mirror of
https://github.com/trailofbits/algo.git
synced 2025-06-06 23:24:01 +02:00
apt locking fixes (#1685)
This commit is contained in:
parent
0629aa5ca5
commit
24574a3205
1 changed files with 10 additions and 4 deletions
|
@ -1,10 +1,13 @@
|
|||
#!/bin/bash
|
||||
set -eux
|
||||
|
||||
apt-get update -y
|
||||
apt-get install sudo -y
|
||||
which sudo || until \
|
||||
apt-get update -y && \
|
||||
apt-get install sudo -yf --install-suggests; do
|
||||
sleep 3
|
||||
done
|
||||
|
||||
getent passwd algo || useradd -m -d /home/algo -s /bin/bash -G adm,netdev -p '!' algo
|
||||
getent passwd algo || useradd -m -d /home/algo -s /bin/bash -G adm -p '!' algo
|
||||
|
||||
(umask 337 && echo "algo ALL=(ALL) NOPASSWD:ALL" >/etc/sudoers.d/10-algo-user)
|
||||
|
||||
|
@ -15,5 +18,8 @@ EOF
|
|||
test -d /home/algo/.ssh || (umask 077 && sudo -u algo mkdir -p /home/algo/.ssh/)
|
||||
echo "{{ lookup('file', '{{ SSH_keys.public }}') }}" | (umask 177 && sudo -u algo tee /home/algo/.ssh/authorized_keys)
|
||||
|
||||
sudo apt-get remove -y --purge sshguard || true
|
||||
dpkg -l sshguard && until apt-get remove -y --purge sshguard; do
|
||||
sleep 3
|
||||
done || true
|
||||
|
||||
systemctl restart sshd.service
|
||||
|
|
Loading…
Add table
Reference in a new issue