diff options
| author | Paul Bütow <pbuetow@mimecast.com> | 2020-01-09 20:30:15 +0000 |
|---|---|---|
| committer | Paul Bütow <pbuetow@mimecast.com> | 2020-01-09 20:30:15 +0000 |
| commit | 3755a9911ecb05886577095f2b8cc8b9e4066a3a (patch) | |
| tree | 86e24bc466986cb5c9c6d167a918e6064defeafc /samples | |
Release of DTail v1.0.0v1.0.0
Diffstat (limited to 'samples')
| -rwxr-xr-x | samples/check_dserver.sh.sample | 4 | ||||
| -rw-r--r-- | samples/dserver.service.sample | 19 | ||||
| -rw-r--r-- | samples/dtail.json.sample | 38 | ||||
| -rw-r--r-- | samples/update_key_cache.sh.sample | 33 |
4 files changed, 94 insertions, 0 deletions
diff --git a/samples/check_dserver.sh.sample b/samples/check_dserver.sh.sample new file mode 100755 index 0000000..96c96de --- /dev/null +++ b/samples/check_dserver.sh.sample @@ -0,0 +1,4 @@ +#!/bin/bash + +declare -r CONFIG_FILE=/etc/dserver/dtail.json +exec /usr/local/bin/dtail --cfg $CONFIG_FILE --checkHealth diff --git a/samples/dserver.service.sample b/samples/dserver.service.sample new file mode 100644 index 0000000..c5e5e59 --- /dev/null +++ b/samples/dserver.service.sample @@ -0,0 +1,19 @@ +[Unit] +Description=DTail server +After=network.target + +[Service] +Slice=dserver.slice +User=dserver +Group=dserver +ExecStart=/usr/local/bin/dserver -cfg /etc/dserver/dtail.json +WorkingDirectory=/var/run/dserver +NoNewPrivileges=true +PrivateDevices=true +PrivateTmp=true +CPUAccounting=true +MemoryAccounting=true +BlockIOAccounting=true + +[Install] +WantedBy=multi-user.target diff --git a/samples/dtail.json.sample b/samples/dtail.json.sample new file mode 100644 index 0000000..99c0a73 --- /dev/null +++ b/samples/dtail.json.sample @@ -0,0 +1,38 @@ +{ + "Client": {}, + "Server": { + "SSHBindAddress": "0.0.0.0", + "MaxConcurrentCats": 2, + "MaxConcurrentTails": 50, + "MaxConnections": 50, + "MapreduceLogFormat" : "default", + "HostKeyFile" : "cache/ssh_host_key", + "HostKeyBits" : 2048, + "Permissions": { + "Default": [ + "^/.*$" + ], + "Users": { + "pbuetow": [ + "^/.*$" + ], + "jblake": [ + "^/tmp/foo.log$", + "^/.*$", + "!^/tmp/bar.log$" + ] + } + } + }, + "Common": { + "LogDir" : "log", + "CacheDir" : "cache", + "LogStrategy": "daily", + "SSHPort": 2222, + "DebugEnable": false, + "PPerfEnable": false, + "PPerfPort": 6060, + "PPerfBindAddress": "0.0.0.0", + "ExperimentalFeaturesEnable": false + } +} diff --git a/samples/update_key_cache.sh.sample b/samples/update_key_cache.sh.sample new file mode 100644 index 0000000..9817f04 --- /dev/null +++ b/samples/update_key_cache.sh.sample @@ -0,0 +1,33 @@ +#!/bin/bash + +declare -r CACHEDIR=/var/run/dserver/cache +declare -r DSERVER_USER=dserver + +echo "Updating SSH key cache" + +ls /home/ | while read remoteuser; do + keysfile=/home/$remoteuser/.ssh/authorized_keys + + if [ -f $keysfile ]; then + cachefile=$CACHEDIR/$remoteuser.authorized_keys + echo "Caching $keysfile -> $cachefile" + + cp $keysfile $cachefile + chown $DSERVER_USER $cachefile + chmod 600 $cachefile + fi +done + +# Cleanup obsolete public SSH keys +find $CACHEDIR -name \*.authorized_keys -type f | +while read cachefile; do + remoteuser=$(basename $cachefile | cut -d. -f1) + keysfile=/home/$remoteuser/.ssh/authorized_keys + + if [ ! -f $keysfile ]; then + echo "Deleting obsolete cache file $cachefile" + rm $cachefile + fi +done + +echo "All set..." |
