Linux User Creation: Difference between revisions

From Chorke Wiki
Jump to navigation Jump to search
Line 52: Line 52:
cat << EXE | sudo bash
cat << EXE | sudo bash
mkdir -p /home/devops/
mkdir -p /home/devops/
DEVOPS_SSH_USER='argo.cd drone.ci tool.tech raiyan.shahed shahed.hossain'
DEVOPS_EXT_USERS='argo.cd drone.ci tool.tech raiyan.shahed shahed.hossain'
for SSH_USER in \${DEVOPS_SSH_USER};do
for EXT_USER in \${DEVOPS_EXT_USERS};do
   if ! id -u \${SSH_USER} &>/dev/null;then
   if ! id -u \${EXT_USER} &>/dev/null;then
     useradd --create-home --home-dir /home/devops/\${SSH_USER} --shell /bin/bash \${SSH_USER}
     useradd --create-home --home-dir /home/devops/\${EXT_USER} --shell /bin/bash \${EXT_USER}
     chage -m 99999 -M 99999 -E -1 -I -1  \${SSH_USER}
     chage -m 99999 -M 99999 -E -1 -I -1  \${EXT_USER}


     mkdir /home/devops/\${SSH_USER}/.ssh
     mkdir /home/devops/\${EXT_USER}/.ssh
     touch /home/devops/\${SSH_USER}/.ssh/config
     touch /home/devops/\${EXT_USER}/.ssh/config
     touch /home/devops/\${SSH_USER}/.ssh/authorized_keys
     touch /home/devops/\${EXT_USER}/.ssh/authorized_keys


     chown -R \${SSH_USER}:\${SSH_USER} /home/devops/\${SSH_USER}/
     chown -R \${EXT_USER}:\${EXT_USER} /home/devops/\${EXT_USER}/
     chmod 600 /home/devops/\${SSH_USER}/.ssh/authorized_keys
     chmod 600 /home/devops/\${EXT_USER}/.ssh/authorized_keys
     chmod 600 /home/devops/\${SSH_USER}/.ssh/config
     chmod 600 /home/devops/\${EXT_USER}/.ssh/config
     chmod 700 /home/devops/\${SSH_USER}/.ssh
     chmod 700 /home/devops/\${EXT_USER}/.ssh
   fi
   fi
done
done

Revision as of 12:04, 9 March 2025

System » User

System » User » Homeless


cat << EXE | sudo bash
SYSTEM_SYS_USERS='activemq artemis hadoop spark keycloak minikube minio wildfly'
for SYS_USER in \${SYSTEM_SYS_USERS};do
  if ! id -g \${SYS_USER} &>/dev/null;then addgroup --quiet --system \${SYS_USER};fi
  if ! id -u \${SYS_USER} &>/dev/null;then
    adduser --quiet --system --ingroup \${SYS_USER} --home /nonexistent --shell /usr/sbin/nologin --disabled-password \${SYS_USER}
  fi
done

echo && cat /etc/passwd|awk -F : '\$3 >= 120 && \$3 < 900 {printf("%-6s » %s\n", \$3, \$1)}'|sort -h
echo && cat /etc/group |awk -F : '\$3 >= 120 && \$3 < 900 {printf("%-6s » %s\n", \$3, \$1)}'|sort -h && echo
EXE

System » User » Resident


cat << EXE | sudo bash
mkdir -p /home/system/
SYSTEM_SYS_USERS='activemq artemis hadoop spark keycloak minikube minio wildfly'
for SYS_USER in \${SYSTEM_SYS_USERS};do
  if ! id -g \${SYS_USER} &>/dev/null;then addgroup --quiet --system \${SYS_USER};fi
  if ! id -u \${SYS_USER} &>/dev/null;then
    adduser --quiet --system --ingroup \${SYS_USER} --home /home/system/\${SYS_USER} --shell /bin/bash --disabled-password \${SYS_USER}
    chage -m 99999 -M 99999 -E -1 -I -1  \${SYS_USER}

    mkdir /home/system/\${SYS_USER}/.ssh
    touch /home/system/\${SYS_USER}/.ssh/config
    touch /home/system/\${SYS_USER}/.ssh/authorized_keys

    chown -R \${SYS_USER}:\${SYS_USER} /home/system/\${SYS_USER}/
    chmod 600 /home/system/\${SYS_USER}/.ssh/authorized_keys
    chmod 600 /home/system/\${SYS_USER}/.ssh/config
    chmod 700 /home/system/\${SYS_USER}/.ssh
  fi
done

echo && ls -alh /home/system/*/.ssh/*
echo && cat /etc/passwd|awk -F : '\$3 >= 120 && \$3 < 900 {printf("%-6s » %s\n", \$3, \$1)}'|sort -h
echo && cat /etc/group |awk -F : '\$3 >= 120 && \$3 < 900 {printf("%-6s » %s\n", \$3, \$1)}'|sort -h && echo
EXE

DevOps » User

DevOps » User » Resident


cat << EXE | sudo bash
mkdir -p /home/devops/
DEVOPS_EXT_USERS='argo.cd drone.ci tool.tech raiyan.shahed shahed.hossain'
for EXT_USER in \${DEVOPS_EXT_USERS};do
  if ! id -u \${EXT_USER} &>/dev/null;then
    useradd --create-home --home-dir /home/devops/\${EXT_USER} --shell /bin/bash \${EXT_USER}
    chage -m 99999 -M 99999 -E -1 -I -1  \${EXT_USER}

    mkdir /home/devops/\${EXT_USER}/.ssh
    touch /home/devops/\${EXT_USER}/.ssh/config
    touch /home/devops/\${EXT_USER}/.ssh/authorized_keys

    chown -R \${EXT_USER}:\${EXT_USER} /home/devops/\${EXT_USER}/
    chmod 600 /home/devops/\${EXT_USER}/.ssh/authorized_keys
    chmod 600 /home/devops/\${EXT_USER}/.ssh/config
    chmod 700 /home/devops/\${EXT_USER}/.ssh
  fi
done

echo && ls -alh /home/devops/*/.ssh/*
echo && cat /etc/passwd|awk -F : '\$3 >= 1000 && \$3 < 65500 {printf("%-6s » %s\n", \$3, \$1)}'|sort -h
echo && cat /etc/group |awk -F : '\$3 >= 1000 && \$3 < 65500 {printf("%-6s » %s\n", \$3, \$1)}'|sort -h && echo
EXE

Playground

lxc image list images:ubuntu/noble/desktop
lxc launch --vm images:ffa5fc9dfb84 cloudflare
lxc launch --vm images:ubuntu/noble/desktop cloudflare
lxc list status=running name=cloudflare --format=json |jq  -r '.[].state.network.[].addresses'
lxc list status=running name=cloudflare --format=yaml |yq  -r '.[].state.network.[].addresses'
lxc info cloudflare|yq '.Resources.["Network usage"][]["IP addresses"].inet'

ls -lah /usr/local/etc/cloudflared/
          ls -lah /etc/cloudflared/
            ls -lah ~/.cloudflared/
lxc snapshot cloudflare argo:24.04
lxc publish  cloudflare/argo:24.04 --alias cloudflare/argo:24.04
lxc restore  cloudflare argo:24.04

apt list --installed|grep linux-image
systemd-analyze blame
dpkg -l | grep "gnome-shell-extension"

systemctl list-dependencies graphical.target
cat /proc/acpi/wakeup
sudo apt list --installed|grep desktop-icons
sudo dpkg-query -l|grep desktop-icons
sudo apt install gnome-shell-extension-manager
apt info gnome-shell-extension-manager -a

cat <<-'EXE'|sudo bash
umount /var/snap/firefox/common/host-hunspell
snap remove firefox
EXE
cat <<-'EXE'|sudo bash
snap disable remmina
snap remove --purge remmina
EXE
systemctl list-dependencies --type=service --state=running
systemctl list-dependencies --type=service --state=active
systemctl list-dependencies docker.service
systemctl list-dependencies --all

cat /etc/passwd
cat /etc/group
cat /etc/passwd|\
awk -F : '$3 >= 1000 {printf("%-6s » %s\n", $3, $1)}'|sort -h
useradd -m -d /home/chorke -s /bin/bash chorke
useradd -m -d /home/chorke -s /bin/bash chorke

adduser --quiet --system --ingroup chorke --no-create-home    --shell /usr/sbin/nologin --disabled-password chorke
adduser --quiet --system --ingroup chorke --home /nonexistent --shell /usr/sbin/nologin --disabled-password chorke

References