Update Linux/defaultSetup/linux_fresh.sh
This commit is contained in:
@@ -33,7 +33,7 @@ https://dl-cdn.alpinelinux.org/alpine/latest-stable/community
|
||||
EOF
|
||||
|
||||
apk update
|
||||
apk add --no-cache curl bash sudo python3 openssh-server
|
||||
apk add --no-cache curl bash sudo python3 openssh-server shadow
|
||||
|
||||
# Benutzer anlegen
|
||||
create_user_alpine
|
||||
@@ -83,17 +83,31 @@ create_user_alpine() {
|
||||
|
||||
# Gemeinsames Setup
|
||||
common_user_setup() {
|
||||
# Gruppe ssh-access anlegen, falls nicht vorhanden
|
||||
# Gruppe ssh-access anlegen
|
||||
if ! getent group "$GROUPNAME" >/dev/null; then
|
||||
printf "${BLUE}→ Lege Gruppe $GROUPNAME an${NC}\n"
|
||||
sudo groupadd "$GROUPNAME" || sudo addgroup "$GROUPNAME"
|
||||
case "$OS_ID" in
|
||||
alpine)
|
||||
sudo addgroup "$GROUPNAME"
|
||||
;;
|
||||
*)
|
||||
sudo groupadd "$GROUPNAME"
|
||||
;;
|
||||
esac
|
||||
fi
|
||||
|
||||
# Benutzer zur Gruppe hinzufügen
|
||||
# Benutzer der Gruppe hinzufügen
|
||||
printf "${BLUE}→ Füge Benutzer $USERNAME zur Gruppe $GROUPNAME hinzu${NC}\n"
|
||||
sudo usermod -aG "$GROUPNAME" "$USERNAME" || sudo adduser "$USERNAME" "$GROUPNAME"
|
||||
case "$OS_ID" in
|
||||
alpine)
|
||||
sudo addgroup "$USERNAME" "$GROUPNAME"
|
||||
;;
|
||||
*)
|
||||
sudo usermod -aG "$GROUPNAME" "$USERNAME"
|
||||
;;
|
||||
esac
|
||||
|
||||
# /etc/shadow entsperren
|
||||
# Benutzer entsperren, falls gesperrt
|
||||
printf "${YELLOW}→ Überprüfe ob Benutzer $USERNAME in /etc/shadow gesperrt ist${NC}\n"
|
||||
if sudo grep -E "^$USERNAME:(!+|\*+):" /etc/shadow >/dev/null; then
|
||||
printf "${YELLOW}→ Benutzer ist gesperrt, entsperre für SSH-Key-Login${NC}\n"
|
||||
@@ -102,7 +116,7 @@ common_user_setup() {
|
||||
printf "${GREEN}→ Benutzer ist nicht gesperrt${NC}\n"
|
||||
fi
|
||||
|
||||
# SSH-Verzeichnis und Key setzen
|
||||
# SSH-Verzeichnis & Key
|
||||
sudo mkdir -p /home/$USERNAME/.ssh
|
||||
echo "$SSH_KEY" | sudo tee /home/$USERNAME/.ssh/authorized_keys > /dev/null
|
||||
sudo chmod 700 /home/$USERNAME/.ssh
|
||||
|
||||
Reference in New Issue
Block a user