Skip to content

Source: examples/safe/nspawn/hello-nspawn/nspawn.provision.sh#

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
#!/usr/bin/env bash
set -eo pipefail

if test "$1" != "--provision"; then
    cat <<EOF
Usage: $0 --provision

Provision bootstrap script. Expects an dpkg based linux.
DONT execute on an already configured system.
THIS WILL OVERWRITE ALREADY EXISTING FILES.
EOF
    exit 1
fi
shift

# save stdin for later usage
stdin=$(cat -)

codename=$(lsb_release -c -s)
distribution="$(lsb_release -i -s)"
echo "Provision running on distribution: $distribution , codename: $codename"
echo "+++ networkctl status"
networkctl status
echo "+++ ip addr"
ip addr
echo "+++ ip route"
ip route
echo "+++ /etc/resolv.conf"
cat /etc/resolv.conf
echo "+++ resolvectl status"
resolvectl status

# create user, copy skeleton files
USERNAME="user"
HOME="/home/$USERNAME"
adduser --disabled-password --gecos ",,," --home "$HOME" "$USERNAME" || true
cp -r /etc/skel/. "$HOME/."
install -o "$USERNAME" -g "$USERNAME" -m "0700" -d "$HOME/.ssh"

# write authorized_keys if supplied
authorized_keys=""
head='# ---BEGIN OPENSSH AUTHORIZED KEYS---'
bottom='# ---END OPENSSH AUTHORIZED KEYS---'
if echo "$stdin" | grep -qPz "(?s)$head.*$bottom"; then
    authorized_keys=$(echo "$stdin" | awk "/$head/,/$bottom/")
fi
echo "$authorized_keys" >"$HOME/.ssh/authorized_keys"
chown "$USERNAME:$USERNAME" "$HOME/.ssh/authorized_keys"
chmod "0600" "$HOME/.ssh/authorized_keys"

# install openssh server and nginx, make index.html available on port 80
apt-get update
DEBIAN_FRONTEND=noninteractive apt-get install --yes openssh-server nginx
mkdir -p /var/www/html
cat >/var/www/html/index.html <<"EOF"
<!DOCTYPE html>
<html>
<head>
<style>pre { font-family: monospace; font-size: 2em; white-space: pre; }</style>
</head>
<body>
<pre>
           ><(((((>

                    ><(((>
        ><((((>

    <)))><            ><(((((>
                <))><

         <)))><    <)))))><

    Hello from a NSpawn Container!
</pre>
</body>
</html>
EOF
systemctl start ssh
systemctl start nginx