168 lines
4.1 KiB
Plaintext
168 lines
4.1 KiB
Plaintext
cat /root/.ssh/authorized_keys
|
|
nano /root/.ssh/authorized_keys
|
|
exit
|
|
apt-get install podman -y
|
|
apt-cache rdepends podman-compose
|
|
apt-get install podman-compose -y
|
|
adduser podman sudo
|
|
sudo -iu podman
|
|
exit
|
|
timedatectl set-timezone America/Phoenix
|
|
date
|
|
apt-get update
|
|
apt upgrade -y
|
|
adduser pihole
|
|
adduser podman
|
|
adduser lphares
|
|
mkdir /home/lphares/.ssh
|
|
cp /root/.ssh/authorized_keys /home/lphares/.ssh/authorized_keys
|
|
chown lphares:lphares -R /home/lphares
|
|
#
|
|
adduser bmiller
|
|
mkdir /home/bmiller/.ssh
|
|
cp /root/.ssh/authorized_keys /home/bmiller/.ssh/authorized_keys
|
|
chown bmiller:bmiller -R /home/bmiller
|
|
adduser bmiller lphares
|
|
sudo usermod -a -G lphares bmiller
|
|
newgrp lphares
|
|
systemctl restart ssh
|
|
exit
|
|
reboot
|
|
sudo -iu podman
|
|
cd /run/user/0/
|
|
ls -la
|
|
cd ..
|
|
ls -la
|
|
cp -R 0/ 1002/
|
|
chown -R podman:podman /run/user/1002/
|
|
sudo -iu podman
|
|
rm -R /run/user/1002/
|
|
mkdir -p /run/user/1002/
|
|
sudo -iu podman
|
|
chown -R podman:podman /run/user/1002/
|
|
sudo -iu podman
|
|
exit
|
|
reboot
|
|
adduser pihole
|
|
cd /tmp
|
|
curl -sSL https://install.pi-hole.net | bash
|
|
pihole -a -p LhhI1S73VZhtP#WIG8Tk
|
|
exit
|
|
reboot
|
|
apt install unbound -y
|
|
nano /etc/unbound/unbound.conf.d/pi-hole.conf
|
|
service unbound restart
|
|
nano /etc/lighttpd/lighttpd.conf
|
|
pihole -up
|
|
service lighttpd restart
|
|
dig fail01.dnssec.works @127.0.0.1 -p 5335
|
|
dig dnssec.works @127.0.0.1 -p 5335
|
|
exit
|
|
reboot
|
|
ln -s /var/log/nginx /var/www/html/log-nginx
|
|
ls -la /var/www/html
|
|
exit
|
|
cp ~/.bash_history /etc/bash_history_2024-07-25.txt
|
|
cat /etc/bash_history_2024-07-25.txt
|
|
exit
|
|
apt install smartmontools
|
|
smartctl -i /dev/sda
|
|
exit
|
|
reboot
|
|
apt install snapd -y
|
|
apt install sudo links unzip nginx git nano ncdu -y
|
|
snap install dashkiosk
|
|
apt install sudo links unzip nginx git nano ncdu -y
|
|
snap install ubuntu-frame wpe-webkit-mir-kiosk
|
|
snap set wpe-webkit-mir-kiosk daemon=true
|
|
snap set wpe-webkit-mir-kiosk url=http://localhost:9400/receiver
|
|
exit
|
|
wpe-webkit-mir-kiosk.cog http://localhost:9400/receiver
|
|
/snap/wpe-webkit-mir-kiosk/current/bin/setup.sh
|
|
wpe-webkit-mir-kiosk.cog http://localhost:9400/receiver
|
|
snap set ubuntu-frame daemon=true
|
|
exit
|
|
reboot
|
|
sudo -iu podman
|
|
chmod -R podman:podman /home/podman/.config/containers/systemd/
|
|
chown -R podman:podman /home/podman/.config/containers/systemd/
|
|
rm -R .config/containers/systemd/*.ignore
|
|
rm -R .config/containers/systemd/*.volume
|
|
rm -R .config/containers/systemd/*.container
|
|
rm -R /home/podman/.config/containers/systemd/*.ignore
|
|
rm -R /home/podman/.config/containers/systemd/*.volume
|
|
rm -R /home/podman/.config/containers/systemd/*.container
|
|
mkdir /home/podman/.ssh
|
|
cp /root/.ssh/authorized_keys /home/podman/.ssh/authorized_keys
|
|
chown podman:podman -R /home/podman
|
|
systemctl --user daemon-reload
|
|
sudo -iu podman
|
|
cd ~/
|
|
mkdir -p ~/.bashrc.d
|
|
echo "export XDG_RUNTIME_DIR=/run/user/$(id -u)" > ~/.bashrc.d/systemd
|
|
source ~/.bashrc.d/systemd
|
|
loginctl enable-linger 1002
|
|
podman ps -a
|
|
systemctl --user daemon-reload
|
|
podman image prune
|
|
podman volume prune
|
|
podman container prune
|
|
exit
|
|
shutdown now
|
|
ip a
|
|
lsof -i -P -n | grep LISTEN
|
|
apt-cache rdepends cockpit
|
|
apt install cockpit -y
|
|
passwd phares
|
|
apt-get install cockpit cockpit-podman -y
|
|
systemctl enable --now cockpit.socket
|
|
journalctl -fu unbound-resolvconf.service
|
|
ip a
|
|
service unbound restart
|
|
journalctl -fu unbound-resolvconf.service
|
|
nano /etc/sysctl.conf
|
|
sysctl -p
|
|
cat /proc/sys/net/ipv6/conf/all/disable_ipv6
|
|
exit
|
|
reboot
|
|
ip a
|
|
nano /etc/postfix/main.cf
|
|
nano /etc/default/grub
|
|
grub2-mkconfig
|
|
grub-mkconfig
|
|
exit
|
|
reboot
|
|
ip a
|
|
nmcli
|
|
dig pi-hole.net @127.0.0.1 -p 5335
|
|
dig fail01.dnssec.works @127.0.0.1 -p 5335
|
|
dig dnssec.works @127.0.0.1 -p 5335
|
|
systemctl is-active unbound-resolvconf.service
|
|
systemctl disable --now unbound-resolvconf.service
|
|
sed -Ei 's/^unbound_conf=/#unbound_conf=/' /etc/resolvconf.conf
|
|
service unbound restart
|
|
rm /etc/unbound/unbound.conf.d/resolvconf_resolvers.conf
|
|
systemctl disable --now unbound-resolvconf.service
|
|
exit
|
|
reboot\
|
|
reboot
|
|
sudo -iu podman
|
|
exit
|
|
reboot
|
|
sudo -iu podman
|
|
exit
|
|
reboot
|
|
sudo -iu podman
|
|
exit
|
|
shutdown now
|
|
lvs -a
|
|
lsblk -I 8 -o NAME,SIZE,TYPE,FSUSED,FSUSE%
|
|
smartctl -i /dev/sda
|
|
lsblk -I 8 -o NAME,SIZE,TYPE,FSUSED,FSUSE%
|
|
mkdir /mnt/usb
|
|
mount /dev/sdb2 /mnt/usb
|
|
exit
|
|
nginx -t
|
|
nginx -s reload
|
|
exit
|