lua-resty-acme 1.src
Runs an APT package install commandShell invokes the curl command
SHA-256391ba3f1479afdbece336fbfdd807c004bc581b4ec479083519315e52e23313a
MaleculeH₅(Cm₁₁Cr₄F₄Os₄Po₂)Md₂(BkPa)
Evidence
1#!/bin/bash
2
3echo "Prepare containers"
4docker run -d -e CONSUL_CLIENT_INTERFACE='eth0' -e CONSUL_BIND_INTERFACE='eth0' -p 127.0.0.1:8500:8500 consul agent -server -bootstrap-expect=1
5openssl req -x509 -newkey rsa:4096 -keyout /tmp/key.pem -out /tmp/cert.pem -days 1 -nodes -subj '/CN=some.vault'
6chmod 777 /tmp/key.pem /tmp/cert.pem
7docker run -d --user root --cap-add=IPC_LOCK -e VAULT_DEV_ROOT_TOKEN_ID=root --name=vault -e 'VAULT_LOCAL_CONFIG={"listener":{"tcp":{"tls_key_file":"/tmp/key.pe …
9:159… rtise-client-urls http://${HostIP}:2379,http://${HostIP}:4001 -listen-client-urls http://0.0.0.0:2379,http://0.0.0.0:4001 -initial-advertise-peer-urls http://${HostIP}:2380 -listen-peer-urls http://0.0.0.0:2380 -initial-cluster-token etcd-cluster-1 -initial-cluster etcd0=http://${HostIP}:2380 - …
9:474… r-state new
10docker logs etcd
11
12echo "Prepare vault for JWT auth"
13curl 'https://localhost:8210/v1/sys/auth/kubernetes.test' -k -X POST -H 'X-Vault-Token: root' -H 'Content-Type: application/json; charset=utf-8' --data-raw '{"path":"kubernetes.test","type":"jwt","config":{}}'
14curl 'https://localhost:8210/v1/auth/kubernetes.test/config' -k -X PUT -H 'X-Vault-Token: root' -H 'content-type: application/json; charset=utf-8' --data-raw '{"jwt_validation_pubkeys":["-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMCbmrsltFKqStOoxl8V\nK5ZlrIMb8d+W62yoXW1DKdg+cPNq0vGD94cxl9NjjRzlSR/NVZq6Q34c1lkbenPw\nf3CYfmbQupOKTJKhBdn9sFCCbW0gi6gQv0BaU3Pa8iGfVcZPctAtdbwmNKVd26hW\nmvnoJYhyewhY+j3ooLdnmh55cZU9w1VO0PaSf2zGSmCUeIao77jWcnkEauK2RrYv\nq5yB6w54Q71+lp2jZil9e4IJP/WqcS1CtmKgiWLoZuWNJXDWaa8LbcgQfsxudn3X\nsgHaYnAdZJOaCsDS/ablKmUOLIiI3TBM6dkUlBUMK9OgAsu+wBdX521rK3u+NNVX\n3wIDAQAB\n-----END PUBLIC KEY-----"],"default_role":"root","namespace_in_state":false,"provider_config":{}}'
15curl …
20:18… -d
21
22# on macOS use host.docker.internal
23if [[ "$OSTYPE" == 'darwin'* ]]; then
24 host_ip=$(docker run -it --rm alpine ping host.docker.internal -c1|grep -oE "\d+\.\d+\.\d+\.\d+"|head -n1)
25 # update the default ip in resolver
26 curl --request POST --data '{"ip":"'$host_ip'"}' http://localhost:8055/set-default-ipv4
27fi
28popd
29
30echo "Generate certs"
31openssl genpkey -algori …
79:14… t/fixtures/prepare_env.sh
80
81 - name: Setup tools
82 run: |
83 sudo apt-get install -qq -y cpanminus axel ca-certificates
84 mkdir -p $OPENSSL_PREFIX $LUAJIT_PREFIX
85 # perl cache
86 pushd /home/ …
Showing the top 5 files — 3 more files (27 regions) not shown.
No evidence locations were recorded for this file. Raw result