dasandClaude Opus 5.5
eba4516998
- server/ profile and build-iso.sh [desktop|server]; make iso-server, make qemu-server, run-qemu.sh --serial; login on tty and ttyS0 - das-server: SSH, chrony, NetworkManager/dhcpcd, Docker with Compose, nftables (closed except SSH, own table), fail2ban reading socklog, sshd without root passwords, Docker log rotation, tools - das-server-install: dialog installer in Ukrainian and English, or unattended with --config; GPT + Btrfs subvolumes, GRUB for UEFI and BIOS, serial console, SSH key with optional keys-only logins - das-install-common: mount-source and postinstall shared with Calamares - dsv: runit service manager (list, enable, disable, start, stop, restart, status, logs) with bash completion, also on the desktop - das-update split into a subpackage without GTK; the window and tray icon move to /usr/libexec/das/das-update-gui - das-snapper-setup enables dbus, which snapper needs - TODO: ISO size review with measured numbers and options Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
25 lines
869 B
Plaintext
25 lines
869 B
Plaintext
# Template file for 'das-server'
|
|
pkgname=das-server
|
|
version=0.1.0
|
|
revision=1
|
|
depends="openssh chrony dhcpcd NetworkManager docker docker-compose nftables
|
|
fail2ban socklog-void python3 curl lazydocker lazygit mc tmux htop
|
|
das-snapshots das-update dsv"
|
|
short_desc="Das OS server: packages and secure defaults for SSH, firewall and Docker"
|
|
maintainer="Das <anry.das@gmail.com>"
|
|
license="MIT"
|
|
homepage="https://git.das.org.ua/das/Das-OS"
|
|
conf_files="
|
|
/etc/nftables.conf
|
|
/etc/fail2ban/jail.d/das.conf
|
|
/etc/ssh/sshd_config.d/50-das.conf
|
|
/etc/docker/daemon.json"
|
|
|
|
do_install() {
|
|
vinstall ${FILESDIR}/nftables.conf 644 etc
|
|
vinstall ${FILESDIR}/fail2ban-das.conf 644 etc/fail2ban/jail.d das.conf
|
|
vinstall ${FILESDIR}/sshd-das.conf 644 etc/ssh/sshd_config.d 50-das.conf
|
|
vinstall ${FILESDIR}/docker-daemon.json 644 etc/docker daemon.json
|
|
vlicense ${FILESDIR}/LICENSE
|
|
}
|