| # debian.sh --arch 'amd64' out/ 'trixie' '@1765152000' |
| ENV DEBIAN_FRONTEND=noninteractive |
| RUN /bin/sh -c apt-get update && apt-get upgrade -y && apt-get install -y bash ca-certificates curl cron git iptables iproute2 openssh-server openssl python3 python3-venv sudo nano btop gdu systemd systemd-sysv dbus ifupdown iputils-ping dnsutils unattended-upgrades && apt-get clean && rm -rf /var/lib/apt/lists/* # buildkit |
| COPY install-docker.sh /usr/local/bin/install-docker # buildkit |
| RUN /bin/sh -c chmod +x /usr/local/bin/install-docker # buildkit |
| COPY install-incus.sh /usr/local/bin/install-incus # buildkit |
| RUN /bin/sh -c chmod +x /usr/local/bin/install-incus # buildkit |
| RUN /bin/sh -c echo "Install scripts available with install-docker and install-incus, maybe more" > /root/README.txt # buildkit |
| RUN /bin/sh -c curl -fsSL https://tailscale.com/install.sh | sh # buildkit |
| RUN /bin/sh -c curl https://getcroc.schollz.com | bash # buildkit |
| RUN /bin/sh -c mkdir -p /etc/apt/keyrings && curl -fsSL https://pkgs.zabbly.com/key.asc -o /etc/apt/keyrings/zabbly.asc && echo "deb [signed-by=/etc/apt/keyrings/zabbly.asc] https://pkgs.zabbly.com/incus/stable $(. /etc/os-release && echo ${VERSION_CODENAME}) main" > /etc/apt/sources.list.d/zabbly-incus-stable.list && apt-get update && apt-get install -y incus-agent && apt-get clean && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/sh -c systemctl enable ssh # buildkit |
| RUN /bin/sh -c systemctl enable cron # buildkit |
| RUN /bin/sh -c systemctl enable unattended-upgrades # buildkit |
| RUN /bin/sh -c systemctl enable incus-agent || true # buildkit |
| RUN /bin/sh -c systemctl enable tailscaled || true # buildkit |
| RUN /bin/sh -c ssh-keygen -A # buildkit |
| RUN /bin/sh -c printf 'auto lo\niface lo inet loopback\n\nauto eth0\niface eth0 inet dhcp\n' > /etc/network/interfaces # buildkit |
| RUN /bin/sh -c mkdir -p /root/.ssh && printf 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEFdTFM5ZbGytRp8orRu4cK+kLcQdPFVKqaN0iNVlp2p slothington\n' >> /root/.ssh/authorized_keys && printf 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILPfTPAUFhNV2O032ZsmKTFuNZgQtWhMPYlHqcKycAG8 forgejo-hbms\n' >> /root/.ssh/authorized_keys && chmod 600 /root/.ssh/authorized_keys && chmod 700 /root/.ssh # buildkit |
| RUN /bin/sh -c mkdir -p /etc/docker && printf '{\n "bip": "192.168.100.1/24"\n}\n' > /etc/docker/daemon.json # buildkit |
| RUN /bin/sh -c printf 'root ALL=(ALL) NOPASSWD:ALL\n' > /etc/sudoers.d/00-root-nopasswd && chmod 0440 /etc/sudoers.d/00-root-nopasswd # buildkit |
| EXPOSE [22/tcp] |
| CMD ["/sbin/init"] |
