ochenstarik/lightweight-server
1
0
Fork 0
Code Issues Pull requests 5 Projects Releases 1 Packages Wiki Activity Actions

Fix installer SSH context and mesh setup order

Browse source
This commit is contained in:
Ochenstarik 2026-07-17 09:22:14 +07:00
parent b0a0726e5c
commit 4e8abf82c3
2 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
ochenstarik-server-monitor-manager.sh
View file

@ -196,8 +196,10 @@ create_monitor_user() {
install -d -m 0755 -o root -g root /etc/ssh/sshd_config.d install -d -m 0755 -o root -g root /etc/ssh/sshd_config.d
cat > "$MONITOR_SSH_CONFIG" <<'EOF' cat > "$MONITOR_SSH_CONFIG" <<'EOF'
# Required by the restricted Server Monitor Manager identity. # Required by the restricted Server Monitor Manager identity only.
PubkeyAuthentication yes Match User ochenstarik-monitor
PubkeyAuthentication yes
Match all
EOF EOF
chown root:root "$MONITOR_SSH_CONFIG" chown root:root "$MONITOR_SSH_CONFIG"
chmod 0644 "$MONITOR_SSH_CONFIG" chmod 0644 "$MONITOR_SSH_CONFIG"
@ -205,7 +207,8 @@ EOF
verify_sshd() { verify_sshd() {
sshd -t sshd -t
sshd -T | grep -qi '^pubkeyauthentication yes$' \ sshd -T -C "user=${MONITOR_USER},host=localhost,addr=127.0.0.1" \
| grep -qi '^pubkeyauthentication yes$' \
|| die "В sshd отключена аутентификация по публичному ключу" || die "В sshd отключена аутентификация по публичному ключу"
} }

4
tests/e2e/test-monitor-manager-wireguard-nftables.sh
View file

@ -70,11 +70,11 @@ ip netns exec "$target" wg set smm0 \
ip -n "$hub" address add 10.77.0.1/24 dev smm0 ip -n "$hub" address add 10.77.0.1/24 dev smm0
ip -n "$source" address add 10.77.0.2/32 dev smm0 ip -n "$source" address add 10.77.0.2/32 dev smm0
ip -n "$target" address add 10.77.0.3/32 dev smm0 ip -n "$target" address add 10.77.0.3/32 dev smm0
ip -n "$source" route add 10.77.0.0/24 dev smm0
ip -n "$target" route add 10.77.0.0/24 dev smm0
for namespace in "$hub" "$source" "$target"; do for namespace in "$hub" "$source" "$target"; do
ip -n "$namespace" link set smm0 up ip -n "$namespace" link set smm0 up
done done
ip -n "$source" route add 10.77.0.0/24 dev smm0
ip -n "$target" route add 10.77.0.0/24 dev smm0
ip netns exec "$hub" sysctl -q -w net.ipv4.ip_forward=1 ip netns exec "$hub" sysctl -q -w net.ipv4.ip_forward=1
helper="$temporary/ochenstarik-smm-hub" helper="$temporary/ochenstarik-smm-hub"