Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Title #398

Open
Noobik-Zemelnikow opened this issue Sep 6, 2023 · 0 comments
Open

Title #398

Noobik-Zemelnikow opened this issue Sep 6, 2023 · 0 comments

Comments

@Noobik-Zemelnikow
Copy link 

  
> - - [ ]  MAINTAINER Sebastien Macke <zaharik3330@gmail.com> 
  
 SHELL ["/bin/bash", "-o", "pipefail", "-c"] 
  
 RUN { for i in {3..5}; do useradd -m -s /bin/bash user$i; echo -e "Password$i\nPassword$i" | passwd user$i; done; } \ 
  && useradd -m user9 && echo -e 'p\x1fssw\x09rd\np\x1fssw\x09rd' | passwd user9 
  
 ENV DEBIAN_FRONTEND=noninteractive  
  
 RUN apt-get update && apt-get install -y vsftpd openssh-server telnetd rsh-redone-server fingerd apache2 socat 
  
 RUN { echo "postfix postfix/mailname string ubuntu-bionic"; \ 
       echo "postfix postfix/main_mailer_type string 'Internet Site'"; \ 
     } | debconf-set-selections \ 
   && apt-get update && apt-get install -y postfix mail-stack-delivery \ 
   && postconf -e 'smtpd_sasl_exceptions_networks=' 
  
 RUN echo 'ServerName localhost' >> /etc/apache2/apache2.conf \ 
   && mkdir /var/www/html/{wp,pma,bak} && echo secret > /var/www/html/key 
  
 RUN LDAPPW=Password1; \ 
   { \ 
     echo slapd slapd/internal/generated_adminpw password $LDAPPW; \ 
     echo slapd slapd/password2 password $LDAPPW; \ 
     echo slapd slapd/internal/adminpw password $LDAPPW; \ 
     echo slapd slapd/password1 password $LDAPPW; \ 
     echo slapd slapd/domain string example.com; \ 
     echo slapd shared/organization string example.com;  \ 
   } | debconf-set-selections \ 
   && apt-get update && apt-get install -y slapd ldap-utils 
  
 RUN MYSRP=Password1; \ 
   { echo "mysql-server mysql-server/root_password password $MYSRP"; \ 
     echo "mysql-server mysql-server/root_password_again password $MYSRP"; \ 
   } | debconf-set-selections \ 
   && apt-get update && apt-get install -y mysql-server \ 
   && sed -i "s/bind-address.*/bind-address = 0.0.0.0/" /etc/mysql/mysql.conf.d/mysqld.cnf \ 
   && echo secure_file_priv= >> /etc/mysql/mysql.conf.d/mysqld.cnf \ 
   && Q1="GRANT ALL ON *.* TO 'root'@'%' IDENTIFIED BY '$MYSRP' WITH GRANT OPTION;" \ 
   && Q2="FLUSH PRIVILEGES;" \ 
   && SQL="${Q1}${Q2}" \ 
   && rm -f /etc/apparmor.d/usr.sbin.mysqld \ 
   && service mysql start \ 
   && mysql -uroot -p"$MYSRP" -e "$SQL" 
  
 RUN PGPW=Password1 \ 
   && apt-get update && apt-get install -y postgresql \ 
   && sed -ie 's,127.0.0.1/32,0.0.0.0/0,' /etc/postgresql/10/main/pg_hba.conf \ 
   && sed -ie "s,^#listen_addresses = 'localhost',listen_addresses = '*'," /etc/postgresql/10/main/postgresql.conf \ 
   && service postgresql start \ 
   && su - postgres -c "psql -c \"ALTER USER postgres WITH PASSWORD '$PGPW';\" -c '\\q'" \ 
   && su - postgres -c "PGPASSWORD='$PGPW' psql -d postgres -w --no-password -h localhost -p 5432 -t -c 'SELECT version()'" 
  
 RUN apt-get update && apt-get install -y tomcat9 tomcat9-admin \ 
   && TOMCATPW=Password1 \ 
   && echo '<?xml version="1.0" encoding="UTF-8"?><tomcat-users xmlns="http://tomcat.apache.org/xml" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://tomcat.apache.org/xml tomcat-users.xsd" version="1.0"><user username="tomcat" password="Password1" roles="manager-gui"/></tomcat-users>' > /etc/tomcat9/tomcat-users.xml \ 
   && sed -ie 's,^.*Define an AJP .* Connector on port.*$,<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />,' /etc/tomcat9/server.xml \ 
   && sed -ie 's,catalina.realm.LockOutRealm",catalina.realm.LockOutRealm" lockOutTime="0",' /etc/tomcat9/server.xml \ 
   && echo -e "#!/bin/bash\n\ 
 export CATALINA_HOME=/usr/share/tomcat9\n\ 
 export CATALINA_BASE=/var/lib/tomcat9\n\ 
 export CATALINA_TMPDIR=/tmp\n\ 
 export SECURITY_MANAGER=true\n\ 
 export JAVA_OPTS=-Djava.awt.headless=true\n\ 
 /usr/libexec/tomcat9/tomcat-update-policy.sh\n\ 
 /usr/libexec/tomcat9/tomcat-start.sh &\n" > /usr/local/sbin/start-tomcat.sh 
  
 RUN apt-get update && apt-get install -y dovecot-imapd dovecot-pop3d poppassd \ 
   && sed -ie 's,^#login_trusted_networks = *$,login_trusted_networks = 0.0.0.0/0,' /etc/dovecot/dovecot.conf 
  
 RUN apt-get update && apt-get install -y p7zip-full \ 
  && 7za a -pPassword1 /root/enc.zip /etc/passwd 
  
 RUN apt-get update && apt-get install -y openjdk-11-jre-headless \ 
  && keytool -genkey -alias test -storepass Password1 -keypass Password1 -keystore /root/keystore.jks -dname "CN=a,OU=b,O=c,L=d,ST=e,C=f" 
  
 RUN apt-get update && apt-get install -y sqlcipher \ 
   && sqlcipher /root/enc.db "PRAGMA key = 'Password1';create table a(id int);" 
  
 RUN echo -e 'user1:kW+7AlKMnSZQIRluNxwJOMiohAw=\nuser2:oBk37hmkFgZdZ247+g6c0Ay6Vw8=\nuser3:kW+7AlKMnSZQIRluNxwJOMiohAw=' > /root/umbraco_users.pw 
  
 RUN apt-get update && apt-get install -y tightvncserver \ 
   && useradd -m vncuser && mkdir ~vncuser/.vnc && echo Password | vncpasswd -f > ~vncuser/.vnc/passwd \ 
   && chmod 400 ~vncuser/.vnc/passwd && chown -R vncuser:vncuser ~vncuser/.vnc 
  
 # utils 
 RUN sed -i 's:^path-exclude=/usr/share/man:#path-exclude=/usr/share/man:' /etc/dpkg/dpkg.cfg.d/excludes \ 
   && apt-get update && apt-get install -y man manpages-posix iproute2 mlocate lsof sudo vim less \ 
 telnet finger rsh-client smbclient \ 
   && echo 'set bg=dark' > /root/.vimrc \ 
   && usermod -aG sudo user3 
  
 RUN apt-get update && apt-get install -y samba \ 
   && { for i in {3..5}; do echo -e "Password$i\nPassword$i" | smbpasswd -a "user$i"; done; } \ 
   && sed -ie 's,map to guest =,#map to guest =,' /etc/samba/smb.conf 
  
 RUN apt-get update && apt-get install -y snmpd snmp \ 
   && sed -ie 's,agentAddress  udp:127.0.0.1:161,agentAddress  udp:161,' /etc/snmp/snmpd.conf \ 
   && echo 'createUser user3 SHA authPass AES privPass' >> /var/lib/snmp/snmpd.conf \ 
   && echo 'rouser user3 priv .1' >> /etc/snmp/snmpd.conf 
  
 RUN echo -e "echo Starting services\n\ 
 service vsftpd start\n\ 
 service ssh start\n\ 
 /usr/sbin/inetd\n\ 
 service postfix start\n\ 
 service dovecot start\n\ 
 service apache2 start\n\ 
 service slapd start\n\ 
 service mysql start\n\ 
 service postgresql start\n\ 
 bash /usr/local/sbin/start-tomcat.sh\n\ 
 socat tcp-l:106,fork,reuseaddr exec:/usr/sbin/poppassd &\n\ 
 socat tcp-l:4444,fork,reuseaddr exec:\"echo -e 'W\xe1\xc0me'\" &\n\ 
 cp -v /root/enc.zip /root/keystore.jks /root/enc.db /root/umbraco_users.pw /opt/patator/\n\ 
 su - vncuser -c 'vncserver -rfbport 5900'\n\ 
 service smbd start\n\ 
 service snmpd start\n\ 
 tail -f /dev/null\n" > /usr/local/sbin/start-all-services.sh 
  
 CMD ["bash", "/usr/local/sbin/start-all-services.sh"]

MAINTAINER Sebastien Macke zaharik3330@gmail.com

SHELL ["/bin/bash", "-o", "pipefail", "-c"]

RUN { for i in {3..5}; do useradd -m -s /bin/bash user$i; echo -e "Password$i\nPassword$i" | passwd user$i; done; } \
&& useradd -m user9 && echo -e 'p\x1fssw\x09rd\np\x1fssw\x09rd' | passwd user9

ENV DEBIAN_FRONTEND=noninteractive

RUN apt-get update && apt-get install -y vsftpd openssh-server telnetd rsh-redone-server fingerd apache2 socat

RUN { echo "postfix postfix/mailname string ubuntu-bionic"; \
echo "postfix postfix/main_mailer_type string 'Internet Site'"; \
} | debconf-set-selections \
&& apt-get update && apt-get install -y postfix mail-stack-delivery \
&& postconf -e 'smtpd_sasl_exceptions_networks='

RUN echo 'ServerName localhost' >> /etc/apache2/apache2.conf \
&& mkdir /var/www/html/{wp,pma,bak} && echo secret > /var/www/html/key

RUN LDAPPW=Password1; \
{ \
echo slapd slapd/internal/generated_adminpw password $LDAPPW; \
echo slapd slapd/password2 password $LDAPPW; \
echo slapd slapd/internal/adminpw password $LDAPPW; \
echo slapd slapd/password1 password $LDAPPW; \
echo slapd slapd/domain string example.com; \
echo slapd shared/organization string example.com; \
} | debconf-set-selections \
&& apt-get update && apt-get install -y slapd ldap-utils

RUN MYSRP=Password1; \
{ echo "mysql-server mysql-server/root_password password $MYSRP"; \
echo "mysql-server mysql-server/root_password_again password $MYSRP"; \
} | debconf-set-selections \
&& apt-get update && apt-get install -y mysql-server \
&& sed -i "s/bind-address.*/bind-address = 0.0.0.0/" /etc/mysql/mysql.conf.d/mysqld.cnf \
&& echo secure_file_priv= >> /etc/mysql/mysql.conf.d/mysqld.cnf \
&& Q1="GRANT ALL ON . TO 'root'@'%' IDENTIFIED BY '$MYSRP' WITH GRANT OPTION;" \
&& Q2="FLUSH PRIVILEGES;" \
&& SQL="${Q1}${Q2}" \
&& rm -f /etc/apparmor.d/usr.sbin.mysqld \
&& service mysql start \
&& mysql -uroot -p"$MYSRP" -e "$SQL"

RUN PGPW=Password1 \
&& apt-get update && apt-get install -y postgresql \
&& sed -ie 's,127.0.0.1/32,0.0.0.0/0,' /etc/postgresql/10/main/pg_hba.conf \
&& sed -ie "s,^#listen_addresses = 'localhost',listen_addresses = '*'," /etc/postgresql/10/main/postgresql.conf \
&& service postgresql start \
&& su - postgres -c "psql -c "ALTER USER postgres WITH PASSWORD '$PGPW';" -c '\q'" \
&& su - postgres -c "PGPASSWORD='$PGPW' psql -d postgres -w --no-password -h localhost -p 5432 -t -c 'SELECT version()'"

RUN apt-get update && apt-get install -y tomcat9 tomcat9-admin \
&& TOMCATPW=Password1 \
&& echo '' > /etc/tomcat9/tomcat-users.xml \
&& sed -ie 's,^.Define an AJP . Connector on port.*$,,' /etc/tomcat9/server.xml \
&& sed -ie 's,catalina.realm.LockOutRealm",catalina.realm.LockOutRealm" lockOutTime="0",' /etc/tomcat9/server.xml \
&& echo -e "#!/bin/bash\n\
export CATALINA_HOME=/usr/share/tomcat9\n\
export CATALINA_BASE=/var/lib/tomcat9\n\
export CATALINA_TMPDIR=/tmp\n\
export SECURITY_MANAGER=true\n\
export JAVA_OPTS=-Djava.awt.headless=true\n\
/usr/libexec/tomcat9/tomcat-update-policy.sh\n\
/usr/libexec/tomcat9/tomcat-start.sh &\n" > /usr/local/sbin/start-tomcat.sh

RUN apt-get update && apt-get install -y dovecot-imapd dovecot-pop3d poppassd \
&& sed -ie 's,^#login_trusted_networks = *$,login_trusted_networks = 0.0.0.0/0,' /etc/dovecot/dovecot.conf

RUN apt-get update && apt-get install -y p7zip-full \
&& 7za a -pPassword1 /root/enc.zip /etc/passwd

RUN apt-get update && apt-get install -y openjdk-11-jre-headless \
&& keytool -genkey -alias test -storepass Password1 -keypass Password1 -keystore /root/keystore.jks -dname "CN=a,OU=b,O=c,L=d,ST=e,C=f"

RUN apt-get update && apt-get install -y sqlcipher \
&& sqlcipher /root/enc.db "PRAGMA key = 'Password1';create table a(id int);"

RUN echo -e 'user1:kW+7AlKMnSZQIRluNxwJOMiohAw=\nuser2:oBk37hmkFgZdZ247+g6c0Ay6Vw8=\nuser3:kW+7AlKMnSZQIRluNxwJOMiohAw=' > /root/umbraco_users.pw

RUN apt-get update && apt-get install -y tightvncserver \
&& useradd -m vncuser && mkdir ~vncuser/.vnc && echo Password | vncpasswd -f > ~vncuser/.vnc/passwd \
&& chmod 400 ~vncuser/.vnc/passwd && chown -R vncuser:vncuser ~vncuser/.vnc

utils

RUN sed -i 's:^path-exclude=/usr/share/man:#path-exclude=/usr/share/man:' /etc/dpkg/dpkg.cfg.d/excludes \
&& apt-get update && apt-get install -y man manpages-posix iproute2 mlocate lsof sudo vim less \
telnet finger rsh-client smbclient \
&& echo 'set bg=dark' > /root/.vimrc \
&& usermod -aG sudo user3

RUN apt-get update && apt-get install -y samba \
&& { for i in {3..5}; do echo -e "Password$i\nPassword$i" | smbpasswd -a "user$i"; done; } \
&& sed -ie 's,map to guest =,#map to guest =,' /etc/samba/smb.conf

RUN apt-get update && apt-get install -y snmpd snmp \
&& sed -ie 's,agentAddress udp:127.0.0.1:161,agentAddress udp:161,' /etc/snmp/snmpd.conf \
&& echo 'createUser user3 SHA authPass AES privPass' >> /var/lib/snmp/snmpd.conf \
&& echo 'rouser user3 priv .1' >> /etc/snmp/snmpd.conf

RUN echo -e "echo Starting services\n\
service vsftpd start\n\
service ssh start\n\
/usr/sbin/inetd\n\
service postfix start\n\
service dovecot start\n\
service apache2 start\n\
service slapd start\n\
service mysql start\n\
service postgresql start\n\
bash /usr/local/sbin/start-tomcat.sh\n\
socat tcp-l:106,fork,reuseaddr exec:/usr/sbin/poppassd &\n\
socat tcp-l:4444,fork,reuseaddr exec:"echo -e 'W\xe1\xc0me'" &\n\
cp -v /root/enc.zip /root/keystore.jks /root/enc.db /root/umbraco_users.pw /opt/patator/\n\
su - vncuser -c 'vncserver -rfbport 5900'\n\
service smbd start\n\
service snmpd start\n\
tail -f /dev/null\n" > /usr/local/sbin/start-all-services.sh

CMD ["bash", "/usr/local/sbin/start-all-services.sh"]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Noobik-Zemelnikow