensions = jinja2.ext.do,jinja2.ext.i18n
|
|
||||||
|
|
||||||
# If set, always use this private key file for authentication, same as
|
|
||||||
# if passing --private-key to ansible or ansible-playbook
|
|
||||||
#
|
|
||||||
#private_key_file = /path/to/file
|
|
||||||
|
|
||||||
# If set, configures the path to the Vault password file as an alternative to
|
|
||||||
# specifying --vault-password-file on the command line. This can also be
|
|
||||||
# an executable script that returns the vault password to stdout.
|
|
||||||
#
|
|
||||||
vault_password_file = /usr/local/bin/get_password
|
|
||||||
|
|
||||||
# Format of string {{ ansible_managed }} available within Jinja2
|
|
||||||
# templates indicates to users editing templates files will be replaced.
|
|
||||||
# replacing {file}, {host} and {uid} and strftime codes with proper values.
|
|
||||||
#
|
|
||||||
#ansible_managed = Ansible managed: {file} modified on %Y-%m-%d %H:%M:%S by {uid} on {host}
|
|
||||||
|
|
||||||
# {file}, {host}, {uid}, and the timestamp can all interfere with idempotence
|
|
||||||
# in some situations so the default is a static string:
|
|
||||||
#
|
|
||||||
#ansible_managed = Ansible managed
|
|
||||||
|
|
||||||
# By default, ansible-playbook will display "Skipping [host]" if it determines a task
|
|
||||||
# should not be run on a host. Set this to "False" if you don't want to see these "Skipping"
|
|
||||||
# messages. NOTE: the task header will still be shown regardless of whether or not the
|
|
||||||
# task is skipped.
|
|
||||||
#
|
|
||||||
#display_skipped_hosts = True
|
|
||||||
|
|
||||||
# By default, if a task in a playbook does not include a name: field then
|
|
||||||
# ansible-playbook will construct a header that includes the task's action but
|
|
||||||
# not the task's args. This is a security feature because ansible cannot know
|
|
||||||
# if the *module* considers an argument to be no_log at the time that the
|
|
||||||
# header is printed. If your environment doesn't have a problem securing
|
|
||||||
# stdout from ansible-playbook (or you have manually specified no_log in your
|
|
||||||
# playbook on all of the tasks where you have secret information) then you can
|
|
||||||
# safely set this to True to get more informative messages.
|
|
||||||
#
|
|
||||||
#display_args_to_stdout = False
|
|
||||||
|
|
||||||
# Ansible will raise errors when attempting to dereference
|
|
||||||
# Jinja2 variables that are not set in templates or action lines. Uncomment this line
|
|
||||||
# to change this behavior.
|
|
||||||
#
|
|
||||||
#error_on_undefined_vars = False
|
|
||||||
|
|
||||||
# Ansible may display warnings based on the configuration of the
|
|
||||||
# system running ansible itself. This may include warnings about 3rd party packages or
|
|
||||||
# other conditions that should be resolved if possible.
|
|
||||||
# To disable these warnings, set the following value to False:
|
|
||||||
#
|
|
||||||
#system_warnings = True
|
|
||||||
|
|
||||||
# Ansible may display deprecation warnings for language
|
|
||||||
# features that should no longer be used and will be removed in future versions.
|
|
||||||
# To disable these warnings, set the following value to False:
|
|
||||||
#
|
|
||||||
#deprecation_warnings = True
|
|
||||||
|
|
||||||
# Ansible can optionally warn when usage of the shell and
|
|
||||||
# command module appear to be simplified by using a default Ansible module
|
|
||||||
# instead. These warnings can be silenced by adjusting the following
|
|
||||||
# setting or adding warn=yes or warn=no to the end of the command line
|
|
||||||
# parameter string. This will for example suggest using the git module
|
|
||||||
# instead of shelling out to the git command.
|
|
||||||
#
|
|
||||||
#command_warnings = False
|
|
||||||
|
|
||||||
|
|
||||||
# set plugin path directories here, separate with colons
|
|
||||||
#action_plugins = /usr/share/ansible/plugins/action
|
|
||||||
#become_plugins = /usr/share/ansible/plugins/become
|
|
||||||
#cache_plugins = /usr/share/ansible/plugins/cache
|
|
||||||
#callback_plugins = /usr/share/ansible/plugins/callback
|
|
||||||
#connection_plugins = /usr/share/ansible/plugins/connection
|
|
||||||
#lookup_plugins = /usr/share/ansible/plugins/lookup
|
|
||||||
#inventory_plugins = /usr/share/ansible/plugins/inventory
|
|
||||||
#vars_plugins = /usr/share/ansible/plugins/vars
|
|
||||||
#filter_plugins = /usr/share/ansible/plugins/filter
|
|
||||||
#test_plugins = /usr/share/ansible/plugins/test
|
|
||||||
#terminal_plugins = /usr/share/ansible/plugins/terminal
|
|
||||||
#strategy_plugins = /usr/share/ansible/plugins/strategy
|
|
||||||
|
|
||||||
|
|
||||||
# Ansible will use the 'linear' strategy but you may want to try another one.
|
|
||||||
#strategy = linear
|
|
||||||
|
|
||||||
# By default, callbacks are not loaded for /bin/ansible. Enable this if you
|
|
||||||
# want, for example, a notification or logging callback to also apply to
|
|
||||||
# /bin/ansible runs
|
|
||||||
#
|
|
||||||
#bin_ansible_callbacks = False
|
|
||||||
|
|
||||||
|
|
||||||
# Don't like cows? that's unfortunate.
|
|
||||||
# set to 1 if you don't want cowsay support or export ANSIBLE_NOCOWS=1
|
|
||||||
#nocows = 1
|
|
||||||
|
|
||||||
# Set which cowsay stencil you'd like to use by default. When set to 'random',
|
|
||||||
# a random stencil will be selected for each task. The selection will be filtered
|
|
||||||
# against the `cow_whitelist` option below.
|
|
||||||
#
|
|
||||||
#cow_selection = default
|
|
||||||
#cow_selection = random
|
|
||||||
|
|
||||||
# When using the 'random' option for cowsay, stencils will be restricted to this list.
|
|
||||||
# it should be formatted as a comma-separated list with no spaces between names.
|
|
||||||
# NOTE: line continuations here are for formatting purposes only, as the INI parser
|
|
||||||
# in python does not support them.
|
|
||||||
#
|
|
||||||
#cow_whitelist=bud-frogs,bunny,cheese,daemon,default,dragon,elephant-in-snake,elephant,eyes,\
|
|
||||||
# hellokitty,kitty,luke-koala,meow,milk,moofasa,moose,ren,sheep,small,stegosaurus,\
|
|
||||||
# stimpy,supermilker,three-eyes,turkey,turtle,tux,udder,vader-koala,vader,www
|
|
||||||
|
|
||||||
# Don't like colors either?
|
|
||||||
# set to 1 if you don't want colors, or export ANSIBLE_NOCOLOR=1
|
|
||||||
#
|
|
||||||
#nocolor = 1
|
|
||||||
|
|
||||||
# If set to a persistent type (not 'memory', for example 'redis') fact values
|
|
||||||
# from previous runs in Ansible will be stored. This may be useful when
|
|
||||||
# wanting to use, for example, IP information from one group of servers
|
|
||||||
# without having to talk to them in the same playbook run to get their
|
|
||||||
# current IP information.
|
|
||||||
#
|
|
||||||
#fact_caching = memory
|
|
||||||
|
|
||||||
# This option tells Ansible where to cache facts. The value is plugin dependent.
|
|
||||||
# For the jsonfile plugin, it should be a path to a local directory.
|
|
||||||
# For the redis plugin, the value is a host:port:database triplet: fact_caching_connection = localhost:6379:0
|
|
||||||
#
|
|
||||||
#fact_caching_connection=/tmp
|
|
||||||
|
|
||||||
# retry files
|
|
||||||
# When a playbook fails a .retry file can be created that will be placed in ~/
|
|
||||||
# You can enable this feature by setting retry_files_enabled to True
|
|
||||||
# and you can change the location of the files by setting retry_files_save_path
|
|
||||||
#
|
|
||||||
#retry_files_enabled = False
|
|
||||||
#retry_files_save_path = ~/.ansible-retry
|
|
||||||
|
|
||||||
# prevents logging of task data, off by default
|
|
||||||
#no_log = False
|
|
||||||
|
|
||||||
# prevents logging of tasks, but only on the targets, data is still logged on the master/controller
|
|
||||||
#no_target_syslog = False
|
|
||||||
|
|
||||||
# Controls whether Ansible will raise an error or warning if a task has no
|
|
||||||
# choice but to create world readable temporary files to execute a module on
|
|
||||||
# the remote machine. This option is False by default for security. Users may
|
|
||||||
# turn this on to have behaviour more like Ansible prior to 2.1.x. See
|
|
||||||
# https://docs.ansible.com/ansible/latest/user_guide/become.html#becoming-an-unprivileged-user
|
|
||||||
# for more secure ways to fix this than enabling this option.
|
|
||||||
#
|
|
||||||
#allow_world_readable_tmpfiles = False
|
|
||||||
|
|
||||||
# Controls what compression method is used for new-style ansible modules when
|
|
||||||
# they are sent to the remote system. The compression types depend on having
|
|
||||||
# support compiled into both the controller's python and the client's python.
|
|
||||||
# The names should match with the python Zipfile compression types:
|
|
||||||
# * ZIP_STORED (no compression. available everywhere)
|
|
||||||
# * ZIP_DEFLATED (uses zlib, the default)
|
|
||||||
# These values may be set per host via the ansible_module_compression inventory variable.
|
|
||||||
#
|
|
||||||
#module_compression = 'ZIP_DEFLATED'
|
|
||||||
|
|
||||||
# This controls the cutoff point (in bytes) on --diff for files
|
|
||||||
# set to 0 for unlimited (RAM may suffer!).
|
|
||||||
#
|
|
||||||
#max_diff_size = 104448
|
|
||||||
|
|
||||||
# Controls showing custom stats at the end, off by default
|
|
||||||
#show_custom_stats = False
|
|
||||||
|
|
||||||
# Controls which files to ignore when using a directory as inventory with
|
|
||||||
# possibly multiple sources (both static and dynamic)
|
|
||||||
#
|
|
||||||
#inventory_ignore_extensions = ~, .orig, .bak, .ini, .cfg, .retry, .pyc, .pyo
|
|
||||||
|
|
||||||
# This family of modules use an alternative execution path optimized for network appliances
|
|
||||||
# only update this setting if you know how this works, otherwise it can break module execution
|
|
||||||
#
|
|
||||||
#network_group_modules=eos, nxos, ios, iosxr, junos, vyos
|
|
||||||
|
|
||||||
# When enabled, this option allows lookups (via variables like {{lookup('foo')}} or when used as
|
|
||||||
# a loop with `with_foo`) to return data that is not marked "unsafe". This means the data may contain
|
|
||||||
# jinja2 templating language which will be run through the templating engine.
|
|
||||||
# ENABLING THIS COULD BE A SECURITY RISK
|
|
||||||
#
|
|
||||||
#allow_unsafe_lookups = False
|
|
||||||
|
|
||||||
# set default errors for all plays
|
|
||||||
#any_errors_fatal = False
|
|
||||||
|
|
||||||
|
|
||||||
[inventory]
|
|
||||||
# List of enabled inventory plugins and the order in which they are used.
|
|
||||||
#enable_plugins = host_list, script, auto, yaml, ini, toml
|
|
||||||
|
|
||||||
# Ignore these extensions when parsing a directory as inventory source
|
|
||||||
#ignore_extensions = .pyc, .pyo, .swp, .bak, ~, .rpm, .md, .txt, ~, .orig, .ini, .cfg, .retry
|
|
||||||
|
|
||||||
# ignore files matching these patterns when parsing a directory as inventory source
|
|
||||||
#ignore_patterns=
|
|
||||||
|
|
||||||
# If 'True' unparsed inventory sources become fatal errors, otherwise they are warnings.
|
|
||||||
#unparsed_is_failed = False
|
|
||||||
|
|
||||||
|
|
||||||
[privilege_escalation]
|
|
||||||
#become = False
|
|
||||||
#become_method = sudo
|
|
||||||
#become_ask_pass = False
|
|
||||||
|
|
||||||
|
|
||||||
## Connection Plugins ##
|
|
||||||
|
|
||||||
# Settings for each connection plugin go under a section titled '[[plugin_name]_connection]'
|
|
||||||
# To view available connection plugins, run ansible-doc -t connection -l
|
|
||||||
# To view available options for a connection plugin, run ansible-doc -t connection [plugin_name]
|
|
||||||
# https://docs.ansible.com/ansible/latest/plugins/connection.html
|
|
||||||
|
|
||||||
[paramiko_connection]
|
|
||||||
# uncomment this line to cause the paramiko connection plugin to not record new host
|
|
||||||
# keys encountered. Increases performance on new host additions. Setting works independently of the
|
|
||||||
# host key checking setting above.
|
|
||||||
#record_host_keys=False
|
|
||||||
|
|
||||||
# by default, Ansible requests a pseudo-terminal for commands executed under sudo. Uncomment this
|
|
||||||
# line to disable this behaviour.
|
|
||||||
#pty = False
|
|
||||||
|
|
||||||
# paramiko will default to looking for SSH keys initially when trying to
|
|
||||||
# authenticate to remote devices. This is a problem for some network devices
|
|
||||||
# that close the connection after a key failure. Uncomment this line to
|
|
||||||
# disable the Paramiko look for keys function
|
|
||||||
#look_for_keys = False
|
|
||||||
|
|
||||||
# When using persistent connections with Paramiko, the connection runs in a
|
|
||||||
# background process. If the host doesn't already have a valid SSH key, by
|
|
||||||
# default Ansible will prompt to add the host key. This will cause connections
|
|
||||||
# running in background processes to fail. Uncomment this line to have
|
|
||||||
# Paramiko automatically add host keys.
|
|
||||||
#host_key_auto_add = True
|
|
||||||
|
|
||||||
|
|
||||||
[ssh_connection]
|
|
||||||
# ssh arguments to use
|
|
||||||
# Leaving off ControlPersist will result in poor performance, so use
|
|
||||||
# paramiko on older platforms rather than removing it, -C controls compression use
|
|
||||||
ssh_args = -C -o ControlMaster=auto -o ControlPersist=60s -o ForwardAgent=yes
|
|
||||||
|
|
||||||
# The base directory for the ControlPath sockets.
|
|
||||||
# This is the "%(directory)s" in the control_path option
|
|
||||||
#
|
|
||||||
# Example:
|
|
||||||
# control_path_dir = /tmp/.ansible/cp
|
|
||||||
#control_path_dir = ~/.ansible/cp
|
|
||||||
|
|
||||||
# The path to use for the ControlPath sockets. This defaults to a hashed string of the hostname,
|
|
||||||
# port and username (empty string in the config). The hash mitigates a common problem users
|
|
||||||
# found with long hostnames and the conventional %(directory)s/ansible-ssh-%%h-%%p-%%r format.
|
|
||||||
# In those cases, a "too long for Unix domain socket" ssh error would occur.
|
|
||||||
#
|
|
||||||
# Example:
|
|
||||||
# control_path = %(directory)s/%%C
|
|
||||||
#control_path =
|
|
||||||
|
|
||||||
# Enabling pipelining reduces the number of SSH operations required to
|
|
||||||
# execute a module on the remote server. This can result in a significant
|
|
||||||
# performance improvement when enabled, however when using "sudo:" you must
|
|
||||||
# first disable 'requiretty' in /etc/sudoers
|
|
||||||
#
|
|
||||||
# By default, this option is disabled to preserve compatibility with
|
|
||||||
# sudoers configurations that have requiretty (the default on many distros).
|
|
||||||
#
|
|
||||||
pipelining = True
|
|
||||||
|
|
||||||
# Control the mechanism for transferring files (old)
|
|
||||||
# * smart = try sftp and then try scp [default]
|
|
||||||
# * True = use scp only
|
|
||||||
# * False = use sftp only
|
|
||||||
#scp_if_ssh = smart
|
|
||||||
|
|
||||||
# Control the mechanism for transferring files (new)
|
|
||||||
# If set, this will override the scp_if_ssh option
|
|
||||||
# * sftp = use sftp to transfer files
|
|
||||||
# * scp = use scp to transfer files
|
|
||||||
# * piped = use 'dd' over SSH to transfer files
|
|
||||||
# * smart = try sftp, scp, and piped, in that order [default]
|
|
||||||
#transfer_method = smart
|
|
||||||
|
|
||||||
# If False, sftp will not use batch mode to transfer files. This may cause some
|
|
||||||
# types of file transfer failures impossible to catch however, and should
|
|
||||||
# only be disabled if your sftp version has problems with batch mode
|
|
||||||
#sftp_batch_mode = False
|
|
||||||
|
|
||||||
# The -tt argument is passed to ssh when pipelining is not enabled because sudo
|
|
||||||
# requires a tty by default.
|
|
||||||
#usetty = True
|
|
||||||
|
|
||||||
# Number of times to retry an SSH connection to a host, in case of UNREACHABLE.
|
|
||||||
# For each retry attempt, there is an exponential backoff,
|
|
||||||
# so after the first attempt there is 1s wait, then 2s, 4s etc. up to 30s (max).
|
|
||||||
#retries = 3
|
|
||||||
|
|
||||||
|
|
||||||
[persistent_connection]
|
|
||||||
# Configures the persistent connection timeout value in seconds. This value is
|
|
||||||
# how long the persistent connection will remain idle before it is destroyed.
|
|
||||||
# If the connection doesn't receive a request before the timeout value
|
|
||||||
# expires, the connection is shutdown. The default value is 30 seconds.
|
|
||||||
#connect_timeout = 30
|
|
||||||
|
|
||||||
# The command timeout value defines the amount of time to wait for a command
|
|
||||||
# or RPC call before timing out. The value for the command timeout must
|
|
||||||
# be less than the value of the persistent connection idle timeout (connect_timeout)
|
|
||||||
# The default value is 30 second.
|
|
||||||
#command_timeout = 30
|
|
||||||
|
|
||||||
|
|
||||||
## Become Plugins ##
|
|
||||||
|
|
||||||
# Settings for become plugins go under a section named '[[plugin_name]_become_plugin]'
|
|
||||||
# To view available become plugins, run ansible-doc -t become -l
|
|
||||||
# To view available options for a specific plugin, run ansible-doc -t become [plugin_name]
|
|
||||||
# https://docs.ansible.com/ansible/latest/plugins/become.html
|
|
||||||
|
|
||||||
[sudo_become_plugin]
|
|
||||||
#flags = -H -S -n
|
|
||||||
#user = root
|
|
||||||
|
|
||||||
|
|
||||||
[selinux]
|
|
||||||
# file systems that require special treatment when dealing with security context
|
|
||||||
# the default behaviour that copies the existing context or uses the user default
|
|
||||||
# needs to be changed to use the file system dependent context.
|
|
||||||
#special_context_filesystems=fuse,nfs,vboxsf,ramfs,9p,vfat
|
|
||||||
|
|
||||||
# Set this to True to allow libvirt_lxc connections to work without SELinux.
|
|
||||||
#libvirt_lxc_noseclabel = False
|
|
||||||
|
|
||||||
|
|
||||||
[colors]
|
|
||||||
#highlight = white
|
|
||||||
#verbose = blue
|
|
||||||
#warn = bright purple
|
|
||||||
#error = red
|
|
||||||
#debug = dark gray
|
|
||||||
#deprecate = purple
|
|
||||||
#skip = cyan
|
|
||||||
#unreachable = red
|
|
||||||
#ok = green
|
|
||||||
#changed = yellow
|
|
||||||
#diff_add = green
|
|
||||||
#diff_remove = red
|
|
||||||
#diff_lines = cyan
|
|
||||||
|
|
||||||
|
|
||||||
[diff]
|
|
||||||
# Always print diff when running ( same as always running with -D/--diff )
|
|
||||||
#always = False
|
|
||||||
|
|
||||||
# Set how many context lines to show in diff
|
|
||||||
#context = 3
|
|
||||||
|
|
||||||
[galaxy]
|
|
||||||
# Controls whether the display wheel is shown or not
|
|
||||||
#display_progress=
|
|
||||||
|
|
||||||
# Validate TLS certificates for Galaxy server
|
|
||||||
#ignore_certs = False
|
|
||||||
|
|
||||||
# Role or collection skeleton directory to use as a template for
|
|
||||||
# the init action in ansible-galaxy command
|
|
||||||
#role_skeleton=
|
|
||||||
|
|
||||||
# Patterns of files to ignore inside a Galaxy role or collection
|
|
||||||
# skeleton directory
|
|
||||||
#role_skeleton_ignore="^.git$", "^.*/.git_keep$"
|
|
||||||
|
|
||||||
# Galaxy Server URL
|
|
||||||
#server=https://galaxy.ansible.com
|
|
||||||
|
|
||||||
# A list of Galaxy servers to use when installing a collection.
|
|
||||||
#server_list=automation_hub, release_galaxy
|
|
||||||
|
|
||||||
# Server specific details which are mentioned in server_list
|
|
||||||
#[galaxy_server.automation_hub]
|
|
||||||
#url=https://cloud.redhat.com/api/automation-hub/
|
|
||||||
#auth_url=https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token
|
|
||||||
#token=my_ah_token
|
|
||||||
#
|
|
||||||
#[galaxy_server.release_galaxy]
|
|
||||||
#url=https://galaxy.ansible.com/
|
|
||||||
#token=my_token
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
[ -n "$VAULT_PASSWORD" ] && echo "$VAULT_PASSWORD"
|
|
||||||
|
|
@ -1,56 +0,0 @@
|
||||||
FROM alpine:3.13
|
|
||||||
|
|
||||||
COPY entrypoint.sh /usr/local/bin/entrypoint
|
|
||||||
|
|
||||||
RUN apk add --no-cache --virtual .build-deps \
|
|
||||||
gcc \
|
|
||||||
python3-dev \
|
|
||||||
npm \
|
|
||||||
musl-dev && \
|
|
||||||
apk add --no-cache \
|
|
||||||
py3-pip \
|
|
||||||
python3 \
|
|
||||||
curl \
|
|
||||||
nodejs \
|
|
||||||
git \
|
|
||||||
chromium \
|
|
||||||
youtube-dl \
|
|
||||||
ripgrep \
|
|
||||||
wget && \
|
|
||||||
pip3 install --upgrade pip setuptools && \
|
|
||||||
pip3 install --upgrade archivebox && \
|
|
||||||
npm install -g 'git+https://github.com/ArchiveBox/ArchiveBox.git' && \
|
|
||||||
apk del .build-deps && \
|
|
||||||
addgroup --gid 10001 archivebox && \
|
|
||||||
adduser \
|
|
||||||
--uid 10000 \
|
|
||||||
--home /var/lib/archivebox \
|
|
||||||
--ingroup archivebox \
|
|
||||||
--disabled-password \
|
|
||||||
--shell /sbin/nologin \
|
|
||||||
archivebox && \
|
|
||||||
mkdir -p /data && \
|
|
||||||
mkdir -p /var/lib/archivebox/chromium_data/Default && \
|
|
||||||
touch /var/lib/archivebox/cookies.txt && \
|
|
||||||
chown -R archivebox /data /var/lib/archivebox && \
|
|
||||||
chmod +x /usr/local/bin/entrypoint
|
|
||||||
|
|
||||||
ENV IN_DOCKER=True \
|
|
||||||
CHROME_SANDBOX=False \
|
|
||||||
CHROME_BINARY="/usr/bin/chromium-browser" \
|
|
||||||
CHROME_USER_DATA_DIR="/var/lib/archivebox/chromium_data" \
|
|
||||||
COOKIES_FILE="/var/lib/archivebox/cookies.txt" \
|
|
||||||
USE_SINGLEFILE=True \
|
|
||||||
SINGLEFILE_BINARY="/usr/bin/single-file" \
|
|
||||||
USE_READABILITY=True \
|
|
||||||
READABILITY_BINARY="/usr/bin/readability-extractor" \
|
|
||||||
USE_MERCURY=True \
|
|
||||||
MERCURY_BINARY="/usr/bin/mercury-parser"
|
|
||||||
|
|
||||||
VOLUME /data
|
|
||||||
EXPOSE 8000
|
|
||||||
|
|
||||||
WORKDIR /data
|
|
||||||
USER archivebox
|
|
||||||
ENTRYPOINT ["/usr/local/bin/entrypoint"]
|
|
||||||
CMD ["server", "0.0.0.0:8000"]
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = archivebox
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
archivebox init
|
|
||||||
|
|
||||||
exec archivebox "$@"
|
|
||||||
|
|
@ -1,6 +0,0 @@
|
||||||
FROM alpine:3.11
|
|
||||||
|
|
||||||
RUN apk --no-cache add squashfs-tools
|
|
||||||
COPY make_backup.sh /bin/make_backup
|
|
||||||
RUN chmod +x /bin/make_backup
|
|
||||||
CMD "/bin/make_backup"
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
IMG_NAME = backup
|
|
||||||
REGISTRY=registry.monotremata.xyz:443
|
|
||||||
|
|
||||||
IMG=$(REGISTRY)/$(IMG_NAME)
|
|
||||||
|
|
||||||
.PHONY: build build-nc tag push
|
|
||||||
|
|
||||||
build: Dockerfile make_backup.sh
|
|
||||||
docker build -t $(IMG) .
|
|
||||||
|
|
||||||
push: build
|
|
||||||
docker image push $(IMG)
|
|
||||||
|
|
||||||
build-nc: Dockerfile docker-entrypoint.sh sshd_config
|
|
||||||
docker build --no-cache -t $(IMG)
|
|
||||||
|
|
@ -1,32 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
if [ -n "$EXCLUDE" ]; then
|
|
||||||
dirs=$( \
|
|
||||||
echo "${EXCLUDE}" | \
|
|
||||||
tr " " "\n" | \
|
|
||||||
awk -F' ' '{print "/src/"$0}' | \
|
|
||||||
tr "\n" " " \
|
|
||||||
)
|
|
||||||
exclude_opt="-e ${dirs}"
|
|
||||||
else
|
|
||||||
exclude_opt=""
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo running:
|
|
||||||
echo mksquashfs \
|
|
||||||
/src \
|
|
||||||
"/dest/$(date +%F).sfs" \
|
|
||||||
-comp gzip \
|
|
||||||
-xattrs \
|
|
||||||
-progress \
|
|
||||||
-mem 512M \
|
|
||||||
${exclude_opt}
|
|
||||||
|
|
||||||
mksquashfs \
|
|
||||||
/src \
|
|
||||||
"/dest/$(date +%F).sfs" \
|
|
||||||
-comp gzip \
|
|
||||||
-xattrs \
|
|
||||||
-progress \
|
|
||||||
-mem 512M \
|
|
||||||
${exclude_opt}
|
|
||||||
|
|
@ -1,34 +0,0 @@
|
||||||
# buku
|
|
||||||
|
|
||||||
FROM python:3.8-alpine3.11
|
|
||||||
|
|
||||||
ENV BUKUSERVER_PORT=5001
|
|
||||||
|
|
||||||
RUN apk add --no-cache --virtual .build-deps \
|
|
||||||
gcc \
|
|
||||||
openssl-dev \
|
|
||||||
musl-dev \
|
|
||||||
libffi-dev \
|
|
||||||
git && \
|
|
||||||
mkdir -p /usr/local/src && \
|
|
||||||
git clone https://github.com/jarun/buku /usr/local/src/buku && \
|
|
||||||
pip install -U --no-cache-dir \
|
|
||||||
pip \
|
|
||||||
gunicorn \
|
|
||||||
"/usr/local/src/buku[server]" && \
|
|
||||||
apk del .build-deps && \
|
|
||||||
rm -r /usr/local/src
|
|
||||||
|
|
||||||
RUN adduser -u 1006 -h /var/lib/buku -D buku && \
|
|
||||||
adduser -u 1001 -D syncthing && addgroup syncthing buku && \
|
|
||||||
mkdir -p /var/lib/buku/.local/share/buku && \
|
|
||||||
chown -R buku:buku /var/lib/buku && \
|
|
||||||
chown -R syncthing:buku /var/lib/buku/.local/share/buku && \
|
|
||||||
chmod '2775' /var/lib/buku/.local/share/buku && \
|
|
||||||
touch /var/lib/buku/.local/share/buku/bookmarks.db && chmod '664' /var/lib/buku/.local/share/buku/bookmarks.db
|
|
||||||
|
|
||||||
VOLUME /var/lib/buku/.local/share/buku
|
|
||||||
EXPOSE ${BUKUSERVER_PORT}
|
|
||||||
|
|
||||||
USER buku
|
|
||||||
ENTRYPOINT gunicorn --bind "0.0.0.0:${BUKUSERVER_PORT}" "bukuserver.server:create_app()"
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = buku
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,19 +0,0 @@
|
||||||
FROM alpine:3.12
|
|
||||||
|
|
||||||
ENV VERSION 3.9.1
|
|
||||||
ENV DL_URL https://github.com/ddclient/ddclient/archive/v${VERSION}.tar.gz
|
|
||||||
#ENV PERL_MM_USE_DEFAULT 1
|
|
||||||
|
|
||||||
RUN apk add --no-cache \
|
|
||||||
curl make wget \
|
|
||||||
perl perl-utils perl-test-taint perl-netaddr-ip perl-net-ip \
|
|
||||||
perl-yaml perl-log-log4perl perl-io-socket-ssl && \
|
|
||||||
curl -L http://cpanmin.us | perl - Data::Validate::IP && \
|
|
||||||
tmp=$(mktemp -d) && \
|
|
||||||
curl -L "${DL_URL}" --output "${tmp}/ddclient.tar.gz" && \
|
|
||||||
tar -xzf "${tmp}/ddclient.tar.gz" -C "${tmp}" && \
|
|
||||||
cp "${tmp}/ddclient-${VERSION}/ddclient" /usr/bin/ddclient && \
|
|
||||||
rm -r "${tmp}" && \
|
|
||||||
mkdir -p /etc/ddclient /var/cache/ddclient
|
|
||||||
|
|
||||||
CMD ["/usr/bin/ddclient", "-foreground"]
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = ddclient
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,33 +0,0 @@
|
||||||
FROM golang:1.16.3-alpine3.13 AS builder
|
|
||||||
|
|
||||||
RUN apk --no-cache add git build-base && \
|
|
||||||
mkdir -p /build && \
|
|
||||||
git clone https://github.com/matrix-org/dendrite /build/dendrite && \
|
|
||||||
mkdir -p /build/bin && \
|
|
||||||
cd /build/dendrite && \
|
|
||||||
go build -trimpath -o /build/bin/ ./cmd/dendrite-monolith-server && \
|
|
||||||
go build -trimpath -o /build/bin/ ./cmd/goose && \
|
|
||||||
go build -trimpath -o /build/bin/ ./cmd/create-account && \
|
|
||||||
go build -trimpath -o /build/bin/ ./cmd/generate-keys
|
|
||||||
|
|
||||||
FROM alpine:3.13
|
|
||||||
|
|
||||||
COPY --from=builder /build/bin/* /usr/local/bin/
|
|
||||||
COPY entrypoint.sh /usr/local/bin/entrypoint
|
|
||||||
|
|
||||||
RUN chmod +x /usr/local/bin/entrypoint && \
|
|
||||||
addgroup --gid 10001 dendrite && \
|
|
||||||
adduser \
|
|
||||||
--uid 10000 \
|
|
||||||
--home /var/lib/dendrite \
|
|
||||||
--ingroup dendrite \
|
|
||||||
--disabled-password \
|
|
||||||
--shell /sbin/nologin \
|
|
||||||
dendrite && \
|
|
||||||
mkdir -p /var/log/dendrite /var/dendrite/media && \
|
|
||||||
chown -R dendrite:dendrite /var/log/dendrite /var/dendrite
|
|
||||||
|
|
||||||
WORKDIR /etc/dendrite
|
|
||||||
USER dendrite
|
|
||||||
|
|
||||||
ENTRYPOINT ["/usr/local/bin/entrypoint"]
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = dendrite
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile entrypoint.sh
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile entrypoint.sh
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
sleep 5
|
|
||||||
exec /usr/local/bin/dendrite-monolith-server -config /etc/dendrite/dendrite.yaml "$@"
|
|
||||||
|
|
@ -1,22 +0,0 @@
|
||||||
FROM alpine:3.13
|
|
||||||
|
|
||||||
RUN apk add --no-cache --virtual .build-deps cargo && \
|
|
||||||
apk add --no-cache libgcc && \
|
|
||||||
cargo install filite && \
|
|
||||||
apk del .build-deps && \
|
|
||||||
mv /root/.cargo/bin/filite /usr/local/bin/filite && \
|
|
||||||
rm -r /root/.cargo && \
|
|
||||||
addgroup \
|
|
||||||
--gid 10001 \
|
|
||||||
filite && \
|
|
||||||
adduser \
|
|
||||||
--uid 10000 \
|
|
||||||
--home /var/lib/filite \
|
|
||||||
--ingroup filite \
|
|
||||||
--disabled-password \
|
|
||||||
--shell /sbin/nologin \
|
|
||||||
filite
|
|
||||||
|
|
||||||
WORKDIR /var/lib/filite
|
|
||||||
USER filite
|
|
||||||
ENTRYPOINT ["/usr/local/bin/filite"]
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = filite
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,12 +0,0 @@
|
||||||
FROM alpine:3.12
|
|
||||||
|
|
||||||
RUN apk --no-cache add \
|
|
||||||
fcgiwrap \
|
|
||||||
spawn-fcgi \
|
|
||||||
git-daemon
|
|
||||||
|
|
||||||
COPY entrypoint /usr/local/bin/entrypoint
|
|
||||||
RUN chmod +x /usr/local/bin/entrypoint
|
|
||||||
|
|
||||||
ENTRYPOINT ["/usr/local/bin/entrypoint"]
|
|
||||||
CMD "daemon"
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = git-daemon
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile entrypoint
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile entrypoint
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
case $1 in
|
|
||||||
daemon)
|
|
||||||
[ -n "$REPOS_DIR" ] && [ -d "$REPOS_DIR" ] && \
|
|
||||||
exec git daemon \
|
|
||||||
--reuseaddr \
|
|
||||||
--base-path=/var/lib/git/repositories \
|
|
||||||
/var/lib/git/repositories
|
|
||||||
;;
|
|
||||||
fcgi)
|
|
||||||
FCGI_PORT=${FCGI_PORT:-9000}
|
|
||||||
exec spawn-fcgi -p "${FCGI_PORT}" -n /usr/bin/fcgiwrap
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
exec "$@"
|
|
||||||
esac
|
|
||||||
|
|
@ -1,41 +0,0 @@
|
||||||
FROM alpine:3.13
|
|
||||||
|
|
||||||
RUN apk add --no-cache \
|
|
||||||
gitolite \
|
|
||||||
libgit2 \
|
|
||||||
openssh-server \
|
|
||||||
python3 \
|
|
||||||
su-exec && \
|
|
||||||
apk add --no-cache --virtual .build-deps \
|
|
||||||
gcc \
|
|
||||||
libffi-dev \
|
|
||||||
libgit2-dev \
|
|
||||||
musl-dev \
|
|
||||||
py3-pip \
|
|
||||||
python3-dev && \
|
|
||||||
git clone https://github.com/gthar/pystagit.git /tmp/pystagit && \
|
|
||||||
pip install /tmp/pystagit && \
|
|
||||||
rm -r /tmp/pystagit && \
|
|
||||||
apk del .build-deps && \
|
|
||||||
passwd -u git && \
|
|
||||||
mkdir -p /opt/gitolite-local/hooks/common
|
|
||||||
|
|
||||||
COPY sshd_config /etc/ssh/sshd_config
|
|
||||||
COPY gitolite.rc /var/lib/git/.gitolite.rc
|
|
||||||
|
|
||||||
COPY bin/. /usr/local/bin/
|
|
||||||
COPY local_code/. /opt/gitolite-local/
|
|
||||||
|
|
||||||
RUN chown -R git:git /var/lib/git && \
|
|
||||||
chmod +x \
|
|
||||||
/usr/local/bin/entrypoint \
|
|
||||||
/usr/local/bin/build-pystagit-index \
|
|
||||||
/usr/local/bin/build-pystagit-repo \
|
|
||||||
/usr/local/bin/build-pystagit-repos \
|
|
||||||
/opt/gitolite-local/hooks/common/post-receive \
|
|
||||||
/opt/gitolite-local/triggers/build-pystagit-index \
|
|
||||||
/opt/gitolite-local/triggers/build-pystagit-repo \
|
|
||||||
/opt/gitolite-local/triggers/build-pystagit-repos
|
|
||||||
|
|
||||||
ENTRYPOINT ["/usr/local/bin/entrypoint"]
|
|
||||||
CMD ["/usr/sbin/sshd", "-D", "-e"]
|
|
||||||
|
|
@ -1,16 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = gitolite-pystagit
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
BIN=$(wildcard bin/*)
|
|
||||||
HOOKS=$(wildcard local_code/hooks/*)
|
|
||||||
TRIGGERS=$(wildcard local_code/triggers/*)
|
|
||||||
|
|
||||||
DEPS=Dockerfile $(BIN) $(HOOKS) $(TRIGGERS) gitolite.rc sshd_config
|
|
||||||
|
|
||||||
build: $(DEPS)
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: $(DEPS)
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
PYSTAGIT_BASE="${PYSTAGIT_BASE:-/var/lib/git/pystagit}"
|
|
||||||
GL_REPO_BASE="${GL_REPO_BASE:-/var/lib/git/repositories}"
|
|
||||||
|
|
||||||
mk_index () {
|
|
||||||
gitolite list-phy-repos | \
|
|
||||||
gitolite access % pystagit R any | \
|
|
||||||
awk \
|
|
||||||
-F'\t' \
|
|
||||||
-v d="${GL_REPO_BASE}" \
|
|
||||||
'{if ($3 !~ "DENIED") print d"/"$1".git"}' | \
|
|
||||||
xargs -r /usr/bin/pystagit-index > \
|
|
||||||
"${1}/index.html" && \
|
|
||||||
chmod 644 "${1}/index.html"
|
|
||||||
}
|
|
||||||
|
|
||||||
# shellcheck disable=SC1091
|
|
||||||
[ -f /etc/env ] && . /etc/env
|
|
||||||
|
|
||||||
if [ -n "${SITES}" ]; then
|
|
||||||
for site in ${SITES}; do
|
|
||||||
mk_index "${PYSTAGIT_BASE}-${site}"
|
|
||||||
done
|
|
||||||
else
|
|
||||||
mk_index "${PYSTAGIT_BASE}"
|
|
||||||
fi
|
|
||||||
|
|
@ -1,75 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
[ -z "${1}" ] && exit
|
|
||||||
|
|
||||||
PYSTAGIT_BASE="${PYSTAGIT_BASE:-/var/lib/git/pystagit}"
|
|
||||||
GL_REPO_BASE="${GL_REPO_BASE:-/var/lib/git/repositories}"
|
|
||||||
|
|
||||||
# shellcheck disable=SC1091
|
|
||||||
[ -f /etc/env ] && . /etc/env
|
|
||||||
|
|
||||||
run_pystagit () {
|
|
||||||
repo_dir="${GL_REPO_BASE}/${1}.git"
|
|
||||||
if [ -n "${2}" ]; then
|
|
||||||
out_dir="${PYSTAGIT_BASE}-${2}/${1}"
|
|
||||||
else
|
|
||||||
out_dir="${PYSTAGIT_BASE}/${1}"
|
|
||||||
fi
|
|
||||||
mkdir -p "${out_dir}" && \
|
|
||||||
chmod 755 "${out_dir}" && \
|
|
||||||
cd "${out_dir}" && \
|
|
||||||
/usr/bin/pystagit "${repo_dir}" && \
|
|
||||||
if [ -f about.html ]; then
|
|
||||||
ln -sf about.html index.html
|
|
||||||
else
|
|
||||||
ln -sf log.html index.html
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
set_url () {
|
|
||||||
url_file="${GL_REPO_BASE}/${1}.git/url"
|
|
||||||
if [ -n "${2}" ]; then
|
|
||||||
echo "${2}/${1}" > "${url_file}"
|
|
||||||
else
|
|
||||||
echo "url not set"
|
|
||||||
rm -f "${url_file}"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
set_owner () {
|
|
||||||
owner_file="${GL_REPO_BASE}/${1}.git/owner"
|
|
||||||
if owner=$(gitolite git-config "${1}" gitweb.owner); then
|
|
||||||
echo "setting owner for '${1}'"
|
|
||||||
echo "${owner}" > "${owner_file}"
|
|
||||||
else
|
|
||||||
echo "usetting owner for '${1}'"
|
|
||||||
rm -f "${owner_file}"
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
echo "running pystagit for '${1}'"
|
|
||||||
|
|
||||||
if gitolite access "${1}" pystagit R any; then
|
|
||||||
|
|
||||||
set_owner "${1}"
|
|
||||||
|
|
||||||
if [ -n "${SITES}" ]; then
|
|
||||||
_i=1
|
|
||||||
for site in ${SITES}; do
|
|
||||||
url=$(printf "%s" "${URLS}" | cut -d " " -f "$_i")
|
|
||||||
set_url "${1}" "${url}"
|
|
||||||
run_pystagit "${1}" "${site}"
|
|
||||||
_i=$((_i+1))
|
|
||||||
done
|
|
||||||
|
|
||||||
else
|
|
||||||
url=$(printf "%s" "${URLS}" | cut -d " " -f 1)
|
|
||||||
set_url "${1}" "${url}"
|
|
||||||
run_pystagit "${1}" ""
|
|
||||||
fi
|
|
||||||
|
|
||||||
else
|
|
||||||
rm -rf "${PYSTAGIT_BASE}"*"/${1}.git"
|
|
||||||
fi
|
|
||||||
|
|
@ -1,7 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
for repo in $(gitolite list-phy-repos); do
|
|
||||||
/usr/local/bin/build-pystagit-repo "${repo}"
|
|
||||||
done
|
|
||||||
|
|
@ -1,49 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
su-exec git env | awk -F"=" '{ print $1"=\""$2"\"" }' > /etc/env
|
|
||||||
|
|
||||||
for algorithm in rsa dsa ecdsa ed25519; do
|
|
||||||
keyfile="/etc/ssh/keys/ssh_host_${algorithm}_key"
|
|
||||||
[ -f "$keyfile" ] || \
|
|
||||||
ssh-keygen -q -N '' -f "$keyfile" -t "$algorithm"
|
|
||||||
done
|
|
||||||
|
|
||||||
BASE_DIR=/var/lib/git
|
|
||||||
|
|
||||||
echo "fixing permissions..."
|
|
||||||
|
|
||||||
mkdir -p \
|
|
||||||
"${BASE_DIR}/.gitolite/conf" \
|
|
||||||
"${BASE_DIR}/.gitolite/hooks" \
|
|
||||||
"${BASE_DIR}/.gitolite/keydir" \
|
|
||||||
"${BASE_DIR}/.gitolite/logs"
|
|
||||||
chown -R git:git \
|
|
||||||
"${BASE_DIR}/.gitolite" \
|
|
||||||
"${BASE_DIR}/.ssh" \
|
|
||||||
"${BASE_DIR}/pystagit"* \
|
|
||||||
"${BASE_DIR}/repositories"
|
|
||||||
|
|
||||||
if [ ! -f "${BASE_DIR}/.ssh/authorized_keys" ]; then
|
|
||||||
if [ -z "$SSH_KEY" ]; then
|
|
||||||
echo "SSH_KEY needs to be set"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
SSH_KEY_NAME=${SSH_KEY_NAME:-admin}
|
|
||||||
echo "$SSH_KEY" > "/tmp/${SSH_KEY_NAME}.pub"
|
|
||||||
echo "gitolite's initial setup"
|
|
||||||
su-exec git gitolite setup -pk "/tmp/${SSH_KEY_NAME}.pub"
|
|
||||||
rm "/tmp/${SSH_KEY_NAME}.pub"
|
|
||||||
else
|
|
||||||
# stuff is already set up, but check the setup anyway
|
|
||||||
echo "gitolite's sanity setup"
|
|
||||||
su-exec git gitolite setup
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "building static site"
|
|
||||||
su-exec git build-pystagit-repos
|
|
||||||
su-exec git build-pystagit-index
|
|
||||||
|
|
||||||
echo "gitolite is ready,starting sshd"
|
|
||||||
exec "$@"
|
|
||||||
|
|
@ -1,214 +0,0 @@
|
||||||
# configuration variables for gitolite
|
|
||||||
|
|
||||||
# This file is in perl syntax. But you do NOT need to know perl to edit it --
|
|
||||||
# just mind the commas, use single quotes unless you know what you're doing,
|
|
||||||
# and make sure the brackets and braces stay matched up!
|
|
||||||
|
|
||||||
# (Tip: perl allows a comma after the last item in a list also!)
|
|
||||||
|
|
||||||
# HELP for commands can be had by running the command with "-h".
|
|
||||||
|
|
||||||
# HELP for all the other FEATURES can be found in the documentation (look for
|
|
||||||
# "list of non-core programs shipped with gitolite" in the master index) or
|
|
||||||
# directly in the corresponding source file.
|
|
||||||
|
|
||||||
%RC = (
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
# default umask gives you perms of '0700'; see the rc file docs for
|
|
||||||
# how/why you might change this
|
|
||||||
UMASK => 0077,
|
|
||||||
|
|
||||||
# look for "git-config" in the documentation
|
|
||||||
GIT_CONFIG_KEYS => 'gitweb.description gitweb.owner',
|
|
||||||
|
|
||||||
# comment out if you don't need all the extra detail in the logfile
|
|
||||||
LOG_EXTRA => 1,
|
|
||||||
# logging options
|
|
||||||
# 1. leave this section as is for 'normal' gitolite logging (default)
|
|
||||||
# 2. uncomment this line to log ONLY to syslog:
|
|
||||||
# LOG_DEST => 'syslog',
|
|
||||||
# 3. uncomment this line to log to syslog and the normal gitolite log:
|
|
||||||
# LOG_DEST => 'syslog,normal',
|
|
||||||
# 4. prefixing "repo-log," to any of the above will **also** log just the
|
|
||||||
# update records to "gl-log" in the bare repo directory:
|
|
||||||
# LOG_DEST => 'repo-log,normal',
|
|
||||||
# LOG_DEST => 'repo-log,syslog',
|
|
||||||
# LOG_DEST => 'repo-log,syslog,normal',
|
|
||||||
# syslog 'facility': defaults to 'local0', uncomment if needed. For example:
|
|
||||||
# LOG_FACILITY => 'local4',
|
|
||||||
|
|
||||||
# roles. add more roles (like MANAGER, TESTER, ...) here.
|
|
||||||
# WARNING: if you make changes to this hash, you MUST run 'gitolite
|
|
||||||
# compile' afterward, and possibly also 'gitolite trigger POST_COMPILE'
|
|
||||||
ROLES => {
|
|
||||||
READERS => 1,
|
|
||||||
WRITERS => 1,
|
|
||||||
},
|
|
||||||
|
|
||||||
# enable caching (currently only Redis). PLEASE RTFM BEFORE USING!!!
|
|
||||||
# CACHE => 'Redis',
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
# rc variables used by various features
|
|
||||||
|
|
||||||
# the 'info' command prints this as additional info, if it is set
|
|
||||||
# SITE_INFO => 'Please see http://blahblah/gitolite for more help',
|
|
||||||
|
|
||||||
# the CpuTime feature uses these
|
|
||||||
# display user, system, and elapsed times to user after each git operation
|
|
||||||
# DISPLAY_CPU_TIME => 1,
|
|
||||||
# display a warning if total CPU times (u, s, cu, cs) crosses this limit
|
|
||||||
# CPU_TIME_WARN_LIMIT => 0.1,
|
|
||||||
|
|
||||||
# the Mirroring feature needs this
|
|
||||||
# HOSTNAME => "foo",
|
|
||||||
|
|
||||||
# TTL for redis cache; PLEASE SEE DOCUMENTATION BEFORE UNCOMMENTING!
|
|
||||||
# CACHE_TTL => 600,
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
# suggested locations for site-local gitolite code (see cust.html)
|
|
||||||
|
|
||||||
# this one is managed directly on the server
|
|
||||||
LOCAL_CODE => "/opt/gitolite-local",
|
|
||||||
#LOCAL_CODE => "$ENV{HOME}/local",
|
|
||||||
|
|
||||||
# or you can use this, which lets you put everything in a subdirectory
|
|
||||||
# called "local" in your gitolite-admin repo. For a SECURITY WARNING
|
|
||||||
# on this, see http://gitolite.com/gitolite/non-core.html#pushcode
|
|
||||||
# LOCAL_CODE => "$rc{GL_ADMIN_BASE}/local",
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
#POST_COMPILE => [],
|
|
||||||
POST_COMPILE => [
|
|
||||||
'build-pystagit-repos',
|
|
||||||
'build-pystagit-index'
|
|
||||||
],
|
|
||||||
|
|
||||||
POST_CREATE => [
|
|
||||||
'build-pystagit-repo',
|
|
||||||
'build-pystagit-index'
|
|
||||||
],
|
|
||||||
|
|
||||||
# List of commands and features to enable
|
|
||||||
ENABLE => [
|
|
||||||
|
|
||||||
# COMMANDS
|
|
||||||
|
|
||||||
# These are the commands enabled by default
|
|
||||||
'help',
|
|
||||||
'desc',
|
|
||||||
'info',
|
|
||||||
'perms',
|
|
||||||
'writable',
|
|
||||||
|
|
||||||
# Uncomment or add new commands here.
|
|
||||||
# 'create',
|
|
||||||
# 'fork',
|
|
||||||
# 'mirror',
|
|
||||||
# 'readme',
|
|
||||||
# 'sskm',
|
|
||||||
# 'D',
|
|
||||||
|
|
||||||
# These FEATURES are enabled by default.
|
|
||||||
|
|
||||||
# essential (unless you're using smart-http mode)
|
|
||||||
'ssh-authkeys',
|
|
||||||
|
|
||||||
# creates git-config entries from gitolite.conf file entries like 'config foo.bar = baz'
|
|
||||||
'git-config',
|
|
||||||
|
|
||||||
# creates git-daemon-export-ok files; if you don't use git-daemon, comment this out
|
|
||||||
'daemon',
|
|
||||||
|
|
||||||
# creates projects.list file; if you don't use gitweb, comment this out
|
|
||||||
#'gitweb',
|
|
||||||
|
|
||||||
# These FEATURES are disabled by default; uncomment to enable. If you
|
|
||||||
# need to add new ones, ask on the mailing list :-)
|
|
||||||
|
|
||||||
# user-visible behaviour
|
|
||||||
|
|
||||||
# prevent wild repos auto-create on fetch/clone
|
|
||||||
# 'no-create-on-read',
|
|
||||||
# no auto-create at all (don't forget to enable the 'create' command!)
|
|
||||||
# 'no-auto-create',
|
|
||||||
|
|
||||||
# access a repo by another (possibly legacy) name
|
|
||||||
# 'Alias',
|
|
||||||
|
|
||||||
# give some users direct shell access. See documentation in
|
|
||||||
# sts.html for details on the following two choices.
|
|
||||||
# "Shell $ENV{HOME}/.gitolite.shell-users",
|
|
||||||
# 'Shell alice bob',
|
|
||||||
|
|
||||||
# set default roles from lines like 'option default.roles-1 = ...', etc.
|
|
||||||
# 'set-default-roles',
|
|
||||||
|
|
||||||
# show more detailed messages on deny
|
|
||||||
# 'expand-deny-messages',
|
|
||||||
|
|
||||||
# show a message of the day
|
|
||||||
# 'Motd',
|
|
||||||
|
|
||||||
# system admin stuff
|
|
||||||
|
|
||||||
# enable mirroring (don't forget to set the HOSTNAME too!)
|
|
||||||
# 'Mirroring',
|
|
||||||
|
|
||||||
# allow people to submit pub files with more than one key in them
|
|
||||||
# 'ssh-authkeys-split',
|
|
||||||
|
|
||||||
# selective read control hack
|
|
||||||
# 'partial-copy',
|
|
||||||
|
|
||||||
# manage local, gitolite-controlled, copies of read-only upstream repos
|
|
||||||
# 'upstream',
|
|
||||||
|
|
||||||
# updates 'description' file instead of 'gitweb.description' config item
|
|
||||||
'cgit',
|
|
||||||
|
|
||||||
# allow repo-specific hooks to be added
|
|
||||||
#'repo-specific-hooks',
|
|
||||||
|
|
||||||
# performance, logging, monitoring...
|
|
||||||
|
|
||||||
# be nice
|
|
||||||
# 'renice 10',
|
|
||||||
|
|
||||||
# log CPU times (user, system, cumulative user, cumulative system)
|
|
||||||
# 'CpuTime',
|
|
||||||
|
|
||||||
|
|
||||||
# syntactic_sugar for gitolite.conf and included files
|
|
||||||
|
|
||||||
# allow backslash-escaped continuation lines in gitolite.conf
|
|
||||||
# 'continuation-lines',
|
|
||||||
|
|
||||||
# create implicit user groups from directory names in keydir/
|
|
||||||
# 'keysubdirs-as-groups',
|
|
||||||
|
|
||||||
# allow simple line-oriented macros
|
|
||||||
'macros',
|
|
||||||
|
|
||||||
# Kindergarten mode
|
|
||||||
|
|
||||||
# disallow various things that sensible people shouldn't be doing anyway
|
|
||||||
# 'Kindergarten',
|
|
||||||
],
|
|
||||||
|
|
||||||
);
|
|
||||||
|
|
||||||
# ------------------------------------------------------------------------------
|
|
||||||
# per perl rules, this should be the last line in such a file:
|
|
||||||
1;
|
|
||||||
|
|
||||||
# Local variables:
|
|
||||||
# mode: perl
|
|
||||||
# End:
|
|
||||||
# vi: ft=perl
|
|
||||||
|
|
@ -1,7 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
[ -n "${GL_REPO}" ] && \
|
|
||||||
/usr/local/bin/build-pystagit-repo "${GL_REPO}" &&
|
|
||||||
/usr/local/bin/build-pystagit-index
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
/usr/local/bin/build-pystagit-index
|
|
||||||
|
|
@ -1,5 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
[ -n "$2" ] && /usr/local/bin/build-pystagit-repo "$2"
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
/usr/local/bin/build-pystagit-repos
|
|
||||||
|
|
@ -1,23 +0,0 @@
|
||||||
Port 22
|
|
||||||
Protocol 2
|
|
||||||
|
|
||||||
PermitRootLogin no
|
|
||||||
AllowUsers git
|
|
||||||
|
|
||||||
PasswordAuthentication no
|
|
||||||
PermitEmptyPasswords no
|
|
||||||
PubkeyAuthentication yes
|
|
||||||
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_rsa_key
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_dsa_key
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_ecdsa_key
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_ed25519_key
|
|
||||||
|
|
||||||
X11Forwarding no
|
|
||||||
PrintMotd no
|
|
||||||
|
|
||||||
ClientAliveInterval 300
|
|
||||||
ClientAliveCountMax 2
|
|
||||||
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group18-sha512
|
|
||||||
MACs umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
|
|
||||||
HostKeyAlgorithms ssh-rsa,rsa-sha2-256,rsa-sha2-512
|
|
||||||
|
|
@ -1,36 +0,0 @@
|
||||||
FROM alpine:3.14
|
|
||||||
|
|
||||||
RUN apk add --update --no-cache \
|
|
||||||
docker-compose \
|
|
||||||
docker \
|
|
||||||
git \
|
|
||||||
openssh-server \
|
|
||||||
perl \
|
|
||||||
shadow \
|
|
||||||
su-exec
|
|
||||||
|
|
||||||
RUN adduser -h /var/lib/git -D git && \
|
|
||||||
adduser git docker && \
|
|
||||||
mkdir -p /var/lib/git/local/hooks && \
|
|
||||||
chown -R git:git /var/lib/git && \
|
|
||||||
usermod -p '*' git && \
|
|
||||||
passwd -u git
|
|
||||||
|
|
||||||
RUN mkdir -p /usr/local/src && \
|
|
||||||
git clone https://github.com/sitaramc/gitolite /usr/local/src/gitolite && \
|
|
||||||
/usr/local/src/gitolite/install -ln /usr/local/bin
|
|
||||||
|
|
||||||
RUN mkdir -p /opt/docker-services
|
|
||||||
|
|
||||||
COPY sshd_config /etc/ssh/sshd_config
|
|
||||||
|
|
||||||
VOLUME /etc/ssh/keys
|
|
||||||
VOLUME /var/lib/git
|
|
||||||
|
|
||||||
COPY docker-entrypoint.sh /entrypoint
|
|
||||||
RUN chmod +x /entrypoint
|
|
||||||
ENTRYPOINT ["/entrypoint"]
|
|
||||||
|
|
||||||
EXPOSE 22
|
|
||||||
|
|
||||||
CMD ["/usr/sbin/sshd", "-D", "-e"]
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
IMG_NAME = gitolite
|
|
||||||
REGISTRY=registry.monotremata.xyz:443
|
|
||||||
IMG=$(REGISTRY)/$(IMG_NAME)
|
|
||||||
|
|
||||||
.PHONY: build build-nc push
|
|
||||||
|
|
||||||
build: Dockerfile docker-entrypoint.sh sshd_config
|
|
||||||
docker build -t $(IMG) .
|
|
||||||
|
|
||||||
push: build
|
|
||||||
docker image push $(IMG)
|
|
||||||
|
|
||||||
build-nc: Dockerfile docker-entrypoint.sh sshd_config
|
|
||||||
docker build --no-cache -t $(IMG) .
|
|
||||||
|
|
@ -1,41 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -xe
|
|
||||||
|
|
||||||
[ -n "$DOCKER_GID" ] && groupmod -g "${DOCKER_GID}" docker
|
|
||||||
|
|
||||||
for algorithm in rsa dsa ecdsa ed25519
|
|
||||||
do
|
|
||||||
keyfile="/etc/ssh/keys/ssh_host_${algorithm}_key"
|
|
||||||
[ -f "$keyfile" ] || ssh-keygen -q -N '' -f "$keyfile" -t "$algorithm"
|
|
||||||
done
|
|
||||||
|
|
||||||
BASE_DIR=/var/lib/git
|
|
||||||
|
|
||||||
echo "fixing gitolite's permissions..."
|
|
||||||
find "${BASE_DIR}" \
|
|
||||||
-not -path "${BASE_DIR}/.gitolite.rc" \
|
|
||||||
-and -not -path "${BASE_DIR}/local/hooks/repo-specific*" \
|
|
||||||
-exec chown git:git {} \;
|
|
||||||
|
|
||||||
if [ ! -f "${BASE_DIR}/.ssh/authorized_keys" ]
|
|
||||||
then
|
|
||||||
if [ -n "$SSH_KEY" ]
|
|
||||||
then
|
|
||||||
[ -n "$SSH_KEY_NAME" ] || SSH_KEY_NAME="admin"
|
|
||||||
echo "$SSH_KEY" > "/tmp/${SSH_KEY_NAME}.pub"
|
|
||||||
echo "gitolite's initial setup"
|
|
||||||
su-exec git gitolite setup -pk "/tmp/${SSH_KEY_NAME}.pub"
|
|
||||||
rm "/tmp/${SSH_KEY_NAME}.pub"
|
|
||||||
else
|
|
||||||
echo "SSH_KEY needs to be set"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
# stuff is already set up, but check the setup anyway
|
|
||||||
echo "gitolite's sanity setup"
|
|
||||||
su-exec git gitolite setup
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "gitolite is ready,starting sshd"
|
|
||||||
exec "$@"
|
|
||||||
|
|
@ -1,23 +0,0 @@
|
||||||
Port 22
|
|
||||||
Protocol 2
|
|
||||||
|
|
||||||
PermitRootLogin no
|
|
||||||
AllowUsers git
|
|
||||||
|
|
||||||
PasswordAuthentication no
|
|
||||||
PermitEmptyPasswords no
|
|
||||||
PubkeyAuthentication yes
|
|
||||||
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_rsa_key
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_dsa_key
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_ecdsa_key
|
|
||||||
HostKey /etc/ssh/keys/ssh_host_ed25519_key
|
|
||||||
|
|
||||||
X11Forwarding no
|
|
||||||
PrintMotd no
|
|
||||||
|
|
||||||
ClientAliveInterval 300
|
|
||||||
ClientAliveCountMax 2
|
|
||||||
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group18-sha512
|
|
||||||
MACs umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
|
|
||||||
HostKeyAlgorithms ssh-rsa,rsa-sha2-256,rsa-sha2-512
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
FROM alpine:3.13
|
|
||||||
|
|
||||||
COPY entrypoint.sh /usr/local/bin/entrypoint
|
|
||||||
|
|
||||||
RUN apk add --no-cache nfs-utils && \
|
|
||||||
rm /etc/idmapd.conf /etc/exports && \
|
|
||||||
mkdir -p /var/lib/nfs/rpc_pipefs /var/lib/nfs/v4recovery && \
|
|
||||||
echo "rpc_pipefs /var/lib/nfs/rpc_pipefs rpc_pipefs defaults 0 0" >> /etc/fstab && \
|
|
||||||
echo "nfsd /proc/fs/nfsd nfsd defaults 0 0" >> /etc/fstab && \
|
|
||||||
chmod +x /usr/local/bin/entrypoint
|
|
||||||
|
|
||||||
EXPOSE 2049
|
|
||||||
ENTRYPOINT ["/usr/local/bin/entrypoint"]
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = nfs-server
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile entrypoint.sh
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile entrypoint.sh
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,72 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
NTHREADS=${NTHREADS:=1}
|
|
||||||
|
|
||||||
stop () {
|
|
||||||
echo "un-exporting filesystems"
|
|
||||||
/usr/sbin/exportfs -uav
|
|
||||||
|
|
||||||
echo "terminating nfsd"
|
|
||||||
/usr/sbin/rpc.nfsd 0
|
|
||||||
|
|
||||||
echo "killing pids"
|
|
||||||
pid1=$(pidof rpc.nfsd)
|
|
||||||
pid2=$(pidof rpc.mountd)
|
|
||||||
pid3=$(pidof rpc.rpcbind)
|
|
||||||
kill -TERM "$pid1" "$pid2" "$pid3"
|
|
||||||
|
|
||||||
echo "un-mounting /var/lib/nfs/rpc_pipefs"
|
|
||||||
umount /var/lib/nfs/rpc_pipefs
|
|
||||||
|
|
||||||
echo "un-mounting /proc/nfs/nfsd"
|
|
||||||
umount /proc/fs/nfsd
|
|
||||||
|
|
||||||
exit 0
|
|
||||||
}
|
|
||||||
|
|
||||||
boot () {
|
|
||||||
|
|
||||||
echo "mounting /var/lib/nfs/rpc_pipefs"
|
|
||||||
/bin/mount -t rpc_pipefs /var/lib/nfs/rpc_pipefs
|
|
||||||
echo "mounting /proc/fs/nfsd"
|
|
||||||
/bin/mount -t nfsd /proc/fs/nfsd
|
|
||||||
|
|
||||||
echo "starting rpcbind"
|
|
||||||
/sbin/rpcbind -sw
|
|
||||||
/sbin/rpcinfo
|
|
||||||
|
|
||||||
echo "exporting filesystems"
|
|
||||||
/usr/sbin/exportfs -ar
|
|
||||||
cat /etc/exports
|
|
||||||
|
|
||||||
echo "starting mountd"
|
|
||||||
/usr/sbin/rpc.mountd \
|
|
||||||
--port 32767 \
|
|
||||||
--nfs-version 4 \
|
|
||||||
--no-nfs-version 2 \
|
|
||||||
--no-nfs-version 3
|
|
||||||
|
|
||||||
echo "starting nfsd"
|
|
||||||
/usr/sbin/rpc.nfsd \
|
|
||||||
--tcp \
|
|
||||||
--udp \
|
|
||||||
--port 2049 \
|
|
||||||
--nfs-version 4 \
|
|
||||||
--no-nfs-version 2 \
|
|
||||||
--no-nfs-version 3 \
|
|
||||||
"${NTHREADS}"
|
|
||||||
|
|
||||||
echo "terminating rpcbind"
|
|
||||||
pid=$(pidof rpcbind)
|
|
||||||
[ -n "$pid" ] && kill "$pid"
|
|
||||||
|
|
||||||
echo "ready"
|
|
||||||
}
|
|
||||||
|
|
||||||
trap stop TERM INT
|
|
||||||
boot
|
|
||||||
|
|
||||||
while :; do
|
|
||||||
sleep 2073600 &
|
|
||||||
wait
|
|
||||||
done
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
FROM alpine:3.14
|
|
||||||
|
|
||||||
RUN apk add --update --no-cache \
|
|
||||||
opensmtpd \
|
|
||||||
opensmtpd-extras \
|
|
||||||
rspamd \
|
|
||||||
opensmtpd-filter-rspamd && \
|
|
||||||
adduser \
|
|
||||||
-h /var/vmail \
|
|
||||||
-s /sbin/nologin \
|
|
||||||
-u 2000 \
|
|
||||||
-S -D \
|
|
||||||
vmail
|
|
||||||
|
|
||||||
CMD ["smtpd", "-d"]
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = opensmtpd
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,20 +0,0 @@
|
||||||
FROM alpine:3.14
|
|
||||||
|
|
||||||
RUN apk add --no-cache \
|
|
||||||
git su-exec nginx php7 php7-fpm \
|
|
||||||
php7-curl php7-json php7-mbstring php7-openssl php7-pecl-memcached \
|
|
||||||
php7-simplexml php7-sqlite3 php7-xml && \
|
|
||||||
sed -i.bak 's/^listen = 127.0.0.1:9000/listen = 9000/' /etc/php7/php-fpm.d/www.conf && \
|
|
||||||
mkdir -p /var/www && \
|
|
||||||
git clone https://github.com/RSS-Bridge/rss-bridge /var/www/rss-bridge && \
|
|
||||||
adduser -D -h /var/www/rss-bridge rssbridge && \
|
|
||||||
chown -R rssbridge:rssbridge \
|
|
||||||
/var/www/rss-bridge \
|
|
||||||
/var/log/php7
|
|
||||||
|
|
||||||
WORKDIR /var/www/rss-bridge
|
|
||||||
|
|
||||||
COPY entrypoint.sh /entrypoint
|
|
||||||
RUN chmod 700 /entrypoint
|
|
||||||
ENTRYPOINT ["/entrypoint"]
|
|
||||||
CMD ["rss-bridge"]
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
IMG_NAME = rss-bridge
|
|
||||||
REGISTRY=registry.monotremata.xyz:443
|
|
||||||
|
|
||||||
IMG=$(REGISTRY)/$(IMG_NAME)
|
|
||||||
|
|
||||||
.PHONY: build build-nc push
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(IMG) .
|
|
||||||
|
|
||||||
push: build
|
|
||||||
docker image push $(IMG)
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(IMG) .
|
|
||||||
|
|
@ -1,14 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -ex
|
|
||||||
|
|
||||||
case $1 in
|
|
||||||
rss-bridge)
|
|
||||||
exec su-exec rssbridge php-fpm7 -F
|
|
||||||
;;
|
|
||||||
nginx)
|
|
||||||
exec nginx -g 'daemon off;'
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
exec su-exec rssbridge "$@"
|
|
||||||
esac
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
FROM alpine:3.13
|
|
||||||
|
|
||||||
RUN apk add --update --no-cache sassc && \
|
|
||||||
addgroup \
|
|
||||||
--gid 10001 \
|
|
||||||
sassc && \
|
|
||||||
adduser \
|
|
||||||
--uid 10000 \
|
|
||||||
--home /data \
|
|
||||||
--ingroup sassc \
|
|
||||||
--disabled-password \
|
|
||||||
--shell /sbin/nologin \
|
|
||||||
sassc
|
|
||||||
|
|
||||||
WORKDIR /data
|
|
||||||
USER sassc
|
|
||||||
ENTRYPOINT ["sassc"]
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
USERNAME = rilla
|
|
||||||
IMG_NAME = sassc
|
|
||||||
|
|
||||||
.PHONY: build build-nc
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1,29 +0,0 @@
|
||||||
# syncthing
|
|
||||||
|
|
||||||
FROM alpine:3.15
|
|
||||||
|
|
||||||
ARG TARGETPLATFORM
|
|
||||||
ENV VERSION v1.20.1
|
|
||||||
|
|
||||||
RUN addgroup --gid 10001 syncthing && \
|
|
||||||
adduser \
|
|
||||||
--uid 10000 \
|
|
||||||
--home /var/lib/syncthing \
|
|
||||||
--ingroup syncthing \
|
|
||||||
--disabled-password \
|
|
||||||
--shell /sbin/nologin \
|
|
||||||
syncthing && \
|
|
||||||
mkdir -p /data && chown -R syncthing:syncthing /data && \
|
|
||||||
cd /tmp && \
|
|
||||||
ARCH=$(echo "$TARGETPLATFORM" | sed 's/\//-/') && \
|
|
||||||
RELEASE="syncthing-${ARCH}-${VERSION}" && \
|
|
||||||
URI="https://github.com/syncthing/syncthing/releases/download/${VERSION}/${RELEASE}.tar.gz" && \
|
|
||||||
echo "$URI" && \
|
|
||||||
wget "${URI}" && \
|
|
||||||
tar -xzf "${RELEASE}.tar.gz" && \
|
|
||||||
cp "/tmp/${RELEASE}/syncthing" /usr/local/bin/syncthing && \
|
|
||||||
rm -r "/tmp/${RELEASE}" "/tmp/${RELEASE}.tar.gz"
|
|
||||||
|
|
||||||
VOLUME /data /var/lib/syncthing
|
|
||||||
USER syncthing
|
|
||||||
CMD ["/usr/local/bin/syncthing", "-home=/var/lib/syncthing"]
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
IMG_NAME = syncthing
|
|
||||||
REGISTRY=registry.monotremata.xyz
|
|
||||||
IMG=$(REGISTRY)/$(IMG_NAME)
|
|
||||||
PLATFORMS=linux/amd64,linux/arm64
|
|
||||||
|
|
||||||
.PHONY: build build-nc buildx push
|
|
||||||
|
|
||||||
hw=$(shell uname -m)
|
|
||||||
ifeq ($(hw), x86_64)
|
|
||||||
TARGETPLATFORM=linux/amd64
|
|
||||||
else ifeq ($(hw), aarch64)
|
|
||||||
TARGETPLATFORM=linux/arm64
|
|
||||||
else
|
|
||||||
TARGETPLATFORM=linux/$(hw)
|
|
||||||
endif
|
|
||||||
|
|
||||||
build: Dockerfile
|
|
||||||
docker build -t $(IMG) --build-arg TARGETPLATFORM=$(TARGETPLATFORM) .
|
|
||||||
|
|
||||||
buildx: Dockerfile
|
|
||||||
docker buildx build \
|
|
||||||
--platform $(PLATFORMS) \
|
|
||||||
--tag $(IMG) \
|
|
||||||
--push \
|
|
||||||
.
|
|
||||||
|
|
||||||
push: build
|
|
||||||
docker image push $(IMG)
|
|
||||||
|
|
||||||
build-nc: Dockerfile
|
|
||||||
docker build --no-cache -t $(IMG) --build-arg ARCH=$(ARCH) .
|
|
||||||
|
|
@ -1,25 +0,0 @@
|
||||||
FROM alpine:3.14
|
|
||||||
|
|
||||||
RUN apk add --no-cache python3 py3-pip su-exec && \
|
|
||||||
pip3 install --upgrade pip && \
|
|
||||||
pip3 install vdirsyncer vdirsyncer[google] requests_oauthlib && \
|
|
||||||
addgroup --gid 10001 vdirsyncer && \
|
|
||||||
adduser \
|
|
||||||
--empty-password \
|
|
||||||
--home /var/lib/vdirsyncer \
|
|
||||||
--uid 10000 \
|
|
||||||
--ingroup vdirsyncer \
|
|
||||||
vdirsyncer && \
|
|
||||||
mkdir -p /var/lib/vdirsyncer/status /var/lib/vdirsyncer/tokens && \
|
|
||||||
touch /var/lib/vdirsyncer/config && \
|
|
||||||
chown -R vdirsyncer:vdirsyncer /var/lib/vdirsyncer
|
|
||||||
|
|
||||||
COPY crontab /crontab
|
|
||||||
COPY entrypoint.sh /entrypoint
|
|
||||||
COPY do_sync.sh /do_sync
|
|
||||||
RUN chmod +x /entrypoint /do_sync
|
|
||||||
|
|
||||||
ENTRYPOINT ["/entrypoint"]
|
|
||||||
CMD ["task"]
|
|
||||||
|
|
||||||
ENV VDIRSYNCER_CONFIG /var/lib/vdirsyncer/config
|
|
||||||
|
|
@ -1,20 +0,0 @@
|
||||||
IMG_NAME = vdirsyncer
|
|
||||||
USERNAME = rilla
|
|
||||||
REGISTRY=registry.monotremata.xyz:443
|
|
||||||
|
|
||||||
LOCAL_IMG=$(USERNAME)/$(IMG_NAME)
|
|
||||||
REGISTRY_IMG=$(REGISTRY)/$(IMG_NAME)
|
|
||||||
|
|
||||||
.PHONY: build build-nc tag push
|
|
||||||
|
|
||||||
build: Dockerfile entrypoint.sh crontab do_sync.sh
|
|
||||||
docker build -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
||||||
tag: build
|
|
||||||
docker image tag $(LOCAL_IMG) $(REGISTRY_IMG)
|
|
||||||
|
|
||||||
push: tag
|
|
||||||
docker image push $(REGISTRY_IMG)
|
|
||||||
|
|
||||||
build-nc: Dockerfile entrypoint.sh crontab do_sync.sh
|
|
||||||
docker build --no-cache -t $(USERNAME)/$(IMG_NAME) .
|
|
||||||
|
|
@ -1 +0,0 @@
|
||||||
*/15 * * * * /do_sync
|
|
||||||
|
|
@ -1,4 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
export VDIRSYNCER_CONFIG=/var/lib/vdirsyncer/config
|
|
||||||
vdirsyncer discover && vdirsyncer sync
|
|
||||||
|
|
@ -1,25 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
mkdir -p /var/lib/vdirsyncer/tokens /var/lib/vdirsyncer/status
|
|
||||||
chown -R vdirsyncer:vdirsyncer \
|
|
||||||
/var/lib/vdirsyncer/tokens \
|
|
||||||
/var/lib/vdirsyncer/status
|
|
||||||
|
|
||||||
export VDIRSYNCER_CONFIG=/var/lib/vdirsyncer/config
|
|
||||||
|
|
||||||
case $1 in
|
|
||||||
discover)
|
|
||||||
exec su-exec vdirsyncer vdirsyncer "$@"
|
|
||||||
;;
|
|
||||||
sync)
|
|
||||||
exec su-exec vdirsyncer vdirsyncer "$@"
|
|
||||||
;;
|
|
||||||
task)
|
|
||||||
su-exec vdirsyncer vdirsyncer discover && \
|
|
||||||
/usr/bin/crontab -u vdirsyncer /crontab && \
|
|
||||||
exec /usr/sbin/crond -f -L /dev/stdout
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
exec "$@"
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
FROM alpine:3.14
|
|
||||||
|
|
||||||
RUN apk add --no-cache \
|
|
||||||
git \
|
|
||||||
python3 \
|
|
||||||
su-exec && \
|
|
||||||
apk add --no-cache --virtual .build-deps \
|
|
||||||
gcc \
|
|
||||||
musl-dev \
|
|
||||||
py3-pip \
|
|
||||||
python3-dev && \
|
|
||||||
pip3 install --upgrade pip && \
|
|
||||||
pip3 install \
|
|
||||||
aiohttp \
|
|
||||||
icalendar \
|
|
||||||
dulwich>=0.19.1 \
|
|
||||||
defusedxml \
|
|
||||||
jinja2 \
|
|
||||||
multidict \
|
|
||||||
prometheus-client && \
|
|
||||||
# apk del .build-deps && \
|
|
||||||
mkdir -p /opt && \
|
|
||||||
git clone https://github.com/jelmer/xandikos /opt/xandikos && \
|
|
||||||
adduser -D -h /var/lib/xandikos xandikos && \
|
|
||||||
mkdir -p /var/lib/xandikos/data && \
|
|
||||||
chown -R xandikos:xandikos /var/lib/xandikos
|
|
||||||
|
|
||||||
COPY entrypoint.sh /entrypoint
|
|
||||||
RUN chmod +x /entrypoint
|
|
||||||
ENTRYPOINT ["/entrypoint"]
|
|
||||||
CMD ["xandikos"]
|
|
||||||
|
|
@ -1,15 +0,0 @@
|
||||||
IMG_NAME = xandikos
|
|
||||||
REGISTRY=registry.monotremata.xyz:443
|
|
||||||
|
|
||||||
IMG=$(REGISTRY)/$(IMG_NAME)
|
|
||||||
|
|
||||||
.PHONY: build build-nc push
|
|
||||||
|
|
||||||
build: Dockerfile entrypoint.sh
|
|
||||||
docker build -t $(IMG) .
|
|
||||||
|
|
||||||
push: build
|
|
||||||
docker image push $(IMG)
|
|
||||||
|
|
||||||
build-nc: Dockerfile entrypoint.sh
|
|
||||||
docker build --no-cache -t $(IMG) .
|
|
||||||
|
|
@ -1,28 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
set -xe
|
|
||||||
|
|
||||||
PORT=${PORT:-8000}
|
|
||||||
ROUTE_PREFIX=${ROUTE_PREFIX:-/}
|
|
||||||
|
|
||||||
current_user_principal="/user"
|
|
||||||
|
|
||||||
chown -R xandikos:xandikos /var/lib/xandikos
|
|
||||||
|
|
||||||
case $1 in
|
|
||||||
xandikos)
|
|
||||||
cd /opt/xandikos
|
|
||||||
exec su-exec xandikos python3 -m xandikos.web \
|
|
||||||
--port="${PORT}" \
|
|
||||||
--listen-address='0.0.0.0' \
|
|
||||||
-d /var/lib/xandikos/data \
|
|
||||||
--current-user-principal="${current_user_principal}" \
|
|
||||||
--route-prefix "${ROUTE_PREFIX}" \
|
|
||||||
--autocreate \
|
|
||||||
--defaults
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
exec "$@"
|
|
||||||
;;
|
|
||||||
esac
|
|
||||||
|
|
||||||
Loading…
Reference in New Issue