starting the service is always better
This commit is contained in:
14
secdep.py
14
secdep.py
@@ -954,14 +954,17 @@ def create_node(provider, name=None, location=None, size=None, image=None, confi
|
||||
SCRIPT = '''#!/usr/bin/env bash
|
||||
sudo useradd -G sudo -m secdep
|
||||
sudo echo "secdep:secdeppass" | sudo chpasswd
|
||||
sudo echo "%sudo ALL=(ALL:ALL) ALL" >> /etc/sudoers
|
||||
sudo mkdir -p /home/secdep/.ssh
|
||||
[[ -e /root/.ssh/authorized_keys ]] && sudo cp /root/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/admin/.ssh/authorized_keys ]] && sudo cp /home/admin/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/ec2-user/.ssh/authorized_keys ]] && sudo cp /home/ec2-user/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/centos/.ssh/authorized_keys ]] && sudo cp /home/centos/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/fedora/.ssh/authorized_keys ]] && sudo cp /home/fedora/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/ubuntu/.ssh/authorized_keys ]] && sudo cp /home/ubuntu/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys'''
|
||||
[[ -e /home/ubuntu/.ssh/authorized_keys ]] && sudo cp /home/ubuntu/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
sudo chmod 755 /home
|
||||
sudo chown secdep:secdep /home/secdep -R
|
||||
sudo chmod 700 /home/secdep /home/secdep/.ssh
|
||||
sudo chmod 600 /home/secdep/.ssh/authorized_keys'''
|
||||
step_1 = SSHKeyDeployment(pubkey)
|
||||
step_2 = ScriptDeployment(SCRIPT)
|
||||
msd = MultiStepDeployment([step_1, step_2])
|
||||
@@ -986,14 +989,17 @@ def create_node(provider, name=None, location=None, size=None, image=None, confi
|
||||
SCRIPT = '''#!/usr/bin/env bash
|
||||
sudo useradd -G sudo -m secdep
|
||||
sudo echo "secdep:secdeppass" | sudo chpasswd
|
||||
sudo echo "%sudo ALL=(ALL:ALL) ALL" >> /etc/sudoers
|
||||
sudo mkdir -p /home/secdep/.ssh
|
||||
[[ -e /root/.ssh/authorized_keys ]] && sudo cp /root/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/admin/.ssh/authorized_keys ]] && sudo cp /home/admin/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/ec2-user/.ssh/authorized_keys ]] && sudo cp /home/ec2-user/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/centos/.ssh/authorized_keys ]] && sudo cp /home/centos/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/fedora/.ssh/authorized_keys ]] && sudo cp /home/fedora/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
[[ -e /home/ubuntu/.ssh/authorized_keys ]] && sudo cp /home/ubuntu/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys'''
|
||||
[[ -e /home/ubuntu/.ssh/authorized_keys ]] && sudo cp /home/ubuntu/.ssh/authorized_keys /home/secdep/.ssh/authorized_keys
|
||||
sudo chmod 755 /home
|
||||
sudo chown secdep:secdep /home/secdep -R
|
||||
sudo chmod 700 /home/secdep /home/secdep/.ssh
|
||||
sudo chmod 600 /home/secdep/.ssh/authorized_keys'''
|
||||
step_1 = SSHKeyDeployment(pubkey)
|
||||
step_2 = ScriptDeployment(SCRIPT)
|
||||
msd = MultiStepDeployment([step_1, step_2])
|
||||
|
||||
Reference in New Issue
Block a user