#! Shell Server

https://github.com/hashbang/shell-server

About

This is the central build and management repository for #! shell servers.

It should contain everything required to run your own #! shell server, or to develop changes to be deployed to all existing deployed servers.

Existing servers automatically update from this repo via ansible-pull.

Requirements

Tool	Version	Needed for Builder
Ansible	v2.5+	all
Packer	v1.3x+	all
Docker	v18.0+	Docker
qemu	v2.12+	qemu, libvirt
Virtualbox	v5.2+	virtualbox, vagrant
Vagrant	v2.1.1+	vagrant
Linux	v4.16+	lxc, libvirt
lxc	v3.0+	lxc

Building

You will normally need a #! account to use these, as they authenticate users against our NSS services by default.

Docker

Build image

make docker

Import image

docker import .packer/build/docker/docker.tar hashbang/shell-server:local-latest

Start container

docker run \
-it \
--rm \
--name shell-server \
-p 8080:80 \
-p 4443:443 \
-p 2222:22 \
-v /sys/fs/cgroup:/sys/fs/cgroup:ro \
--stop-signal SIGRTMIN+3 \
--cap-add SYS_ADMIN \
--cap-add SYS_RESOURCE \
--security-opt apparmor=unconfined \
--security-opt seccomp=unconfined \
hashbang/shell-server:local-latest \
/lib/systemd/systemd

User shell

ssh -p2222 your-hashbang-user@localhost

Root shell

docker exec -it shell-server bash

LXC

Build image

make lxc

User shell

TODO

Root shell

TODO

Vagrant

Build Image

make vagrant

Start server

vagrant init hashbang/shell-server
vagrant up

User shell

ssh -p2222 your-hashbang-user@localhost

Root shell

vagrant ssh

Libvirt

Build Image

make qemu

Start server

virt-install \
--name shell-server \
--os-type linux \
--os-variant debian9 \
--ram 512 \
--vcpus 2 \
--disk path=.packer/build/qemu/packer-qemu \ # no file extension
--network user \
--noautoconsole \
--import \
--force

User shell

virsh --connect qemu+ssh://username@shell-server/system

Root shell

TODO

Qemu

Build Image

make qemu

Start server

qemu-system-x86_64 \
-m 512M \
-machine type=pc,accel=kvm \
-net nic -net user,hostfwd=tcp::2222-:22 \
-drive format=qcow2,file=.packer/build/qemu/packer-qemu # no file extension

User shell

TODO

Root shell

TODO

Development

Once you have root access on a development debian server be it local or remote, you can test your locally made ansible playbook changes as follows.

Run Ansible Playbook

ansible-playbook \
-u root \
-i "localhost," \
-e ansible_ssh_port=2222 \
ansible/main.yml

Deployment

Kubernetes

TODO

Amazon

TODO

DigitalOcean

TODO

Google Cloud

TODO

Azure

TODO

Bare Metal

ansible-playbook -u root -i "target-server.com," ansible/main.yml

Releasing

1. Copy config sample and populate with your credentials as desired:

   cp config.sample.json config.json
   vim config.json

2. Build, sign, and publish all image types

   make build release