Initial hackbox

noelbundick · noelbundick · commit 728f67a62a30 · 2019-08-28T21:27:34.000-07:00
diff --git a/.bashrc b/.bashrc
@@ -0,0 +1,131 @@
+# ~/.bashrc: executed by bash(1) for non-login shells.
+# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
+# for examples
+
+# If not running interactively, don't do anything
+case $- in
+    *i*) ;;
+      *) return;;
+esac
+
+# don't put duplicate lines or lines starting with space in the history.
+# See bash(1) for more options
+HISTCONTROL=ignoreboth
+
+# append to the history file, don't overwrite it
+shopt -s histappend
+
+# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
+HISTSIZE=1000
+HISTFILESIZE=2000
+
+# check the window size after each command and, if necessary,
+# update the values of LINES and COLUMNS.
+shopt -s checkwinsize
+
+# If set, the pattern "**" used in a pathname expansion context will
+# match all files and zero or more directories and subdirectories.
+#shopt -s globstar
+
+# make less more friendly for non-text input files, see lesspipe(1)
+[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
+
+# set variable identifying the chroot you work in (used in the prompt below)
+if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
+    debian_chroot=$(cat /etc/debian_chroot)
+fi
+
+# set a fancy prompt (non-color, unless we know we "want" color)
+case "$TERM" in
+    xterm-color|*-256color) color_prompt=yes;;
+esac
+
+# uncomment for a colored prompt, if the terminal has the capability; turned
+# off by default to not distract the user: the focus in a terminal window
+# should be on the output of commands, not on the prompt
+#force_color_prompt=yes
+
+if [ -n "$force_color_prompt" ]; then
+    if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
+	# We have color support; assume it's compliant with Ecma-48
+	# (ISO/IEC-6429). (Lack of such support is extremely rare, and such
+	# a case would tend to support setf rather than setaf.)
+	color_prompt=yes
+    else
+	color_prompt=
+    fi
+fi
+
+if [ "$color_prompt" = yes ]; then
+    PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
+else
+    PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
+fi
+unset color_prompt force_color_prompt
+
+# If this is an xterm set the title to user@host:dir
+case "$TERM" in
+xterm*|rxvt*)
+    PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
+    ;;
+*)
+    ;;
+esac
+
+# enable color support of ls and also add handy aliases
+if [ -x /usr/bin/dircolors ]; then
+    test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
+    alias ls='ls --color=auto'
+    #alias dir='dir --color=auto'
+    #alias vdir='vdir --color=auto'
+
+    alias grep='grep --color=auto'
+    alias fgrep='fgrep --color=auto'
+    alias egrep='egrep --color=auto'
+fi
+
+# colored GCC warnings and errors
+#export GCC_COLORS='error=01;31:warning=01;35:note=01;36:caret=01;32:locus=01:quote=01'
+
+# some more ls aliases
+alias ll='ls -alF'
+alias la='ls -A'
+alias l='ls -CF'
+
+# Add an "alert" alias for long running commands.  Use like so:
+#   sleep 10; alert
+alias alert='notify-send --urgency=low -i "$([ $? = 0 ] && echo terminal || echo error)" "$(history|tail -n1|sed -e '\''s/^\s*[0-9]\+\s*//;s/[;&|]\s*alert$//'\'')"'
+
+# Alias definitions.
+# You may want to put all your additions into a separate file like
+# ~/.bash_aliases, instead of adding them here directly.
+# See /usr/share/doc/bash-doc/examples in the bash-doc package.
+
+if [ -f ~/.bash_aliases ]; then
+    . ~/.bash_aliases
+fi
+
+# enable programmable completion features (you don't need to enable
+# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
+# sources /etc/bash.bashrc).
+if ! shopt -oq posix; then
+  if [ -f /usr/share/bash-completion/bash_completion ]; then
+    . /usr/share/bash-completion/bash_completion
+  elif [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+  fi
+fi
+
+#### Above ths line is the default .bashrc
+
+# strip the instance name from the prompt, because it's huge and/or meaningless with a container
+export PS1="\W\$ "
+
+# hop into the code folder
+cd ~/hack
+
+# activate the virtual env for everyone
+source ~/hack/.venv/bin/activate
+
+# Login to azure
+az login --identity >/dev/null
diff --git a/Dockerfile b/Dockerfile
@@ -0,0 +1,42 @@
+FROM ubuntu:18.04
+
+RUN apt-get update
+
+# Azure CLI
+RUN apt-get -y install ca-certificates curl apt-transport-https lsb-release gnupg
+RUN curl -sL https://packages.microsoft.com/keys/microsoft.asc | \
+    gpg --dearmor | \
+    tee /etc/apt/trusted.gpg.d/microsoft.asc.gpg > /dev/null
+    
+RUN echo "deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ $(lsb_release -cs) main" | \
+    tee /etc/apt/sources.list.d/azure-cli.list
+
+RUN apt-get update && apt-get install azure-cli
+
+# OS packages
+RUN apt-get install -y build-essential jq git libmysqlclient-dev python3 python3-dev python3-pip python3-venv
+
+# Enable sshd
+RUN apt-get install -y openssh-server
+RUN mkdir /var/run/sshd
+RUN sed -ri 's/^#?PermitRootLogin\s+.*/PermitRootLogin yes/' /etc/ssh/sshd_config
+RUN sed -ri 's/UsePAM yes/#UsePAM yes/g' /etc/ssh/sshd_config
+EXPOSE 22
+
+# Pre-pull dependencies
+WORKDIR /root/hack
+ARG REQ=https://raw.githubusercontent.com/noelbundick/python-hackbox/master/requirements.txt
+RUN curl -Lo requirements.txt $REQ \
+    && python3 -m venv .venv \
+    && . .venv/bin/activate \
+    && pip install pip wheel -U \
+    && pip install -r requirements.txt \
+    && rm requirements.txt
+
+# Setup the environment
+ENV REPO_BRANCH=master
+RUN git config --global user.name "Hacker"
+COPY .bashrc /root
+
+COPY startup.sh /
+CMD ["/bin/bash", "/startup.sh"]
diff --git a/README.md b/README.md
@@ -0,0 +1,29 @@
+# python-hackbox
+
+This is a Python dev container meant to be run on Azure Container Instances
+
+## Usage
+
+One-time steps
+
+```bash
+# Build a container with your dependencies that should be baked in
+docker build --build-arg REQ=https://raw.githubusercontent.com/noelbundick/python-hackbox/master/requirements.txt
+
+# Push to Docker Hub
+docker push acanthamoeba/hackbox
+
+# Set up some one-time Azure resources
+az group create -n hackbox -l westus
+az identity create -n hackbox -g hackbox
+PRINCIPAL_ID=`az identity show -n hackbox -g hackbox --query principalId -o tsv`
+az role assignment create --role Contributor --assignee $PRINCIPAL_ID
+
+# Create an Azure Container Instance
+SSHPUBLIC=`cat ~/.ssh/id_rsa.pub`
+REPO_URL=https://github.com/noelbundick/python-hackbox.git
+REPO_BRANCH=master
+IDENTITY_ID=`az identity show -n hackbox -g hackbox --query id -o tsv`
+
+az container create -g hackbox -n hackbox --image acanthamoeba/hackbox:latest -e "REPO_URL=$REPO_URL" "SSH_PUBLIC_KEY=$SSHPUBLIC" --ports 22 --dns-name-label noelhackbox --cpu 2 --memory 2 --assign-identity $IDENTITY_ID
+```
diff --git a/requirements.txt b/requirements.txt
@@ -0,0 +1 @@
+pylint
diff --git a/startup.sh b/startup.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+set -euo pipefail
+
+mkdir -p ~/.ssh
+echo $SSH_PUBLIC_KEY >> ~/.ssh/authorized_keys
+
+# Pull git repo
+git init
+git remote add origin $REPO_URL
+git pull origin $REPO_BRANCH
+
+# Start sshd
+/usr/sbin/sshd -D
