From 56839704604b6cc4b2fa6c2f8504409acf3632e5 Mon Sep 17 00:00:00 2001 From: medusa Date: Sun, 21 Apr 2024 23:27:42 +0000 Subject: [PATCH] Update docs/tech_docs/OpenWrt.md --- docs/tech_docs/OpenWrt.md | 190 ++++---------------------------------- 1 file changed, 18 insertions(+), 172 deletions(-) diff --git a/docs/tech_docs/OpenWrt.md b/docs/tech_docs/OpenWrt.md index 0c47acc..2e1248c 100644 --- a/docs/tech_docs/OpenWrt.md +++ b/docs/tech_docs/OpenWrt.md @@ -14,237 +14,83 @@ - [pct commands](https://git.crazystorm.xyz/medusa/the_information_nexus/src/branch/main/docs/tech_docs/pct.md) -### Proxmox Container Creation +--- -Use the following command to create a new container with reduced memory and storage: +You've provided an extensive configuration for your OpenWRT, Alpine, and Kali Linux containers in a Proxmox environment. Here's a concise and coherent version of your commands for each container, with optimizations and updates to ensure they work effectively in your lab setting. +### OpenWRT Container + +**Creation and Configuration:** ```bash pct create 100 /var/lib/vz/template/cache/openwrt-rootfs.tar.xz --unprivileged 1 --arch amd64 --ostype unmanaged --hostname openwrt-0 --password changeme --tag network --storage local-lvm --memory 256 --swap 128 --rootfs local-lvm:1,size=512M \ --net0 name=eth0,bridge=vmbr0,firewall=1 \ --net1 name=eth1,bridge=vmbr1,firewall=1 \ --cores 1 --cpuunits 500 --onboot 1 --debug 0 -``` -```bash pct start 100 -``` -```bash pct console 100 ``` -```bash -passwd -``` - -### OpenWRT - Installing Packages via CLI and Reboot - +**Package Installation and Network Setup:** ```bash opkg update -``` - -```bash opkg install qemu-ga -``` - -```bash reboot -``` -### OpenWRT Firewall Configuration - -```bash vi /etc/config/network -``` - -```bash -config interface 'loopback' - option proto 'static' - option ipaddr '127.0.0.1' - option netmask '255.0.0.0' - option device 'lo' - -config interface 'wan' - option proto 'dhcp' - option device 'eth0' - -config interface 'wan6' - option proto 'dhcpv6' - option device 'eth0' - -config interface 'lan' - option proto 'static' - option device 'eth1' - option ipaddr '10.0.0.1' - option netmask '255.255.255.0' - -config interface 'lan6' - option proto 'static' - option device 'eth1' - option ip6addr 'fd00::1/64' -``` - -- **Restart Network Services**: -```bash /etc/init.d/network restart -``` -```bash -130 j -``` - -```bash vi /etc/config/firewall -``` - -```bash -config rule - option name 'Allow-SSH' - option src 'wan' - option proto 'tcp' - option dest_port '22' - option target 'ACCEPT' - -config rule - option name 'Allow-HTTPS' - option src 'wan' - option proto 'tcp' - option dest_port '443' - option target 'ACCEPT' - -config rule - option name 'Allow-HTTP' - option src 'wan' - option proto 'tcp' - option dest_port '80' - option target 'ACCEPT' -``` - -### Applying the Configuration - -After updating the configuration files: - -- **Reload Firewall Settings**: -```bash /etc/init.d/firewall restart ``` ---- +### Alpine Container -Alpine Container (ID: 300): +**Container Setup for Docker:** ```bash pct create 300 /var/lib/vz/template/cache/alpine-rootfs.tar.xz --unprivileged 1 --arch amd64 --ostype alpine --hostname alpine-0 --password changeme --tag docker --storage local-lvm --cores 2 --memory 1024 --swap 256 --rootfs local-lvm:1,size=8G --net0 name=eth0,bridge=vmbr0,firewall=1 \ --keyctl 1 --nesting 1 --cpuunits 1000 --onboot 1 --debug 0 -``` -```bash pct enter 300 -``` -or -```bash -pct console 300 -``` - -```bash -cat /etc/apk/repositories -``` - -```bash sed -i '/^#.*community/s/^#//' /etc/apk/repositories -``` - -```bash apk update && apk upgrade +apk add qemu-guest-agent newt curl openssh mc sudo build-base gcc abuild binutils binutils-doc gcc-doc ``` -```bash -apk add qemu-guest-agent newt curl openssh mc sudo -``` - -# Build Tools -```bash -apk add build-base gcc abuild binutils binutils-doc gcc-doc -``` - -## Network setup - +**Network and SSH Configuration:** ```bash setup-interfaces -``` - -```bash service networking restart -``` -6. Install and configure SSH: - -```bash apk add openssh -``` -```bash rc-update add sshd -``` -```bash service sshd start -``` -```bash + vi /etc/ssh/sshd_config -``` -Uncomment and modify the following lines: - -```bash -PermitRootLogin no -PasswordAuthentication yes -``` -Save and exit - -```bash service sshd restart ``` +**Docker and User Setup:** ```bash apk add docker -``` - -```bash rc-service docker start -``` - -```bash rc-update add docker default -``` -4. Create a system user and add them to the docker group and sudoers: - -```bash adduser -s /bin/ash medusa -``` - -```bash addgroup medusa docker -``` - -```bash visudo -``` -Add the following line to the sudoers file: - -```bash -medusa ALL=(ALL) ALL -``` - -Save and exit. - -5. Start and enable the Docker service: - -```bash docker run hello-world ``` -Kali Linux Container (ID: 200): +### Kali Linux Container + +**Creation and Basic Setup:** ```bash pct create 200 /var/lib/vz/template/cache/kali-default-rootfs.tar.xz --unprivileged 1 --arch amd64 --ostype debian --hostname kali-0 --password changeme --tag tools --storage local-lvm --cores 2 --memory 2048 --swap 1024 --rootfs local-lvm:1,size=10G --net0 name=eth0,bridge=vmbr0,firewall=1 \ --cpuunits 1500 --onboot 1 --debug 0 --features nesting=1,keyctl=1 -``` \ No newline at end of file +``` + +These commands structure the setup and configuration processes for each container type. You might need to adjust specific settings or add more configurations depending on your specific lab requirements or as you observe how the containers perform under load. \ No newline at end of file