Skip to content
Snippets Groups Projects
Unverified Commit 5b41e40e authored by micah's avatar micah :speech_balloon:
Browse files

Add vpnwatch to try and deal with misuse

parent 9ab1bb48
Branches
Tags
No related merge requests found
Pipeline #109500 passed
...@@ -14,6 +14,9 @@ RUN git clone https://github.com/OperatorFoundation/shapeshifter-dispatcher /sha ...@@ -14,6 +14,9 @@ RUN git clone https://github.com/OperatorFoundation/shapeshifter-dispatcher /sha
RUN strip /shapeshifter-dispatcher/shapeshifter-dispatcher RUN strip /shapeshifter-dispatcher/shapeshifter-dispatcher
RUN /usr/lib/go-1.19/bin/go install github.com/kumina/openvpn_exporter@latest RUN /usr/lib/go-1.19/bin/go install github.com/kumina/openvpn_exporter@latest
RUN strip $GOPATH/bin/openvpn_exporter RUN strip $GOPATH/bin/openvpn_exporter
RUN /usr/lib/go-1.19/bin/go install github.com/kalikaneko/vpnwatch@latest
RUN strip $GOPATH/bin/vpnwatch
FROM registry.git.autistici.org/ai3/docker/s6-base FROM registry.git.autistici.org/ai3/docker/s6-base
RUN apt-get -q update \ RUN apt-get -q update \
...@@ -29,6 +32,7 @@ RUN apt-get -q update \ ...@@ -29,6 +32,7 @@ RUN apt-get -q update \
COPY --from=build /shapeshifter-dispatcher/shapeshifter-dispatcher /usr/local/bin/shapeshifter-dispatcher COPY --from=build /shapeshifter-dispatcher/shapeshifter-dispatcher /usr/local/bin/shapeshifter-dispatcher
COPY --from=build /go/bin/openvpn_exporter /usr/local/bin/openvpn_exporter COPY --from=build /go/bin/openvpn_exporter /usr/local/bin/openvpn_exporter
COPY --from=build /go/bin/vpnwatch /usr/local/bin/vpnwatch
RUN setcap cap_net_admin,cap_net_bind_service+ep /usr/sbin/openvpn RUN setcap cap_net_admin,cap_net_bind_service+ep /usr/sbin/openvpn
RUN setcap cap_net_admin+ep /bin/ip RUN setcap cap_net_admin+ep /bin/ip
......
#!/bin/sh
echo "Starting vpnwatch"
exec /usr/local/bin/vpnwatch
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment