b5c1bf7591
Capture what is actually running on host koopa: podman names/ports, Caddy vhosts, and hernani paths. Authoritative snapshot: host/overview/LIVE.md. Rename docs to live container taler-hacktivism-exchange-ansible (not the short taler-exchange-hacktivism label). Add public-only mirror of ~/ansible-taler-exchange deploy helpers (no secrets.yml).
26 lines
1.1 KiB
Docker
26 lines
1.1 KiB
Docker
FROM docker.io/library/debian:trixie
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update -yqq && \
|
|
apt-get install -yqq \
|
|
ansible \
|
|
cron \
|
|
git \
|
|
locales \
|
|
openssh-server \
|
|
python3 \
|
|
python3-debian \
|
|
systemd \
|
|
whois # mkpasswd provided by whois package
|
|
|
|
RUN mkdir -p /etc/ansible/facts.d
|
|
|
|
#####################################################################
|
|
## WARNING: THIS ALLOWS FOR COMPLETELY UNAUTHENTICATED SSH SESSIONS #
|
|
####### FOR TESTING ENVIRONMENT ONLY! ###############################
|
|
RUN echo "root:$(mkpasswd -s </dev/null)" | chpasswd -e
|
|
RUN sed -i'' -e's/^#PermitRootLogin prohibit-password$/PermitRootLogin yes/' /etc/ssh/sshd_config \
|
|
&& sed -i'' -e's/^#PasswordAuthentication yes$/PasswordAuthentication yes/' /etc/ssh/sshd_config \
|
|
&& sed -i'' -e's/^#PermitEmptyPasswords no$/PermitEmptyPasswords yes/' /etc/ssh/sshd_config \
|
|
&& sed -i'' -e's/^UsePAM yes/UsePAM no/' /etc/ssh/sshd_config
|