mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
cleanup installer
This commit is contained in:
t3chn0m4g3
77
_deprecated/installer/debian/install.sh
Executable file
77
_deprecated/installer/debian/install.sh
Executable file
@ -0,0 +1,77 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on Debian
|
||||
if ! grep -q 'ID=debian' /etc/os-release; then
|
||||
echo "This script is designed to run on Debian. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ -f /var/log/debian-install-lock ]; then
|
||||
echo "Error: The installer has already been run on this system. If you wish to run it again, please run the uninstall.sh first."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Create installer lock file
|
||||
sudo touch /var/log/debian-install-lock
|
||||
|
||||
# Update SSH config
|
||||
echo "Updating SSH config..."
|
||||
sudo bash -c 'echo "Port 64295" >> /etc/ssh/sshd_config'
|
||||
|
||||
# Install recommended packages
|
||||
echo "Installing recommended packages..."
|
||||
sudo apt-get -y update
|
||||
sudo apt-get -y install bash-completion git grc neovim net-tools
|
||||
|
||||
# Remove old Docker
|
||||
echo "Removing old docker packages..."
|
||||
sudo apt-get -y remove docker docker-engine docker.io containerd runc
|
||||
|
||||
# Add Docker to repositories, install latest docker
|
||||
echo "Adding Docker to repositories and installing..."
|
||||
sudo apt-get -y update
|
||||
sudo apt-get -y install ca-certificates curl gnupg
|
||||
sudo install -m 0755 -d /etc/apt/keyrings
|
||||
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
||||
sudo chmod a+r /etc/apt/keyrings/docker.gpg
|
||||
echo \
|
||||
"deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
|
||||
"$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
|
||||
sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
||||
sudo apt-get -y update
|
||||
sudo apt-get -y install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
||||
sudo systemctl enable docker
|
||||
sudo systemctl stop docker
|
||||
sudo systemctl start docker
|
||||
|
||||
# Add T-Pot user and group to avoid any permission denied on the data folder while keeping permissions 770
|
||||
echo "Creating T-Pot group and user ..."
|
||||
addgroup --gid 2000 tpot
|
||||
adduser --system --no-create-home --uid 2000 --disabled-password --disabled-login --gid 2000 tpot
|
||||
# Add user to Docker, T-Pot group
|
||||
echo "Adding $(whoami) to Docker group..."
|
||||
sudo usermod -aG docker $(whoami)
|
||||
echo "Adding $(whoami) to T-Pot group..."
|
||||
sudo usermod -aG tpot $(whoami)
|
||||
|
||||
# Add aliases
|
||||
echo "Adding aliases..."
|
||||
echo "alias dps='grc docker ps -a'" >> ~/.bashrc
|
||||
echo "alias dpsw='watch -c \"grc --colour=on docker ps -a\"'" >> ~/.bashrc
|
||||
|
||||
# Show running services
|
||||
sudo grc netstat -tulpen
|
||||
echo "Please review for possible honeypot port conflicts."
|
||||
echo "While SSH is taken care of, other services such as"
|
||||
echo "SMTP, HTTP, etc. might prevent T-Pot from starting."
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/64295."
|
||||
|
||||
10
_deprecated/installer/debian/sudo-install.sh
Executable file
10
_deprecated/installer/debian/sudo-install.sh
Executable file
@ -0,0 +1,10 @@
|
||||
#!/bin/bash
|
||||
|
||||
if ! command -v sudo &> /dev/null
|
||||
then
|
||||
echo "sudo is not installed. Installing now..."
|
||||
su -c "apt-get -y update && apt-get -y install sudo"
|
||||
su -c "/usr/sbin/usermod -aG sudo $(whoami)"
|
||||
else
|
||||
echo "sudo is already installed."
|
||||
fi
|
||||
59
_deprecated/installer/debian/uninstall.sh
Executable file
59
_deprecated/installer/debian/uninstall.sh
Executable file
@ -0,0 +1,59 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on Debian
|
||||
if ! grep -q 'ID=debian' /etc/os-release; then
|
||||
echo "This script is designed to run on Debian. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if installer lock file exists
|
||||
if [ ! -f /var/log/debian-install-lock ]; then
|
||||
echo "Error: The installer has not been run on this system. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Remove SSH config changes
|
||||
echo "Removing SSH config changes..."
|
||||
sudo sed -i '/Port 64295/d' /etc/ssh/sshd_config
|
||||
|
||||
# Uninstall Docker
|
||||
echo "Stopping and removing all containers ..."
|
||||
docker stop $(docker ps -aq)
|
||||
docker rm $(docker ps -aq)
|
||||
echo "Uninstalling Docker..."
|
||||
sudo systemctl stop docker
|
||||
sudo systemctl disable docker
|
||||
sudo apt-get -y remove docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
||||
sudo apt-get -y autoremove
|
||||
sudo rm -rf /etc/apt/sources.list.d/docker.list
|
||||
sudo rm -rf /etc/apt/keyrings/docker.gpg
|
||||
|
||||
# Remove user from Docker, T-Pot group
|
||||
echo "Removing $(whoami) from T-Pot group..."
|
||||
sudo deluser $(whoami) tpot
|
||||
echo "Removing $(whoami) from Docker group..."
|
||||
sudo deluser $(whoami) docker
|
||||
# Remove T-Pot user and group
|
||||
echo "Removing T-Pot user..."
|
||||
sudo deluser tpot
|
||||
echo "Removing T-Pot group..."
|
||||
sudo delgroup tpot
|
||||
|
||||
# Remove aliases
|
||||
echo "Removing aliases..."
|
||||
sed -i '/alias dps=/d' ~/.bashrc
|
||||
sed -i '/alias dpsw=/d' ~/.bashrc
|
||||
|
||||
# Remove installer lock file
|
||||
sudo rm -f /var/log/debian-install-lock
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/22"
|
||||
|
||||
85
_deprecated/installer/fedora/install.sh
Executable file
85
_deprecated/installer/fedora/install.sh
Executable file
@ -0,0 +1,85 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on Fedora
|
||||
if ! grep -q 'ID=fedora' /etc/os-release; then
|
||||
echo "This script is designed to run on Fedora. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ -f /var/log/fedora-install-lock ]; then
|
||||
echo "Error: The installer has already been run on this system. If you wish to run it again, please run the uninstall.sh first."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Create installer lock file
|
||||
sudo touch /var/log/fedora-install-lock
|
||||
|
||||
# Update SSH config
|
||||
echo "Updating SSH config..."
|
||||
sudo bash -c 'echo "Port 64295" >> /etc/ssh/sshd_config'
|
||||
|
||||
# Update DNS config
|
||||
echo "Updating DNS config..."
|
||||
sudo bash -c "sed -i 's/^.*DNSStubListener=.*/DNSStubListener=no/' /etc/systemd/resolved.conf"
|
||||
sudo systemctl restart systemd-resolved.service
|
||||
|
||||
# Update SELinux config
|
||||
echo "Updating SELinux config..."
|
||||
sudo sed -i s/SELINUX=enforcing/SELINUX=permissive/g /etc/selinux/config
|
||||
|
||||
# Update Firewall rules
|
||||
echo "Updating Firewall rules..."
|
||||
sudo firewall-cmd --permanent --add-port=64295/tcp
|
||||
sudo firewall-cmd --permanent --zone=public --set-target=ACCEPT
|
||||
#sudo firewall-cmd --reload
|
||||
sudo firewall-cmd --list-all
|
||||
|
||||
# Load kernel modules
|
||||
echo "Loading kernel modules..."
|
||||
sudo modprobe -v iptable_filter
|
||||
echo "iptable_filter" | sudo tee /etc/modules-load.d/iptables.conf
|
||||
|
||||
# Add Docker to repositories, install latest docker
|
||||
echo "Adding Docker to repositories and installing..."
|
||||
sudo dnf -y update
|
||||
sudo dnf -y install dnf-plugins-core
|
||||
sudo dnf -y config-manager --add-repo https://download.docker.com/linux/fedora/docker-ce.repo
|
||||
sudo dnf -y install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
||||
sudo systemctl enable docker
|
||||
sudo systemctl start docker
|
||||
|
||||
# Install recommended packages
|
||||
echo "Installing recommended packages..."
|
||||
sudo dnf -y install bash-completion git grc net-tools
|
||||
|
||||
# Add T-Pot user and group to avoid any permission denied on the data folder while keeping permissions 770
|
||||
echo "Creating T-Pot group and user..."
|
||||
sudo groupadd -g 2000 tpot
|
||||
sudo useradd -r -u 2000 -g 2000 -M -s /sbin/nologin tpot
|
||||
# Add user to Docker, T-Pot group
|
||||
echo "Adding $(whoami) to Docker group..."
|
||||
sudo usermod -aG docker $(whoami)
|
||||
echo "Adding $(whoami) to T-Pot group..."
|
||||
sudo usermod -aG tpot $(whoami)
|
||||
|
||||
# Add aliases
|
||||
echo "Adding aliases..."
|
||||
echo "alias dps='grc docker ps -a'" >> ~/.bashrc
|
||||
echo "alias dpsw='watch -c \"grc --colour=on docker ps -a\"'" >> ~/.bashrc
|
||||
|
||||
# Show running services
|
||||
sudo grc netstat -tulpen
|
||||
echo "Please review for possible honeypot port conflicts."
|
||||
echo "While SSH is taken care of, other services such as"
|
||||
echo "SMTP, HTTP, etc. might prevent T-Pot from starting."
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/64295."
|
||||
|
||||
78
_deprecated/installer/fedora/uninstall.sh
Executable file
78
_deprecated/installer/fedora/uninstall.sh
Executable file
@ -0,0 +1,78 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on Fedora
|
||||
if ! grep -q 'ID=fedora' /etc/os-release; then
|
||||
echo "This script is designed to run on Fedora. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ ! -f /var/log/fedora-install-lock ]; then
|
||||
echo "Error: The installer has not been run on this system. Aborting uninstallation."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Remove SSH config changes
|
||||
echo "Removing SSH config changes..."
|
||||
sudo sed -i '/Port 64295/d' /etc/ssh/sshd_config
|
||||
|
||||
# Remove DNS config changes
|
||||
echo "Updating DNS config..."
|
||||
sudo bash -c "sed -i 's/^.*DNSStubListener=.*/#DNSStubListener=yes/' /etc/systemd/resolved.conf"
|
||||
sudo systemctl restart systemd-resolved.service
|
||||
|
||||
# Restore SELinux config
|
||||
echo "Restoring SELinux config..."
|
||||
sudo sed -i s/SELINUX=permissive/SELINUX=enforcing/g /etc/selinux/config
|
||||
|
||||
# Remove Firewall rules
|
||||
echo "Removing Firewall rules..."
|
||||
sudo firewall-cmd --permanent --remove-port=64295/tcp
|
||||
sudo firewall-cmd --permanent --zone=public --set-target=default
|
||||
#sudo firewall-cmd --reload
|
||||
sudo firewall-cmd --list-all
|
||||
|
||||
# Unload kernel modules
|
||||
echo "Unloading kernel modules..."
|
||||
sudo modprobe -rv iptable_filter
|
||||
sudo rm /etc/modules-load.d/iptables.conf
|
||||
|
||||
# Uninstall Docker
|
||||
echo "Stopping and removing all containers ..."
|
||||
docker stop $(docker ps -aq)
|
||||
docker rm $(docker ps -aq)
|
||||
echo "Uninstalling Docker..."
|
||||
sudo systemctl stop docker
|
||||
sudo systemctl disable docker
|
||||
sudo dnf -y remove docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
||||
sudo dnf config-manager --disable docker-ce-stable
|
||||
sudo rm /etc/yum.repos.d/docker-ce.repo
|
||||
|
||||
# Remove user from Docker, T-Pot group
|
||||
echo "Removing $(whoami) from T-Pot group..."
|
||||
sudo gpasswd -d $(whoami) tpot
|
||||
echo "Removing $(whoami) from Docker group..."
|
||||
sudo gpasswd -d $(whoami) docker
|
||||
# Remove T-Pot user and group
|
||||
echo "Removing T-Pot user..."
|
||||
sudo userdel tpot
|
||||
echo "Removing T-Pot group..."
|
||||
sudo groupdel tpot
|
||||
|
||||
# Remove aliases
|
||||
echo "Removing aliases..."
|
||||
sed -i '/alias dps=/d' ~/.bashrc
|
||||
sed -i '/alias dpsw=/d' ~/.bashrc
|
||||
|
||||
# Remove installer lock file
|
||||
sudo rm /var/log/fedora-install-lock
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/22"
|
||||
|
||||
70
_deprecated/installer/suse/install.sh
Executable file
70
_deprecated/installer/suse/install.sh
Executable file
@ -0,0 +1,70 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on OpenSuse Tumbleweed
|
||||
if ! grep -q 'ID="opensuse-tumbleweed"' /etc/os-release; then
|
||||
echo "This script is designed to run on OpenSuse Tumbleweed. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ -f /var/log/suse-install-lock ]; then
|
||||
echo "Error: The installer has already been run on this system. If you wish to run it again, please run the uninstall.sh first."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Create installer lock file
|
||||
sudo touch /var/log/suse-install-lock
|
||||
|
||||
# Update SSH config
|
||||
echo "Updating SSH config..."
|
||||
sudo bash -c 'echo "Port 64295" >> /etc/ssh/sshd_config.d/port.conf'
|
||||
|
||||
# Update Firewall rules
|
||||
echo "Updating Firewall rules..."
|
||||
sudo firewall-cmd --permanent --add-port=64295/tcp
|
||||
sudo firewall-cmd --permanent --zone=public --set-target=ACCEPT
|
||||
#sudo firewall-cmd --reload
|
||||
sudo firewall-cmd --list-all
|
||||
|
||||
# Install docker and recommended packages
|
||||
echo "Installing recommended packages..."
|
||||
sudo zypper -n update
|
||||
sudo zypper -n remove cups net-tools postfix yast2-auth-client yast2-auth-server
|
||||
sudo zypper -n install bash-completion docker docker-compose git grc busybox-net-tools
|
||||
|
||||
# Enable and start docker
|
||||
echo "Enabling and starting docker..."
|
||||
systemctl enable docker
|
||||
systemctl start docker
|
||||
|
||||
# Add T-Pot user and group to avoid any permission denied on the data folder while keeping permissions 770
|
||||
echo "Creating T-Pot group and user ..."
|
||||
sudo groupadd -g 2000 tpot
|
||||
sudo useradd -r -u 2000 -g 2000 -s /sbin/nologin tpot
|
||||
|
||||
# Add user to Docker, T-Pot group
|
||||
echo "Adding $(whoami) to Docker group..."
|
||||
sudo usermod -a -G docker $(whoami)
|
||||
echo "Adding $(whoami) to T-Pot group..."
|
||||
sudo usermod -a -G tpot $(whoami)
|
||||
|
||||
# Add aliases
|
||||
echo "Adding aliases..."
|
||||
echo "alias dps='grc docker ps -a'" >> ~/.bashrc
|
||||
echo "alias dpsw='watch -c \"grc --colour=on docker ps -a\"'" >> ~/.bashrc
|
||||
|
||||
# Show running services
|
||||
sudo grc netstat -tulpen
|
||||
echo "Please review for possible honeypot port conflicts."
|
||||
echo "While SSH is taken care of, other services such as"
|
||||
echo "SMTP, HTTP, etc. might prevent T-Pot from starting."
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/64295."
|
||||
|
||||
63
_deprecated/installer/suse/uninstall.sh
Executable file
63
_deprecated/installer/suse/uninstall.sh
Executable file
@ -0,0 +1,63 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on OpenSuse Tumbleweed
|
||||
if ! grep -q 'ID="opensuse-tumbleweed"' /etc/os-release; then
|
||||
echo "This script is designed to run on OpenSuse Tumbleweed. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ ! -f /var/log/suse-install-lock ]; then
|
||||
echo "Error: The installer has not been run on this system. Aborting uninstallation."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Remove SSH config changes
|
||||
echo "Removing SSH config changes..."
|
||||
sudo sed -i '/Port 64295/d' /etc/ssh/sshd_config.d/port.conf
|
||||
|
||||
# Remove Firewall rules
|
||||
echo "Removing Firewall rules..."
|
||||
sudo firewall-cmd --permanent --remove-port=64295/tcp
|
||||
sudo firewall-cmd --permanent --zone=public --set-target=default
|
||||
#sudo firewall-cmd --reload
|
||||
sudo firewall-cmd --list-all
|
||||
|
||||
# Uninstall Docker
|
||||
echo "Stopping and removing all containers ..."
|
||||
docker stop $(docker ps -aq)
|
||||
docker rm $(docker ps -aq)
|
||||
echo "Uninstalling Docker..."
|
||||
sudo systemctl stop docker
|
||||
sudo systemctl disable docker
|
||||
sudo zypper -n remove docker docker-compose
|
||||
sudo zypper -n install cups postfix
|
||||
|
||||
# Remove user from Docker, T-Pot group
|
||||
echo "Removing $(whoami) from T-Pot group..."
|
||||
sudo gpasswd -d $(whoami) tpot
|
||||
echo "Removing $(whoami) from Docker group..."
|
||||
sudo gpasswd -d $(whoami) docker
|
||||
# Remove T-Pot user and group
|
||||
echo "Removing T-Pot user..."
|
||||
sudo userdel tpot
|
||||
echo "Removing T-Pot group..."
|
||||
sudo groupdel tpot
|
||||
|
||||
# Remove aliases
|
||||
echo "Removing aliases..."
|
||||
sed -i '/alias dps=/d' ~/.bashrc
|
||||
sed -i '/alias dpsw=/d' ~/.bashrc
|
||||
|
||||
# Remove installer lock file
|
||||
sudo rm /var/log/suse-install-lock
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/22"
|
||||
|
||||
85
_deprecated/installer/ubuntu/install.sh
Executable file
85
_deprecated/installer/ubuntu/install.sh
Executable file
@ -0,0 +1,85 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on Ubuntu
|
||||
if ! grep -q 'ID=ubuntu' /etc/os-release; then
|
||||
echo "This script is designed to run on Ubuntu. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ -f /var/log/ubuntu-install-lock ]; then
|
||||
echo "Error: The installer has already been run on this system. If you wish to run it again, please run the uninstall.sh first."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Create installer lock file
|
||||
sudo touch /var/log/ubuntu-install-lock
|
||||
|
||||
# Update SSH config
|
||||
echo "Updating SSH config..."
|
||||
sudo bash -c 'echo "Port 64295" >> /etc/ssh/sshd_config'
|
||||
sudo systemctl disable ssh.socket
|
||||
sudo rm /etc/systemd/system/ssh.service.d/00-socket.conf
|
||||
sudo systemctl enable ssh.service
|
||||
|
||||
# Update DNS config
|
||||
echo "Updating DNS config..."
|
||||
sudo bash -c "sed -i 's/^.*DNSStubListener=.*/DNSStubListener=no/' /etc/systemd/resolved.conf"
|
||||
sudo systemctl restart systemd-resolved.service
|
||||
|
||||
# Install recommended packages
|
||||
echo "Installing recommended packages..."
|
||||
sudo apt-get -y update
|
||||
sudo apt-get -y install bash-completion git grc net-tools vim
|
||||
|
||||
# Remove old Docker
|
||||
echo "Removing old docker packages..."
|
||||
sudo apt-get -y remove docker docker-engine docker.io containerd runc
|
||||
|
||||
# Add Docker to repositories, install latest docker
|
||||
echo "Adding Docker to repositories and installing..."
|
||||
sudo apt-get -y update
|
||||
sudo apt-get -y install ca-certificates curl gnupg
|
||||
sudo install -m 0755 -d /etc/apt/keyrings
|
||||
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
||||
sudo chmod a+r /etc/apt/keyrings/docker.gpg
|
||||
echo \
|
||||
"deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \
|
||||
"$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
|
||||
sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
||||
sudo apt-get -y update
|
||||
sudo apt-get -y install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
||||
sudo systemctl enable docker
|
||||
sudo systemctl stop docker
|
||||
sudo systemctl start docker
|
||||
|
||||
# Add T-Pot user and group to avoid any permission denied on the data folder while keeping permissions 770
|
||||
echo "Creating T-Pot group and user ..."
|
||||
addgroup --gid 2000 tpot
|
||||
adduser --system --no-create-home --uid 2000 --disabled-password --disabled-login --gid 2000 tpot
|
||||
# Add user to Docker, T-Pot group
|
||||
echo "Adding $(whoami) to Docker group..."
|
||||
sudo usermod -aG docker $(whoami)
|
||||
echo "Adding $(whoami) to T-Pot group..."
|
||||
sudo usermod -aG tpot $(whoami)
|
||||
|
||||
# Add aliases
|
||||
echo "Adding aliases..."
|
||||
echo "alias dps='grc docker ps -a'" >> ~/.bashrc
|
||||
echo "alias dpsw='watch -c \"grc --colour=on docker ps -a\"'" >> ~/.bashrc
|
||||
|
||||
# Show running services
|
||||
sudo grc netstat -tulpen
|
||||
echo "Please review for possible honeypot port conflicts."
|
||||
echo "While SSH is taken care of, other services such as"
|
||||
echo "SMTP, HTTP, etc. might prevent T-Pot from starting."
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/64295."
|
||||
|
||||
66
_deprecated/installer/ubuntu/uninstall.sh
Executable file
66
_deprecated/installer/ubuntu/uninstall.sh
Executable file
@ -0,0 +1,66 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Needs to run as non-root
|
||||
myWHOAMI=$(whoami)
|
||||
if [ "$myWHOAMI" == "root" ]
|
||||
then
|
||||
echo "Need to run as user ..."
|
||||
exit
|
||||
fi
|
||||
|
||||
# Check if running on Ubuntu
|
||||
if ! grep -q 'ID=ubuntu' /etc/os-release; then
|
||||
echo "This script is designed to run on Ubuntu. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if installer lock file exists
|
||||
if [ ! -f /var/log/ubuntu-install-lock ]; then
|
||||
echo "Error: The installer has not been run on this system. Aborting."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Remove SSH config changes
|
||||
echo "Removing SSH config changes..."
|
||||
sudo sed -i '/Port 64295/d' /etc/ssh/sshd_config
|
||||
sudo systemctl disable ssh.service
|
||||
sudo systemctl enable ssh.socket
|
||||
|
||||
# Remove DNS config changes
|
||||
echo "Updating DNS config..."
|
||||
sudo bash -c "sed -i 's/^.*DNSStubListener=.*/#DNSStubListener=yes/' /etc/systemd/resolved.conf"
|
||||
sudo systemctl restart systemd-resolved.service
|
||||
|
||||
# Uninstall Docker
|
||||
echo "Stopping and removing all containers ..."
|
||||
docker stop $(docker ps -aq)
|
||||
docker rm $(docker ps -aq)
|
||||
echo "Uninstalling Docker..."
|
||||
sudo systemctl stop docker
|
||||
sudo systemctl disable docker
|
||||
sudo apt-get -y remove docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
||||
sudo apt-get -y autoremove
|
||||
sudo rm -rf /etc/apt/sources.list.d/docker.list
|
||||
sudo rm -rf /etc/apt/keyrings/docker.gpg
|
||||
|
||||
# Remove user from Docker, T-Pot group
|
||||
echo "Removing $(whoami) from T-Pot group..."
|
||||
sudo deluser $(whoami) tpot
|
||||
echo "Removing $(whoami) from Docker group..."
|
||||
sudo deluser $(whoami) docker
|
||||
# Remove T-Pot user and group
|
||||
echo "Removing T-Pot user..."
|
||||
sudo deluser tpot
|
||||
echo "Removing T-Pot group..."
|
||||
sudo delgroup tpot
|
||||
|
||||
# Remove aliases
|
||||
echo "Removing aliases..."
|
||||
sed -i '/alias dps=/d' ~/.bashrc
|
||||
sed -i '/alias dpsw=/d' ~/.bashrc
|
||||
|
||||
# Remove installer lock file
|
||||
sudo rm -f /var/log/ubuntu-install-lock
|
||||
|
||||
echo "Done. Please reboot and re-connect via SSH on tcp/22"
|
||||
|
||||
Reference in New Issue
Block a user