mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-02-10 16:57:00 +08:00
2ceb0ffb47
In particular we check whether 255.255.255.254 is correctly and the expected IP is assigned to client.
37 lines
1.3 KiB
Plaintext
37 lines
1.3 KiB
Plaintext
FROM fedora:25
|
|
|
|
RUN yum install -y gnutls gnutls-utils protobuf-c iproute pcllib http-parser tcp_wrappers pam systemd libseccomp
|
|
RUN yum install -y bash openssh-server nuttcp
|
|
RUN yum install -y libnl3 libtalloc libev
|
|
RUN yum install -y procps-ng lz4 radcli liboauth oathtool
|
|
RUN yum install -y freeradius krb5-libs less bash
|
|
RUN yum update -y
|
|
RUN systemctl enable sshd
|
|
RUN sed 's/PermitRootLogin without-password/PermitRootLogin yes/g' -i /etc/ssh/sshd_config
|
|
|
|
RUN echo 'root:root' |chpasswd
|
|
RUN useradd -m -d /home/admin -s /bin/bash admin
|
|
RUN echo 'admin:admin' |chpasswd
|
|
|
|
RUN mkdir /etc/ocserv
|
|
|
|
|
|
ADD key.pem /etc/ocserv/
|
|
ADD cert.pem /etc/ocserv/
|
|
ADD ca.pem /etc/ocserv/
|
|
ADD ocserv-radius.conf /etc/ocserv/ocserv.conf
|
|
ADD radiusclient.conf /etc/radiusclient/
|
|
ADD radius-clients.conf /etc/raddb/clients.conf
|
|
ADD radiusclient-servers /etc/radiusclient/servers
|
|
ADD ocserv /usr/sbin/
|
|
ADD ocpasswd /usr/bin/
|
|
ADD occtl /usr/bin/
|
|
ADD myscript /usr/bin/
|
|
ADD freeradius-users /etc/raddb/users
|
|
ADD radius-dictionary /etc/radiusclient/dictionary
|
|
# It's not possible to use mknod inside a container with the default LXC
|
|
# template, so we untar it from this archive.
|
|
ADD dev-tun.tgz /dev/
|
|
|
|
CMD nuttcp -S;radiusd;sshd-keygen;/usr/sbin/sshd;mkdir -p /tmp/disconnect/;usr/sbin/ocserv -d 1 -f;sleep 3600
|