ovh/the-bastion
1
1
Fork 0
mirror of https://github.com/ovh/the-bastion.git synced 2024-12-27 18:51:33 +08:00
Code Issues Projects Releases Packages Wiki Activity
the-bastion/docker/Dockerfile.debian11

36 lines
1.3 KiB
Text
Raw Normal View History

feat: preparatory work to support Debian 11 "Bullseye" We still need to replacee pam_tally2 by pam_faillock Debian 11 is NOT yet supported, and won't be before it's released as stable.
2021-03-20 01:51:00 +08:00
FROM debian:bullseye
LABEL maintainer="stephane.lesimple+bastion@ovhcloud.com"
# cache builds efficiently: just copy the scripts to install packages first
feat: add type8 and type9 password hashes This requires the-bastion-mkhash-helper v1.1.0+
2023-09-01 17:25:16 +08:00
COPY bin/admin/install-ttyrec.sh \
bin/admin/install-yubico-piv-checker.sh \
bin/admin/install-mkhash-helper.sh \
bin/admin/packages-check.sh \
/opt/bastion/bin/admin/
COPY lib/shell /opt/bastion/lib/shell/
feat: preparatory work to support Debian 11 "Bullseye" We still need to replacee pam_tally2 by pam_faillock Debian 11 is NOT yet supported, and won't be before it's released as stable.
2021-03-20 01:51:00 +08:00
RUN ["/opt/bastion/bin/admin/packages-check.sh","-i","-d","-s"]
RUN ["/opt/bastion/bin/admin/install-ttyrec.sh","-d"]
RUN ["/opt/bastion/bin/admin/install-yubico-piv-checker.sh","-d"]
feat: add type8 and type9 password hashes This requires the-bastion-mkhash-helper v1.1.0+
2023-09-01 17:25:16 +08:00
RUN ["/opt/bastion/bin/admin/install-mkhash-helper.sh","-d"]
feat: preparatory work to support Debian 11 "Bullseye" We still need to replacee pam_tally2 by pam_faillock Debian 11 is NOT yet supported, and won't be before it's released as stable.
2021-03-20 01:51:00 +08:00
# handle locales
RUN echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen && locale-gen
# disable /dev/kmsg handling by syslog-ng and explicitly enable /dev/log
RUN test -e /etc/syslog-ng/syslog-ng.conf && \
sed -i -re 's=system\(\);=unix-stream("/dev/log");=' /etc/syslog-ng/syslog-ng.conf
# at each modification of our code, we'll start from here thanks to build cache
COPY . /opt/bastion
# tests that the environment works
RUN ["/opt/bastion/bin/dev/perl-check.sh"]
# setup ssh/sshd config and setup bastion install
enh: tests: refactor the framework for more maintainability The chain of executions is as is: - `docker_build_and_run_tests_all.sh` - launches several instances of `docker_build_and_run_tests.sh` - builds docker images with the `target_role.sh` and `tester_role.sh` entrypoints - inside the tester docker, `tester_role.sh` launches `launch_tests_on_instance.sh` - the target docker gets tested after setting up accounts, SSH etc. Previously, these scripts passed options to each other either by a mix of environment variables and command-line arguments, with some inconsistencies here and there. Now, `launch_tests_on_instance.sh` supports a lot of command-line options, which can be specified directly if testing a remote server, or can be passed-through by the calling script in case of docker tests. `docker_build_and_run_tests.sh` and `docker_build_and_run_tests_all.sh` also support to passthrough these options down.
2021-06-08 00:38:16 +08:00
RUN ["/opt/bastion/bin/admin/install","--new-install"]
feat: preparatory work to support Debian 11 "Bullseye" We still need to replacee pam_tally2 by pam_faillock Debian 11 is NOT yet supported, and won't be before it's released as stable.
2021-03-20 01:51:00 +08:00
# start at entrypoint
ENTRYPOINT /opt/bastion/docker/entrypoint.sh
fix: tests: don't test FIDO2 on unsupported distros
2024-04-10 00:22:41 +08:00
# TESTOPT --has-mfa=1 --has-pamtester=1 --has-piv=1 --has-sk=1
Reference in a new issue Copy permalink