github/vim-ale
1
0
Fork 0
mirror of https://github.com/webinstall/webi-installers.git synced 2026-08-23 22:16:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

switch user 'me' => 'app'

Browse Source
This commit is contained in:
AJ ONeal
2020-06-29 07:08:45 +00:00
parent 94d013649b
commit 3203e51fea
3 changed files with 40 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ssh-utils/README.md
+2 -2
View File
@@ -25,9 +25,9 @@ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTOhRnzDJNBNBXVCgkxkEaDM4IAp81MtE8fuqeQuFv
**ssh-adduser**:
Many modern web programs (`npm` and `postgres`, for example) will not function
correctly if run as root. `ssh-adduser` adds user `me` with the same
correctly if run as root. `ssh-adduser` adds user `app` with the same
**`~/.ssh/authorized_keys`** as the `root` user, with a long random password,
and gives `me` `sudo` privileges.
and gives `app` `sudo` privileges.
**ssh-setpass**:
ssh-utils/ssh-adduser.sh
+22 -22
View File
@@ -15,34 +15,34 @@
#apt-get -y update
#apt-get -y install curl wget rsync git
# Add User
# TODO: might there be a better name?
# me, this, user, self, person, i, who, do, tron
adduser --disabled-password --gecos "" me
# Add User app
# Picking 'app' because that seems to be what the # Docker/Vagrant
# crowd is doing. TODO: Other ideas? me, user, tron
adduser --disabled-password --gecos "" app
my_password=$(openssl rand -hex 16)
printf "$my_password"'\n'"$my_password" | passwd me
printf "$my_password"'\n'"$my_password" | passwd app
# make 'me' a sudo-er (admin)
adduser me sudo
echo "me ALL=(ALL:ALL) NOPASSWD: ALL" | tee /etc/sudoers.d/me
# make 'app' a sudo-er (admin)
adduser app sudo
echo "app ALL=(ALL:ALL) NOPASSWD: ALL" | tee /etc/sudoers.d/app
# allow users who can already login as 'root' to login as 'me'
mkdir -p /home/me/.ssh/
chmod 0700 /home/me/.ssh/
cp -r "$HOME/.ssh/authorized_keys" /home/me/.ssh/
chmod 0600 /home/me/.ssh/authorized_keys
touch /home/me/.ssh/config
chmod 0644 /home/me/.ssh/config
chown -R me:me /home/me/.ssh/
# allow users who can already login as 'root' to login as 'app'
mkdir -p /home/app/.ssh/
chmod 0700 /home/app/.ssh/
cp -r "$HOME/.ssh/authorized_keys" /home/app/.ssh/
chmod 0600 /home/app/.ssh/authorized_keys
touch /home/app/.ssh/config
chmod 0644 /home/app/.ssh/config
chown -R app:app /home/app/.ssh/
# ensure that 'me' has an SSH Keypair
sudo -i -u me bash -c 'ssh-keygen -b 2048 -t rsa -f /home/me/.ssh/id_rsa -q -N ""'
# ensure that 'app' has an SSH Keypair
sudo -i -u app bash -c 'ssh-keygen -b 2048 -t rsa -f /home/app/.ssh/id_rsa -q -N ""'
# Install webi for the new 'me' user
sudo -i -u me bash -c 'curl -fsSL https://webinstall.dev/webi | bash' \
|| sudo -i -u me bash -c 'wget -q -O - https://webinstall.dev/webi | bash'
# Install webi for the new 'app' user
sudo -i -u app bash -c 'curl -fsSL https://webinstall.dev/webi | bash' \
|| sudo -i -u app bash -c 'wget -q -O - https://webinstall.dev/webi | bash'
# TODO ensure that ssh-password login is off
echo "Created user 'me' with password '$my_password'"
echo "Created user 'app' with password '$my_password'"
}