almet/dangerzone
1
0
Fork 0
mirror of https://github.com/freedomofpress/dangerzone.git synced 2025-04-29 10:12:38 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

Add hard-coded ssh key to the VM image

Browse source
This commit is contained in:
Micah Lee 2021-06-28 16:53:06 -07:00
parent c8d6bdf1c8
commit 55c01413cd
No known key found for this signature in database
GPG key ID: 403C2657CD994F73
2 changed files with 24 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
rip_docker/vm-image-builder/README.md
View file

@ -1,13 +1,23 @@
# Build the Dangerzone VM for running podman # Build the Dangerzone VM for running podman
To build an ISO image: ## Build the podman container storage (with vagrant)
You need vagrant: `brew install vagrant`
## Build the ISO image (with docker)
```sh ```sh
docker run -v $(pwd):/build alpine:latest /build/build-iso.sh docker run -v $(pwd):/build alpine:latest /build/build-iso.sh
``` ```
To run the VM: ## Run the VM
```sh ```sh
./run-vm.sh ./run-vm.sh
``` ```
You can ssh in as the unprivileged user like this:
```sh
ssh -i ./ssh-key/id_ed25519 -o StrictHostKeyChecking=no user@192.168.65.3
```

16
rip_docker/vm-image-builder/genapkovl-dangerzone.sh
View file

@ -47,8 +47,7 @@ PasswordAuthentication no
EOF EOF
# Dangerzone alpine setup # Dangerzone alpine setup
mkdir -p "$tmp"/root makefile root:root 0644 "$tmp"/etc/answers.txt <<EOF
makefile root:root 0644 "$tmp"/root/answers.txt <<EOF
KEYMAPOPTS="us us" KEYMAPOPTS="us us"
HOSTNAMEOPTS="-n dangerzone" HOSTNAMEOPTS="-n dangerzone"
INTERFACESOPTS="auto lo INTERFACESOPTS="auto lo
@ -64,11 +63,20 @@ SSHDOPTS="-c openssh"
EOF EOF
mkdir -p "$tmp"/etc/init.d mkdir -p "$tmp"/etc/init.d
makefile root:root 0644 "$tmp"/etc/init.d/dangerzone <<EOF makefile root:root 0755 "$tmp"/etc/init.d/dangerzone <<EOF
#!/sbin/openrc-run #!/sbin/openrc-run
name="Dangerzone init script" name="Dangerzone init script"
start_pre() { start_pre() {
/sbin/setup-alpine -f /root/answers.txt -e -q # Setup Alpine
/sbin/setup-alpine -f /etc/answers.txt -e -q
# Create user, give the dangerzone-vm-key ssh access
/usr/sbin/adduser -D user
mkdir -p /home/user/.ssh
echo "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILmxIw2etg2IxY77GOFe/6tuMH/K5c1gsz3qPY/s7rZF dangerzone-vm-key" > /home/user/.ssh/authorized_keys
chown -R user:user /home/user/.ssh
chmod 700 /home/user/.ssh
chmod 600 /home/user/.ssh/authorized_keys
} }
EOF EOF