11 Commits

Author SHA1 Message Date
9081a57724 Vagrant 2022-09-14 17:29:38 +02:00
fb96e78a4b Haproxy 2022-09-14 15:41:48 +02:00
012407dd2e Scipt Install 2022-05-20 10:20:14 +02:00
7bdf92ee3f Push Installation WordPress 2022-05-12 08:36:23 +02:00
cf5a0c494f Merge branch 'master' of https://gitea.lyc-lecastel.fr/louis.depres/SioTP 2022-04-07 11:01:51 +02:00
12f3bb7c25 Lynis 2022-04-07 11:01:33 +02:00
38f30aa9ee Compte Rendu Bash 2022-03-29 10:22:23 +02:00
a312a6a773 Fichier commenté 2022-03-25 10:57:02 +01:00
a5451875f9 Fin TP Shell 2022-03-25 10:39:57 +01:00
4222c35a27 TP Shell Suite 2022-03-25 09:46:38 +01:00
59057cbb21 Supprimer 'Sio1/SISR1/40-ShellEtBash/crsamba5' 2022-03-25 09:33:11 +01:00
20 changed files with 7901 additions and 2 deletions

32
Sio1/AP22/installation.sh Executable file
View File

@ -0,0 +1,32 @@
glpirel="9.5.7"
dest=/var/www/html
apt update
apt install -y mariadb-server
apt install -y apache2 php php-mysql php-gd php-ldap php-mbstring php-curl php-xml php-imap php-apcu php-cas
wget -nc "https://github.com/glpi-project/glpi/releases/download/${glpirel}/glpi-${glpirel}.tgz"
tar xvfz glpi-${glpirel}.tgz -C ${dest}
cd ${dest}/glpi
chown -R www-data:www-data lib config plugins files
chown www-data:www-data ${dest}/glpi
cd ${dest}/glpi/plugins
wget -nc https://github.com/fusioninventory/fusioninventory-for-glpi/releases/download/glpi9.5%2B4.0/fusioninventory-9.5+4.0.tar.bz2
bzip2 -d fusioninventory-9.5+4.0.tar.bz2
tar xvf fusioninventory-9.5+4.0.tar
chown -R www-data:www-data ${dest}/glpi/plugins
mkdir ${dest}/ficlients
cd ${dest}/ficlients
#wget -nc https://github.com/fusioninventory/fusioninventory-agent/releases/download/2.5.2/fusioninventory-agent_windows-x86_2.5.2.exe
#wget -nc https://github.com/fusioninventory/fusioninventory-agent/releases/download/2.5.2/fusioninventory-agent_windows-x64_2.5.2.exe
wget -nc https://github.com/glpi-project/glpi-agent/releases/download/1.2/GLPI-Agent-1.2-x64.msi
chmod -R 755 ${dest}/ficlients
systemctl restart apache2

22
Sio1/AP22/installationword.sh Executable file
View File

@ -0,0 +1,22 @@
apt update
apt install -y mariadb-server
apt install -y apache2 php php-mysql php-gd php-ldap php-mbstring php-curl php-xml php-imap php-apcu php-cas
sudo systemctl restart apache2
sudo nano /etc/apache2/sites-available/wordpress.conf
sudo a2enmod rewrite
sudo apache2ctl configtest
sudo systemctl restart apache2
cd /tmp
wget -O https://fr.wordpress.org/latest-fr_FR.tar.gz
tar xzvf latest-fr_FR.tar.gz
touch /tmp/wordpress/.htaccess
cp /tmp/wordpress/wp-config-sample.php /tmp/wordpress/wp-config.php
mkdir /tmp/wordpress/wp-content/upgrade
sudo cp -a /tmp/wordpress/. /var/www/wordpress
sudo chown -R www-data:www-data /var/www/wordpress
wget https://api.wordpress.org/secret-key/1.1/salt/
sudo nano /var/www/wordpress/wp-config.php
cd /var/www/wordpress/
cp -r wordpress/ /var/www/html/
sudo find /var/www/html/wordpress/ -type d -exec chmod 750 {} \;
sudo find /var/www/html/wordpress/ -type f -exec chmod 640 {} \;

View File

@ -0,0 +1,157 @@
Script démarré sur 2022-03-29 10:18:18+02:00 [TERM="xterm-256color" TTY="/dev/pts/0" COLUMNS="90" LINES="33"]
[?2004hroot@TestBashShell:~/test# ls
[?2004l
CompteRenduBash crsamba4 crsamba8 rsamba users2.txt.pwd
crsamba1 crsamba5 crsambaFini SioTP users.txt
crsamba2 crsamba7 present users2.txt users.txt.pwd
[?2004hroot@TestBashShell:~/test# nano users.txt
[?2004l
[?2004h[?1049h(B[?7h[?1h=[?1h=[?25l(B(B[ Lecture... ](B(B[ Lecture de 4 lignes ](B(B GNU nano 5.4 users.txt (B
(B^G(B Aide(B^O(B Écrire(B^W(B Chercher (B^K(B Couper(B^T(B Exécuter (B^C(B Emplacement
(B^X(B Quitter (B^R(B Lire fich. (B^\(B Remplacer (B^U(B Coller(B^J(B Justifier (B^_(B Aller ligne
lucien:Lucien Dubois
claudine:Claudine Dupont
robert:Robert Dupond
marcelle:Marcelle Parde
[?12l[?25h[?25l[?12l[?25h[?1049l
[?1l>[?2004l[?2004hroot@TestBashShell:~/test# nano users.txt2.txt
[?2004l
[?2004h[?1049h(B[?7h[?1h=[?1h=[?25l(B(B[ Lecture... ](B(B[ Lecture de 10 lignes ](B(B GNU nano 5.4 users2.txt (B
(B^G(B Aide(B^O(B Écrire(B^W(B Chercher (B^K(B Couper(B^T(B Exécuter (B^C(B Emplacement
(B^X(B Quitter (B^R(B Lire fich. (B^\(B Remplacer (B^U(B Coller(B^J(B Justifier (B^_(B Aller ligne
# Salut
(Blucien:Lucien Dubois
#-_-_-_-_-_-_-_-_-_-_-_-
(Bclaudine:Claudine Dupont
robert:Robert Dupond
# , j
(Bmarcelle:Marcelle Parde
[?12l[?25h[?25l[?12l[?25h[?1049l
[?1l>[?2004l[?2004hroot@TestBashShell:~/test# ./crsambaFini users.txt
[?2004l
./crsambaFini : utilisateur lucien existe deja
./crsambaFini : utilisateur claudine existe deja
./crsambaFini : utilisateur robert existe deja
./crsambaFini : utilisateur marcelle existe deja
[?2004hroot@TestBashShell:~/test# /../rsamba users.txt
[?2004l
Utilisateur lucien supprime
Utilisateur claudine supprime
Utilisateur robert supprime
Utilisateur marcelle supprime
[?2004hroot@TestBashShell:~/test# ./rsamba users.txt[5@crsambaFini
[?2004l
[?2004hroot@TestBashShell:~/test# getent shadow
[?2004l
root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7:::
daemon:*:18872:0:99999:7:::
bin:*:18872:0:99999:7:::
sys:*:18872:0:99999:7:::
sync:*:18872:0:99999:7:::
games:*:18872:0:99999:7:::
man:*:18872:0:99999:7:::
lp:*:18872:0:99999:7:::
mail:*:18872:0:99999:7:::
news:*:18872:0:99999:7:::
uucp:*:18872:0:99999:7:::
proxy:*:18872:0:99999:7:::
www-data:*:18872:0:99999:7:::
backup:*:18872:0:99999:7:::
list:*:18872:0:99999:7:::
irc:*:18872:0:99999:7:::
gnats:*:18872:0:99999:7:::
nobody:*:18872:0:99999:7:::
_apt:*:18872:0:99999:7:::
systemd-timesync:*:18872:0:99999:7:::
systemd-network:*:18872:0:99999:7:::
systemd-resolve:*:18872:0:99999:7:::
messagebus:*:18873:0:99999:7:::
sshd:*:18873:0:99999:7:::
sio:$y$j9T$fhaQDQy5GkvNeuyxnf/Yg1$IrtSwszDRZ9g75BMk1wgcGfMPKMI6jQOD32pWNkSMV1:18873:0:99999:7:::
systemd-coredump:!*:18873::::::
lucien:$y$j9T$ZeC2TVITWi1AFpWvu3ylC0$CpoURwx6PVIzZv0bnRoKWYcnOn/t7whgwMV2PFgV/n7:19080:0:99999:7:::
claudine:$y$j9T$S.6tFvH9ipa06FfPCDT.w.$AaGIJ8b140oWbKnGoYyIux4VjdYFhTReqWKRlthK7h6:19080:0:99999:7:::
robert:$y$j9T$MkZBUpoUJbITG09pSIQrd/$rq.YwB083tDKS9Xl6SxOinfcbLenhOHJVFyujPS7gY6:19080:0:99999:7:::
marcelle:$y$j9T$Uzp89MzZ84TUx6XpEKmrJ0$AHeUnn5UsTmphkHdi3N/n16fcVYZvnvQpyRfnl.AMC4:19080:0:99999:7:::
[?2004hroot@TestBashShell:~/test# getent shadow./crsambaFini users.txtrsamba
[?2004l
Utilisateur lucien supprime
Utilisateur claudine supprime
Utilisateur robert supprime
Utilisateur marcelle supprime
[?2004hroot@TestBashShell:~/test# ./rsamba users.txtgetent shadow
[?2004l
root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7:::
daemon:*:18872:0:99999:7:::
bin:*:18872:0:99999:7:::
sys:*:18872:0:99999:7:::
sync:*:18872:0:99999:7:::
games:*:18872:0:99999:7:::
man:*:18872:0:99999:7:::
lp:*:18872:0:99999:7:::
mail:*:18872:0:99999:7:::
news:*:18872:0:99999:7:::
uucp:*:18872:0:99999:7:::
proxy:*:18872:0:99999:7:::
www-data:*:18872:0:99999:7:::
backup:*:18872:0:99999:7:::
list:*:18872:0:99999:7:::
irc:*:18872:0:99999:7:::
gnats:*:18872:0:99999:7:::
nobody:*:18872:0:99999:7:::
_apt:*:18872:0:99999:7:::
systemd-timesync:*:18872:0:99999:7:::
systemd-network:*:18872:0:99999:7:::
systemd-resolve:*:18872:0:99999:7:::
messagebus:*:18873:0:99999:7:::
sshd:*:18873:0:99999:7:::
sio:$y$j9T$fhaQDQy5GkvNeuyxnf/Yg1$IrtSwszDRZ9g75BMk1wgcGfMPKMI6jQOD32pWNkSMV1:18873:0:99999:7:::
systemd-coredump:!*:18873::::::
[?2004hroot@TestBashShell:~/test# getent shadow./rsamba users.txtgetent shadow./crsambaFini users.txtrsamba[5@crsambaFini2.txt
[?2004l
[?2004hroot@TestBashShell:~/test# ./crsambaFini users2.txtgetent shadow
[?2004l
root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7:::
daemon:*:18872:0:99999:7:::
bin:*:18872:0:99999:7:::
sys:*:18872:0:99999:7:::
sync:*:18872:0:99999:7:::
games:*:18872:0:99999:7:::
man:*:18872:0:99999:7:::
lp:*:18872:0:99999:7:::
mail:*:18872:0:99999:7:::
news:*:18872:0:99999:7:::
uucp:*:18872:0:99999:7:::
proxy:*:18872:0:99999:7:::
www-data:*:18872:0:99999:7:::
backup:*:18872:0:99999:7:::
list:*:18872:0:99999:7:::
irc:*:18872:0:99999:7:::
gnats:*:18872:0:99999:7:::
nobody:*:18872:0:99999:7:::
_apt:*:18872:0:99999:7:::
systemd-timesync:*:18872:0:99999:7:::
systemd-network:*:18872:0:99999:7:::
systemd-resolve:*:18872:0:99999:7:::
messagebus:*:18873:0:99999:7:::
sshd:*:18873:0:99999:7:::
sio:$y$j9T$fhaQDQy5GkvNeuyxnf/Yg1$IrtSwszDRZ9g75BMk1wgcGfMPKMI6jQOD32pWNkSMV1:18873:0:99999:7:::
systemd-coredump:!*:18873::::::
lucien:$y$j9T$/w5UzDIy4Ya9jSySl6mPn.$I59QPyDLLGXu0USyvHgqgoJlF/rcjcAYOWxVO703Hq5:19080:0:99999:7:::
claudine:$y$j9T$UyQDXKp5P6mbHgKqJeYC41$LqUl1NewksM4aOZgnFMPPhMpd/hFKfPa9ByhnMHgfND:19080:0:99999:7:::
robert:$y$j9T$Vwc34rv0bYLl56bB1iplP0$Cu4dYpt9MUugy8M.0kYlwa5skwR8qnDbPqpIzYVjra7:19080:0:99999:7:::
marcelle:$y$j9T$hEIMX3JYqvmkpUKHs9Z4O.$wFWYxPGAK2GNDLw9NYffNeWG2s4bPMFvkFgSzf4xLo2:19080:0:99999:7:::
[?2004hroot@TestBashShell:~/test# getent shadow./crsambaFini users2.txtgetent shadow./rsamba users.txt2.txt
[?2004l
Utilisateur lucien supprime
Utilisateur claudine supprime
Utilisateur robert supprime
Utilisateur marcelle supprime
[?2004hroot@TestBashShell:~/test# ./rsamba users2.txtgetent shadow
[?2004l
root:$y$j9T$TIAC5HDqvZSDu2CnCrCXV/$7rE1hZJr4Q4SyNu80hF9dbsNPHZBFjjsh0wxJnbZRI5:18873:0:99999:7:::
daemon:*:18872:0:99999:7:::
bin:*:18872:0:99999:7:::
sys:*:18872:0:99999:7:::
sync:*:18872:0:99999:7:::
games:*:18872:0:99999:7:::

Submodule Sio1/SISR1/40-BashEtShell/SioTP added at b7be885670

View File

@ -0,0 +1,35 @@
#!/bin/bash
#set -e
#set -u
if [[ $# -ne 1 ]] ; then
echo "usage : $0 <fichier>"
exit 1
fi
if [[ ! -r "$1" ]] ; then
echo "$0 : erreur ouverture ${fich}"
exit 2
fi
fich=$1
while read ligne
do
echo "$ligne" | grep "^#" >> /dev/null && continue
[[ -z "$ligne" ]] && continue
login=$(echo "${ligne}"|cut -d: -f1)
nom=$(echo "${ligne}"|cut -d: -f2)
#echo "${login} ${nom}"
getent passwd "${login}" >> /dev/null
if [[ $? -ne 0 ]] ; then
sudo useradd --create-home --home-dir /home/"${login}" --shell /bin/bash --comment "${nom}" "${login}"
mdp=$(pwgen 6 1)
#echo "${mdp}"
echo "${login}:${mdp}"|chpasswd
echo "${login}:${mdp}" >> "${fich}.pwd"
else
echo "$0 : utilisateur ${login} existe deja"
fi
done < $fich

View File

@ -0,0 +1,34 @@
#!/bin/bash
#set -e
#set -u
if [[ $# -ne 1 ]] ; then
echo "usage : $0 <fichier>" #nombre de paramètre != 1 on sort du programme.
exit 1
fi
if [[ ! -r "$1" ]] ; then
echo "$0 : erreur ouverture ${fich}" # erreur ouverture du fichier on sort du programme.
exit 2
fi
fich=$1
while read ligne #lecture par ligne du fichier
do
echo "$ligne" | grep "^#" >> /dev/null && continue #ignore les ligne commentes dans le fichier
[[ -z "$ligne" ]] && continue #ignore les lignes vides
login=$(echo "${ligne}"|cut -d: -f1) #recuperation login
nom=$(echo "${ligne}"|cut -d: -f2) #recuperation nom long
#echo "${login} ${nom}"
getent passwd "${login}" >> /dev/null
if [[ $? -ne 0 ]] ; then # si utilisateur inexistant on peut creer
sudo useradd --create-home --home-dir /home/"${login}" --shell /bin/bash --comment "${nom}" "${login}" # creation utilisateur
mdp=$(pwgen 6 1) # creation mot de passe
#echo "${mdp}"
echo "${login}:${mdp}"|chpasswd #affectation mot de passe utilisateur
echo "${login}:${mdp}" >> "${fich}.pwd" #stocke mot de passe dans fichier
else
echo "$0 : utilisateur ${login} existe deja"
fi
done < $fich

View File

@ -0,0 +1,12 @@
#!/bin/bash
#set -e
set -u
qui=$1
who |grep "^${qui}" >> /dev/null
if [[ $? -eq 0 ]] ; then
echo "${qui} est connecte"
else
echo "${qui} n'est pas connecte"
fi
exit 0

View File

@ -1,4 +1,4 @@
lucien:Lucien Aymar
lucien:Lucien Dubois
claudine:Claudine Dupont
robert:Robert Michel
robert:Robert Dupond
marcelle:Marcelle Parde

View File

@ -0,0 +1,10 @@
# Salut
lucien:Lucien Dubois
#-_-_-_-_-_-_-_-_-_-_-_-
claudine:Claudine Dupont
robert:Robert Dupond
# , j
marcelle:Marcelle Parde

View File

@ -0,0 +1,16 @@
lucien:oi6ooG
claudine:Aru6Vi
robert:ooGa5c
marcelle:lau7Eu
lucien:ca2liJ
claudine:Quoo6o
robert:LooKi9
marcelle:Iegh3b
lucien:Wah4fu
claudine:Yae3th
robert:phi1Is
marcelle:Bip8Sh
lucien:ja1EeS
claudine:za1voG
robert:UMieM3
marcelle:Emix6X

7464
Sio1/SISR1/lynis.log Normal file

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,46 @@
global
log /dev/log local0
log /dev/log local1 notice
chroot /var/lib/haproxy
stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners
stats timeout 30s
user haproxy
group haproxy
daemon
# Default SSL material locations
ca-base /etc/ssl/certs
crt-base /etc/ssl/private
# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate
ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets
defaults
log global
mode http
option httplog
option dontlognull
timeout connect 5000
timeout client 50000
timeout server 50000
errorfile 400 /etc/haproxy/errors/400.http
errorfile 403 /etc/haproxy/errors/403.http
errorfile 408 /etc/haproxy/errors/408.http
errorfile 500 /etc/haproxy/errors/500.http
errorfile 502 /etc/haproxy/errors/502.http
errorfile 503 /etc/haproxy/errors/503.http
errorfile 504 /etc/haproxy/errors/504.http
frontend rserve_frontend
bind 192.168.0.44:80
# mode tcp
# option tcplog
# timeout client 1m
default_backend rserve_backend
backend rserve_backend
server rserve1 172.16.1.1:80 check
server rserve2 172.16.1.2:80 check

70
Sio2/Vagrantfile vendored Normal file
View File

@ -0,0 +1,70 @@
# -*- mode: ruby -*-
# vi: set ft=ruby :
# All Vagrant configuration is done below. The "2" in Vagrant.configure
# configures the configuration version (we support older styles for
# backwards compatibility). Please don't change it unless you know what
# you're doing.
Vagrant.configure("2") do |config|
# The most common configuration options are documented and commented below.
# For a complete reference, please see the online documentation at
# https://docs.vagrantup.com.
# Every Vagrant development environment requires a box. You can search for
# boxes at https://vagrantcloud.com/search.
config.vm.box = "debian/bullseye64"
# Disable automatic box update checking. If you disable this, then
# boxes will only be checked for updates when the user runs
# `vagrant box outdated`. This is not recommended.
# config.vm.box_check_update = false
# Create a forwarded port mapping which allows access to a specific port
# within the machine from a port on the host machine. In the example below,
# accessing "localhost:8080" will access port 80 on the guest machine.
# NOTE: This will enable public access to the opened port
config.vm.network "forwarded_port", guest: 80, host: 2080
# Create a forwarded port mapping which allows access to a specific port
# within the machine from a port on the host machine and only allow access
# via 127.0.0.1 to disable public access
# config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
# Create a private network, which allows host-only access to the machine
# using a specific IP.
# config.vm.network "private_network", ip: "192.168.33.10"
# Create a public network, which generally matched to bridged network.
# Bridged networks make the machine appear as another physical device on
# your network.
# config.vm.network "public_network"
# Share an additional folder to the guest VM. The first argument is
# the path on the host to the actual folder. The second argument is
# the path on the guest to mount the folder. And the optional third
# argument is a set of non-required options.
# config.vm.synced_folder "../data", "/vagrant_data"
# Provider-specific configuration so you can fine-tune various
# backing providers for Vagrant. These expose provider-specific options.
# Example for VirtualBox:
#
config.vm.provider "virtualbox" do |vb|
# # Display the VirtualBox GUI when booting the machine
# vb.gui = true
#
# # Customize the amount of memory on the VM:
vb.memory = "1024"
end
#
# View the documentation for the provider you are using for more
# information on available options.
# Enable provisioning with a shell script. Additional provisioners such as
# Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
# documentation for more information about their specific syntax and use.
config.vm.provision "shell", inline: <<-SHELL
apt-get update
apt-get install -y apache2 nano
SHELL
end