Update docs/tech_docs/OpenWrt.md
This commit is contained in:
@@ -14,237 +14,83 @@
|
||||
|
||||
- [pct commands](https://git.crazystorm.xyz/medusa/the_information_nexus/src/branch/main/docs/tech_docs/pct.md)
|
||||
|
||||
### Proxmox Container Creation
|
||||
---
|
||||
|
||||
Use the following command to create a new container with reduced memory and storage:
|
||||
You've provided an extensive configuration for your OpenWRT, Alpine, and Kali Linux containers in a Proxmox environment. Here's a concise and coherent version of your commands for each container, with optimizations and updates to ensure they work effectively in your lab setting.
|
||||
|
||||
### OpenWRT Container
|
||||
|
||||
**Creation and Configuration:**
|
||||
```bash
|
||||
pct create 100 /var/lib/vz/template/cache/openwrt-rootfs.tar.xz --unprivileged 1 --arch amd64 --ostype unmanaged --hostname openwrt-0 --password changeme --tag network --storage local-lvm --memory 256 --swap 128 --rootfs local-lvm:1,size=512M \
|
||||
--net0 name=eth0,bridge=vmbr0,firewall=1 \
|
||||
--net1 name=eth1,bridge=vmbr1,firewall=1 \
|
||||
--cores 1 --cpuunits 500 --onboot 1 --debug 0
|
||||
```
|
||||
|
||||
```bash
|
||||
pct start 100
|
||||
```
|
||||
|
||||
```bash
|
||||
pct console 100
|
||||
```
|
||||
|
||||
```bash
|
||||
passwd
|
||||
```
|
||||
|
||||
### OpenWRT - Installing Packages via CLI and Reboot
|
||||
|
||||
**Package Installation and Network Setup:**
|
||||
```bash
|
||||
opkg update
|
||||
```
|
||||
|
||||
```bash
|
||||
opkg install qemu-ga
|
||||
```
|
||||
|
||||
```bash
|
||||
reboot
|
||||
```
|
||||
|
||||
### OpenWRT Firewall Configuration
|
||||
|
||||
```bash
|
||||
vi /etc/config/network
|
||||
```
|
||||
|
||||
```bash
|
||||
config interface 'loopback'
|
||||
option proto 'static'
|
||||
option ipaddr '127.0.0.1'
|
||||
option netmask '255.0.0.0'
|
||||
option device 'lo'
|
||||
|
||||
config interface 'wan'
|
||||
option proto 'dhcp'
|
||||
option device 'eth0'
|
||||
|
||||
config interface 'wan6'
|
||||
option proto 'dhcpv6'
|
||||
option device 'eth0'
|
||||
|
||||
config interface 'lan'
|
||||
option proto 'static'
|
||||
option device 'eth1'
|
||||
option ipaddr '10.0.0.1'
|
||||
option netmask '255.255.255.0'
|
||||
|
||||
config interface 'lan6'
|
||||
option proto 'static'
|
||||
option device 'eth1'
|
||||
option ip6addr 'fd00::1/64'
|
||||
```
|
||||
|
||||
- **Restart Network Services**:
|
||||
```bash
|
||||
/etc/init.d/network restart
|
||||
```
|
||||
|
||||
```bash
|
||||
130 j
|
||||
```
|
||||
|
||||
```bash
|
||||
vi /etc/config/firewall
|
||||
```
|
||||
|
||||
```bash
|
||||
config rule
|
||||
option name 'Allow-SSH'
|
||||
option src 'wan'
|
||||
option proto 'tcp'
|
||||
option dest_port '22'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-HTTPS'
|
||||
option src 'wan'
|
||||
option proto 'tcp'
|
||||
option dest_port '443'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-HTTP'
|
||||
option src 'wan'
|
||||
option proto 'tcp'
|
||||
option dest_port '80'
|
||||
option target 'ACCEPT'
|
||||
```
|
||||
|
||||
### Applying the Configuration
|
||||
|
||||
After updating the configuration files:
|
||||
|
||||
- **Reload Firewall Settings**:
|
||||
```bash
|
||||
/etc/init.d/firewall restart
|
||||
```
|
||||
|
||||
---
|
||||
### Alpine Container
|
||||
|
||||
Alpine Container (ID: 300):
|
||||
**Container Setup for Docker:**
|
||||
```bash
|
||||
pct create 300 /var/lib/vz/template/cache/alpine-rootfs.tar.xz --unprivileged 1 --arch amd64 --ostype alpine --hostname alpine-0 --password changeme --tag docker --storage local-lvm --cores 2 --memory 1024 --swap 256 --rootfs local-lvm:1,size=8G --net0 name=eth0,bridge=vmbr0,firewall=1 \
|
||||
--keyctl 1 --nesting 1 --cpuunits 1000 --onboot 1 --debug 0
|
||||
```
|
||||
|
||||
```bash
|
||||
pct enter 300
|
||||
```
|
||||
or
|
||||
|
||||
```bash
|
||||
pct console 300
|
||||
```
|
||||
|
||||
```bash
|
||||
cat /etc/apk/repositories
|
||||
```
|
||||
|
||||
```bash
|
||||
sed -i '/^#.*community/s/^#//' /etc/apk/repositories
|
||||
```
|
||||
|
||||
```bash
|
||||
apk update && apk upgrade
|
||||
apk add qemu-guest-agent newt curl openssh mc sudo build-base gcc abuild binutils binutils-doc gcc-doc
|
||||
```
|
||||
|
||||
```bash
|
||||
apk add qemu-guest-agent newt curl openssh mc sudo
|
||||
```
|
||||
|
||||
# Build Tools
|
||||
```bash
|
||||
apk add build-base gcc abuild binutils binutils-doc gcc-doc
|
||||
```
|
||||
|
||||
## Network setup
|
||||
|
||||
**Network and SSH Configuration:**
|
||||
```bash
|
||||
setup-interfaces
|
||||
```
|
||||
|
||||
```bash
|
||||
service networking restart
|
||||
```
|
||||
|
||||
6. Install and configure SSH:
|
||||
|
||||
```bash
|
||||
apk add openssh
|
||||
```
|
||||
```bash
|
||||
rc-update add sshd
|
||||
```
|
||||
```bash
|
||||
service sshd start
|
||||
```
|
||||
```bash
|
||||
|
||||
vi /etc/ssh/sshd_config
|
||||
```
|
||||
Uncomment and modify the following lines:
|
||||
|
||||
```bash
|
||||
PermitRootLogin no
|
||||
PasswordAuthentication yes
|
||||
```
|
||||
Save and exit
|
||||
|
||||
```bash
|
||||
service sshd restart
|
||||
```
|
||||
|
||||
**Docker and User Setup:**
|
||||
```bash
|
||||
apk add docker
|
||||
```
|
||||
|
||||
```bash
|
||||
rc-service docker start
|
||||
```
|
||||
|
||||
```bash
|
||||
rc-update add docker default
|
||||
```
|
||||
|
||||
4. Create a system user and add them to the docker group and sudoers:
|
||||
|
||||
```bash
|
||||
adduser -s /bin/ash medusa
|
||||
```
|
||||
|
||||
```bash
|
||||
addgroup medusa docker
|
||||
```
|
||||
|
||||
```bash
|
||||
visudo
|
||||
```
|
||||
|
||||
Add the following line to the sudoers file:
|
||||
|
||||
```bash
|
||||
medusa ALL=(ALL) ALL
|
||||
```
|
||||
|
||||
Save and exit.
|
||||
|
||||
5. Start and enable the Docker service:
|
||||
|
||||
```bash
|
||||
docker run hello-world
|
||||
```
|
||||
|
||||
Kali Linux Container (ID: 200):
|
||||
### Kali Linux Container
|
||||
|
||||
**Creation and Basic Setup:**
|
||||
```bash
|
||||
pct create 200 /var/lib/vz/template/cache/kali-default-rootfs.tar.xz --unprivileged 1 --arch amd64 --ostype debian --hostname kali-0 --password changeme --tag tools --storage local-lvm --cores 2 --memory 2048 --swap 1024 --rootfs local-lvm:1,size=10G --net0 name=eth0,bridge=vmbr0,firewall=1 \
|
||||
--cpuunits 1500 --onboot 1 --debug 0 --features nesting=1,keyctl=1
|
||||
```
|
||||
```
|
||||
|
||||
These commands structure the setup and configuration processes for each container type. You might need to adjust specific settings or add more configurations depending on your specific lab requirements or as you observe how the containers perform under load.
|
||||
Reference in New Issue
Block a user