typo

README.md

@@ -1,6 +1,6 @@
 # vagrant
 
-le 2022-12-04
+le 2023-01-17
 
 Ce dépôt héberge des **Vagrantfile** dont
   * **docker**
@@ -12,6 +12,7 @@ Ce dépôt héberge des **Vagrantfile** dont
   * **docker-traefik-nginx**
   * **docker-elk**
   * **devstack**
+  * **guacamole** : Vagrantfile pour Apache Guacamole dockerise sans frontal
   * **k8s** : kubernetes 1.26.00 + playbook pour master **k8s-master** et 2 noeuds **node-1** et **node-2**
   * **minione**
   * **rundeck** : Vagrantfile + playbook pour installation avec Mariadb

guacamole/README.md

@@ -0,0 +1,10 @@
+# Guacamole
+
+**Apache Guacamole** est un outil permettant les connexions à distance (RDP, SSH, VNC, ...) via une interface web.
+
+Il est mis en oeuvre (Version 1.4.0) ici avec une **Vagrantfile**, docker et mariadb en accès direct hTTP sans proxy. 
+
+**Acces** : http://<adresse-IP>:8080/guacamole  avec **guacadmin/guacadmin**
+
+le 2023-01-17
+

guacamole/Vagrantfile

@@ -0,0 +1,71 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bullseye64"
+  config.vm.hostname = "guacamole"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine. In the example below,
+  # accessing "localhost:8080" will access port 80 on the guest machine.
+  # NOTE: This will enable public access to the opened port
+  # config.vm.network "forwarded_port", guest: 80, host: 8080
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine and only allow access
+  # via 127.0.0.1 to disable public access
+  # config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
+
+  # Create a private network, which allows host-only access to the machine
+  # using a specific IP.
+  # config.vm.network "private_network", ip: "192.168.33.10"
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+   config.vm.network "public_network"
+
+  # Share an additional folder to the guest VM. The first argument is
+  # the path on the host to the actual folder. The second argument is
+  # the path on the guest to mount the folder. And the optional third
+  # argument is a set of non-required options.
+  # config.vm.synced_folder "../data", "/vagrant_data"
+
+  # Provider-specific configuration so you can fine-tune various
+  # backing providers for Vagrant. These expose provider-specific options.
+  # Example for VirtualBox:
+  #
+   config.vm.provider "virtualbox" do |vb|
+     vb.memory = "2048"
+   end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+  # config.vm.provision "shell", inline: <<-SHELL
+  #   apt-get update
+  #   apt-get install -y apache2
+  # SHELL
+   config.vm.provision "shell" do |s|
+     s.path = "provision/setup.sh"
+   end
+
+end

guacamole/provision/setup.sh

@@ -0,0 +1,76 @@
+#!/bin/bash
+rep="guacamole"
+
+apt-get update
+apt-get install -y curl wget vim
+
+if ! which docker ; then
+       curl -s -o getdocker.sh https://get.docker.com
+       bash getdocker.sh
+       gpasswd -a vagrant docker
+fi
+
+[[ -e "$rep" ]] || mkdir "$rep"
+
+cd "$rep" || exit 1
+
+cat > docker-compose.yml <<EOT
+version: '3'
+services:
+
+  guacdb:
+    container_name: guacdb
+    image: mariadb/server:latest
+    restart: unless-stopped
+    environment:
+      MYSQL_ROOT_PASSWORD: 'MariaDBRootPSW'
+      MYSQL_DATABASE: 'guacamole_db'
+      MYSQL_USER: 'guacamole_user'
+      MYSQL_PASSWORD: 'MariaDBUserPSW'
+    volumes:
+      - 'guacdb-data:/var/lib/mysql'
+      - ./initdb:/docker-entrypoint-initdb.d
+
+  guacd:
+    container_name: guacd
+    image: guacamole/guacd
+    restart: unless-stopped
+
+  guacamole:
+    container_name: guacamole
+    image: 'guacamole/guacamole:latest'
+    restart: unless-stopped
+    ports:
+      - '8080:8080'
+    environment:
+      GUACD_HOSTNAME: "guacd"
+      MYSQL_HOSTNAME: "guacdb"
+      MYSQL_DATABASE: "guacamole_db"
+      MYSQL_USER: "guacamole_user"
+      MYSQL_PASSWORD: "MariaDBUserPSW"
+    depends_on:
+      - guacdb
+      - guacd
+
+volumes:
+  guacdb-data:
+EOT
+
+
+docker compose pull
+# creation fichiers initialisation mariadb
+[[ -e "initdb" ]] || mkdir "initdb"
+cat > initdb/01-initdb.sql <<EOT
+CREATE DATABASE IF NOT EXISTS guacamole_db;
+EOT
+
+echo "USE guacamole_db ;" > initdb/02-initdb.sql
+docker run --rm guacamole/guacamole /opt/guacamole/bin/initdb.sh --mysql >> initdb/02-initdb.sql
+cat > initdb/03-initdb.sql <<EOT
+CREATE USER IF NOT EXISTS 'guacamole_user'@'%' IDENTIFIED BY 'StrongPassw0rd';
+GRANT SELECT,INSERT,UPDATE,DELETE ON guacamole_db.* TO 'guacamole_user'@'%';
+FLUSH PRIVILEGES;
+EOT
+docker compose up -d
+
+

journald-remote/Vagrantfile

@@ -0,0 +1,39 @@
+IMAGE_NAME = "debian/bullseye64"
+N =2 
+node_ip = "192.168.56.10"
+Vagrant.configure("2") do |config|
+    config.ssh.insert_key = false
+
+    config.vm.provider "virtualbox" do |v|
+        v.memory = 512
+        v.cpus = 1
+    end
+      
+    config.vm.define "journald-rcv" do |master|
+        master.vm.box = IMAGE_NAME
+        master.vm.network "private_network", ip: "192.168.56.10"
+        master.vm.hostname = "journald-rcv"
+        master.vm.provision "shell" do |shell|
+            shell.path = "journald-rcv.sh"
+	end
+#         master.vm.provision "ansible" do |ansible|
+#            ansible.playbook = "kubernetes-setup/master-playbook.yml"
+#            ansible.extra_vars = {
+#                node_ip: "192.168.56.10",
+#            }
+#        end
+    end
+
+    (1..N).each do |i|
+        config.vm.define "journald-snd-#{i}" do |node|
+            node.vm.box = IMAGE_NAME
+            node.vm.network "private_network", ip: "192.168.56.#{i + 10}"
+            node.vm.hostname = "journald-snd-#{i}"
+            node.vm.provision "shell" do |shell|
+                shell.path = "journald-snd.sh"
+                shell.args  = node_ip
+            end
+        end
+    end
+end
+

journald-remote/journald-rcv.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+sudo apt-get update
+sudo apt-get install -y systemd-journal-remote
+sudo systemctl enable systemd-journal-remote.socket
+
+
+sudo cp /lib/systemd/system/systemd-journal-remote.service /etc/systemd/system
+
+sudo sed -i 's/--listen-https=-3/--listen-http=-3/' /etc/systemd/system/systemd-journal-remote.service
+
+[[ -d /var/log/journal/remote ]] || sudo mkdir /var/log/journal/remote
+sudo chown systemd-journal-remote /var/log/journal/remote
+
+sudo systemctl daemon-reload
+sudo ss -lntp4
+
+

journald-remote/journald-snd.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+sudo apt-get update
+sudo apt-get install -y systemd-journal-remote
+rpl="s/^# URL=/URL=http:\/\/${1}:19532/"
+sudo sed -i "$rpl" /etc/systemd/journal-upload.conf
+
+sudo systemctl enable systemd-journal-upload.service
+sudo systemctl restart systemd-journal-upload.service

semaphore/Vagrantfile

@@ -0,0 +1,75 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below. The "2" in Vagrant.configure
+# configures the configuration version (we support older styles for
+# backwards compatibility). Please don't change it unless you know what
+# you're doing.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "debian/bullseye64"
+  config.vm.hostname = "semaphore"
+
+  # Disable automatic box update checking. If you disable this, then
+  # boxes will only be checked for updates when the user runs
+  # `vagrant box outdated`. This is not recommended.
+  # config.vm.box_check_update = false
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine. In the example below,
+  # accessing "localhost:8080" will access port 80 on the guest machine.
+  # NOTE: This will enable public access to the opened port
+  # config.vm.network "forwarded_port", guest: 80, host: 8080
+
+  # Create a forwarded port mapping which allows access to a specific port
+  # within the machine from a port on the host machine and only allow access
+  # via 127.0.0.1 to disable public access
+  # config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
+
+  # Create a private network, which allows host-only access to the machine
+  # using a specific IP.
+  # config.vm.network "private_network", ip: "192.168.33.10"
+
+  # Create a public network, which generally matched to bridged network.
+  # Bridged networks make the machine appear as another physical device on
+  # your network.
+  config.vm.network "public_network"
+
+  # Share an additional folder to the guest VM. The first argument is
+  # the path on the host to the actual folder. The second argument is
+  # the path on the guest to mount the folder. And the optional third
+  # argument is a set of non-required options.
+  # config.vm.synced_folder "../data", "/vagrant_data"
+
+  # Provider-specific configuration so you can fine-tune various
+  # backing providers for Vagrant. These expose provider-specific options.
+  # Example for VirtualBox:
+  #
+  # config.vm.provider "virtualbox" do |vb|
+  #   # Display the VirtualBox GUI when booting the machine
+  #   vb.gui = true
+  #
+  #   # Customize the amount of memory on the VM:
+  #   vb.memory = "1024"
+  # end
+  #
+  # View the documentation for the provider you are using for more
+  # information on available options.
+
+  # Enable provisioning with a shell script. Additional provisioners such as
+  # Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
+  # documentation for more information about their specific syntax and use.
+   config.vm.provision "shell", inline: <<-SHELL
+     apt-get update
+     apt-get install -y vim wget curl
+   SHELL
+   config.vm.provision "ansible" do |ansible|
+       ansible.playbook = "semaphore.yml"
+   end
+
+end

semaphore/semaphore.yml

@@ -0,0 +1,55 @@
+---
+- hosts: all
+  become: true
+  tasks:
+
+  - name: Installe paquets  git et ansible
+    apt:
+      name:
+        - git
+        - ansible
+      state: present
+
+  - name: Recupere paquet semaphore
+    get_url:
+      url: https://github.com/ansible-semaphore/semaphore/releases/download/v2.8.75/semaphore_2.8.75_linux_amd64.deb
+      dest: /tmp/
+
+  - name: Installie paquet semaphore
+    apt:
+      deb: semaphore_2.8.75_linux_amd64.deb
+
+  - name: cree repert /etc/semaphore
+    file:
+      path: /etc/semaphore
+      state: directory
+      mode: '0755'
+
+  - name: constitution fichier semaphore.service
+    blockinfile:
+      path: /etc/systemd/system/semaphore.service
+      mode: '0644'
+      create: yes
+      block: |
+        [Unit]
+        Description=Semaphore Ansible
+        Documentation=https://github.com/ansible-semaphore/semaphore
+        Wants=network-online.target
+        After=network-online.target
+
+        [Service]
+        Type=simple
+        ExecReload=/bin/kill -HUP $MAINPID
+        ExecStart=/usr/bin/semaphore service --config=/etc/semaphore/config.json
+        SyslogIdentifier=semaphore
+        Restart=always
+
+        [Install]
+        WantedBy=multi-user.target
+
+  - name: reload daemon-reload
+    service:
+      name: semaphore
+      state: started
+      enabled: yes
+