vagd.templates

Attributes

VAGRANT_TEMPLATE
LOCK_PACKAGES
DOCKER_TEMPLATE
DOCKER_ARCH_TEMPLATE
DOCKER_ALPINE_TEMPLATE

Module Contents

vagd.templates.VAGRANT_TEMPLATE = Multiline-String

Show Value

"""# -*- mode: ruby -*-
# vi: set ft=ruby :

VAGRANTFILE_API_VERSION = "2"

Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|

  config.vm.box = "{box}"

end"""

vagd.templates.LOCK_PACKAGES = Multiline-String

Show Value

"""
ADD https://raw.githubusercontent.com/reproducible-containers/repro-sources-list.sh/v0.1.4/repro-sources-list.sh     /usr/local/bin/repro-sources-list.sh
RUN bash /usr/local/bin/repro-sources-list.sh
"""

vagd.templates.DOCKER_TEMPLATE = Multiline-String

Show Value

"""FROM {image}

USER root

{lock}

# install packages
ENV DEBIAN_FRONTEND=noninteractive
RUN apt update && \
  apt install -y {packages} && \
  apt clean && rm -rf /var/lib/apt/lists/*

# init user and ssh
EXPOSE 22
# uid/gid match the host user so the host gdb may ptrace processes in the container
RUN u=$(getent passwd {uid} | cut -d: -f1); [ -z "$u" ] || userdel -r "$u"; \
  getent group {gid} >/dev/null || groupadd -g {gid} {user}; \
  useradd --create-home --shell /bin/bash -u {uid} -g {gid} -G sudo {user}
RUN chown -R {uid}:{gid} /home/{user}
RUN chmod u+s /usr/bin/sudo
RUN echo "{user} ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/{user} && chmod 0440 /etc/sudoers.d/{user}
USER {user}

WORKDIR /home/{user}
COPY {keyfile} .ssh/authorized_keys

USER root
COPY {keyfile} /root/.ssh/authorized_keys
RUN mkdir -p /run/sshd && \
  chmod 755 /run/sshd

ENTRYPOINT []

CMD /usr/sbin/sshd; \
  while true; do sleep 1m; done
"""

vagd.templates.DOCKER_ARCH_TEMPLATE = Multiline-String

Show Value

"""FROM {image}

USER root

# install packages
RUN pacman -Sy --noconfirm python3 gdb socat sudo openssh

# init user and ssh
EXPOSE 22
# uid/gid match the host user so the host gdb may ptrace processes in the container
RUN u=$(getent passwd {uid} | cut -d: -f1); [ -z "$u" ] || userdel -r "$u"; \
  getent group {gid} >/dev/null || groupadd -g {gid} {user}; \
  useradd --create-home --shell /bin/bash -u {uid} -g {gid} -G wheel {user}
RUN chown -R {uid}:{gid} /home/{user}
RUN chmod u+s /usr/bin/sudo
RUN echo "{user} ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/{user} && chmod 0440 /etc/sudoers.d/{user}
USER {user}

WORKDIR /home/{user}
COPY {keyfile} .ssh/authorized_keys

USER root
COPY {keyfile} /root/.ssh/authorized_keys
RUN ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ""

RUN mkdir -p /run/sshd && \
  chmod 755 /run/sshd

ENTRYPOINT []

CMD /usr/sbin/sshd; \
  while true; do sleep 1m; done
"""

vagd.templates.DOCKER_ALPINE_TEMPLATE = Multiline-String

Show Value

"""FROM {image}

USER root

# install packages
RUN apk update
RUN apk add --no-cache python3
RUN apk add --no-cache musl-dbg
# install gdb
RUN apk add --no-cache gdb
# install socket transport
RUN apk add --no-cache socat
# install ssh server support and keys
RUN apk add --no-cache openssh
# install sudo
RUN apk add --no-cache sudo

EXPOSE 22
RUN chmod u+s /usr/bin/sudo
# uid/gid match the host user so the host gdb may ptrace processes in the container
RUN u=$(getent passwd {uid} | cut -d: -f1); [ -z "$u" ] || deluser --remove-home "$u";   getent group {gid} >/dev/null || addgroup -g {gid} {user};   adduser -h /home/{user} -s /bin/ash -G "$(getent group {gid} | cut -d: -f1)" -D -u {uid} {user}
RUN echo "{user} ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/{user} && chmod 0440 /etc/sudoers.d/{user}
RUN echo "{user}:{user}" | chpasswd
RUN sed "s/AllowTcpForwarding no/AllowTcpForwarding yes/" -i /etc/ssh/sshd_config

USER {user}

WORKDIR /home/{user}

COPY {keyfile} .ssh/authorized_keys

USER root
COPY {keyfile} /root/.ssh/authorized_keys
RUN ssh-keygen -A
RUN mkdir -p /run/sshd &&   chmod 755 /run/sshd

ENTRYPOINT []

CMD /usr/sbin/sshd;   while true; do sleep 1m; done

"""