mirror of
https://github.com/bashclub/proxmox-zfs-postinstall.git
synced 2024-11-07 18:31:58 +01:00
Add ssh hardening question
This commit is contained in:
parent
08542c3842
commit
00610cd192
30
postinstall
30
postinstall
@ -183,6 +183,17 @@ ask_locales(){
|
|||||||
locales=$(whiptail --title "SET LOCALES" --backtitle "$PROG" --inputbox "Please enter a space separated list of locales to generate." 9 76 "$(echo $(grep -vE '#|^$' /etc/locale.gen | cut -d ' ' -f1))" 3>&1 1>&2 2>&3)
|
locales=$(whiptail --title "SET LOCALES" --backtitle "$PROG" --inputbox "Please enter a space separated list of locales to generate." 9 76 "$(echo $(grep -vE '#|^$' /etc/locale.gen | cut -d ' ' -f1))" 3>&1 1>&2 2>&3)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
ask_ssh_hardening(){
|
||||||
|
ssh_hardening=0
|
||||||
|
if whiptail --title "HARDEN SSH SERVER" \
|
||||||
|
--backtitle "$PROG" \
|
||||||
|
--yes-button "HARDEN SSH SERVER" \
|
||||||
|
--no-button "SKIP" \
|
||||||
|
--yesno "Do you want to apply the SSH hardening profile?\nHost-Keys will be changed and root-Login with password will be disabled." 9 76 ; then
|
||||||
|
ssh_hardening=1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
input_subscription(){
|
input_subscription(){
|
||||||
key=""
|
key=""
|
||||||
cancel=0
|
cancel=0
|
||||||
@ -384,7 +395,12 @@ installation_task(){
|
|||||||
}
|
}
|
||||||
|
|
||||||
summary(){
|
summary(){
|
||||||
whiptail --title "POSTINSTALL SUMMARY" \
|
autosnap=""
|
||||||
|
for interval in "${!auto_snap_keep[@]}"; do
|
||||||
|
autosnap="${interval}=${auto_snap_keep[$interval]} ${autosnap}"
|
||||||
|
done
|
||||||
|
|
||||||
|
if whiptail --title "POSTINSTALL SUMMARY" \
|
||||||
--backtitle $PROG \
|
--backtitle $PROG \
|
||||||
--yes-button "INSTALL" \
|
--yes-button "INSTALL" \
|
||||||
--no-button "ABORT & EXIT" \
|
--no-button "ABORT & EXIT" \
|
||||||
@ -395,7 +411,14 @@ summary(){
|
|||||||
locales: $locales\n\
|
locales: $locales\n\
|
||||||
repository: $repo_selection \n\
|
repository: $repo_selection \n\
|
||||||
subscription: $(pvesubscription get | grep status | cut -d' ' -f2)\n\
|
subscription: $(pvesubscription get | grep status | cut -d' ' -f2)\n\
|
||||||
suppress subscription warning: $suppress_warning" 30 76
|
suppress subscription warning: $suppress_warning\n\
|
||||||
|
auto-snapshot: $autosnap\n\
|
||||||
|
ssh-hardening: $ssh_hardening\n\
|
||||||
|
" 30 76 ; then
|
||||||
|
installation_task
|
||||||
|
else
|
||||||
|
cancel_dialog
|
||||||
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
source /etc/os-release
|
source /etc/os-release
|
||||||
@ -409,6 +432,9 @@ vm_swappiness
|
|||||||
# Ask for additional locales
|
# Ask for additional locales
|
||||||
ask_locales
|
ask_locales
|
||||||
|
|
||||||
|
# Ask for ssh hardening
|
||||||
|
ask_ssh_hardening
|
||||||
|
|
||||||
# Configure count per interval of zfs-auto-snapshot
|
# Configure count per interval of zfs-auto-snapshot
|
||||||
auto_snapshot
|
auto_snapshot
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user