first commit

Linux/2xEtherne_config.txt

@@ -0,0 +1,13 @@
+auto ens192
+allow-hotplug ens224
+iface ens224 inet static
+  address 172.30.6.112
+  netmask 255.255.254.0
+  
+auto ens224
+allow-hotplug ens256
+iface ens256 inet static
+  address 172.30.6.113
+  netmask 255.255.254.0
+#  gateway 172.30.7.254
+  up route add 172.30.6.0/23 via 172.30.7.254

Linux/ActiveDirectory/AD_linux,txt

@@ -0,0 +1,7 @@
+sm233387        ALL=(ALL)       ALL
+%CYBER_ROOT ALL=(ALL:ALL) ALL
+   
+apt install sssd-ad sssd-tools realmd adcli
+pam-auth-update --enable mkhomedir
+realm join -U sm233387adm ct.czech-tv.cz
+

Linux/ActiveDirectory/sssd.conf

@@ -0,0 +1,21 @@
+
+[sssd]
+domains = ct.czech-tv.cz
+config_file_version = 2
+services = nss, pam
+
+[domain/ct.czech-tv.cz]
+default_shell = /bin/bash
+krb5_store_password_if_offline = True
+cache_credentials = True
+krb5_realm = CT.CZECH-TV.CZ
+realmd_tags = manages-system joined-with-adcli 
+id_provider = ad
+fallback_homedir = /home/%u@%d
+ad_domain = ct.czech-tv.cz
+#use_fully_qualified_names = True
+use_fully_qualified_names = False
+ldap_id_mapping = True
+access_provider = simple
+simple_allow_users = sm233387
+simple_allow_groups = APP_ROOT

Linux/Konfigurace/chrony.conf

@@ -0,0 +1,15 @@
+server time.czech-tv.cz
+server time2.czech-tv.cz
+
+keyfile /etc/chrony/chrony.keys
+
+driftfile /var/lib/chrony/chrony.drift
+
+logdir /var/log/chrony
+
+maxupdateskew 100.0
+
+rtcsync
+
+makestep 1 3
+

Linux/NetPlanIP.yaml

@@ -0,0 +1,14 @@
+network:
+    version: 2
+    renderer: networkd
+    ethernets:
+       ens160:
+          dhcp4: false
+          addresses:
+            - 172.30.29.194/24
+          nameservers:
+             addresses: [172.30.5.160, 172.31.26.160]
+             search: [czech-tv.cz, ct.czech-tv.cz]
+          routes:
+            - to: default
+              via: 172.30.29.254

Linux/PevnaIP.txt

@@ -0,0 +1,6 @@
+allow-hotplug ens192
+iface ens192 inet static
+      address 172.30.29.193
+      netmask 255.255.255.0
+      gateway 172.30.29.254
+      dns-nameservers 172.30.5.160 172.31.26.160

Linux/UserAdd.txt

@@ -0,0 +1,16 @@
+useradd -m -d /home/hua -s /bin/bash -c "HuaTech" -U hua
+2YQs8kqmcRSV8cJe
+echo "hua ALL = (root) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/hua
+sudo chmod 0440 /etc/sudoers.d/hua
+
+
+useradd -m -d /home/compunet -s /bin/bash -c "compunet" -U compunet
+passwd compunet
+usermod -aG sudo compunet
+9eWikV31oftps
+
+useradd -m -d /home/sj232987 -s /bin/bash -c "Sulc Jan" -U sj232987
+passwd sj232987
+usermod -aG sudo sj232987
+
+9eWikV31oftps

Linux/bash_debug.txt

@@ -0,0 +1,3 @@
+exec 3>&1 1>"/tmp/log.log" 2>&1
+set -x
+echo "creating a temporary directory and some files" >&3

Linux/disable_ipv6.txt

@@ -0,0 +1 @@
+GRUB_CMDLINE_LINUX_DEFAULT="ipv6.disable=1"

Linux/lvm.txt

@@ -0,0 +1,6 @@
+pvcreate /dev/sdx
+vgextend name_of_extend  /dev/sdx
+lvextend -l +100%FREE /dev/mapper/owncloud2_data-owncloud2_data_1 
+
+
+echo '/dev/mapper/data-synaman--data  /mnt/data  ext4  defaults 0 0' | sudo  tee -a /etc/fstab

Linux/thefirstrun_1.0_all/DEBIAN/control

@@ -0,0 +1,14 @@
+Source: thefirstrun
+Section: devel
+Priority: optional
+Maintainer: Stefl Martin <martin.stefl@ceskatelevize.cz>
+Build-Depends: curl sudo
+Homepage: https://debian.czech-tv.cz
+
+Package: thefirstrun 
+Version: 1.0
+Architecture: all
+Essential: no
+Priority: optional
+Maintainer: flavienbwk
+Description: A sample package creating a shortcut that triggers a bash script opening a link to the official Ubuntu website  

Linux/thefirstrun_1.0_all/DEBIAN/postinst

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+apt install sudo -y
+useradd -m -d /home/ansict -s /bin/bash -c "Ansible CT" -U ansict
+sudo usermod -aG sudo ansict
+echo "ansict  ALL=(ALL)  NOPASSWD: ALL" >> /etc/sudoers 
+mkdir /home/ansict/.ssh
+echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQD7GiVOT4oUwFXsRyAmu5LJx2imW0zMpbVSZg5sa3WDvRLHUk10e7Ch+9SzvusbljlLV31M685cmHzZhSxrGqZR9R7TnhEdZb2QVKTRLBEmL4C2o6wOF+4FKEkOrSr7msDHcwvKN9lDib0MGyvLqZd2MXclAtE+yCvwvvbwOpLztPwyFKvFuBW9PtZ0KFYYxMIxwjOMrzCmb0hlWCnhnmNh08PTR1AT7Sdz8YlMIOYEjTxzRCW8nemjtrpydoBH05q8luqS6LxB4yj2kscSBB10eOviQ6FUQBg3ob0xe3KdCUPq7o2eUah+HDAZOy3MVd+uAuogzCMnpot0VGX+vmWAcV0iwBU0CEHJl12dK6CsMCETX3cjVQqQOueCh9biav9XzbbWDkIfrx871+os15izK03o3LcTZU7sDxkzeYha6/U1Z+5wPGXHTwcwMLsxn98W04rBor2ugVs+j+iKo9P8nTiOXO1Ngq4YrLuBqgJytJScoU72l4DN+CDpl0mP2K0= ansict@ansitest" > /home/ansict/.ssh/authorized_keys2
+chown -R ansict:ansict /home/ansict
+cp /etc/ssh/sshd_config /etc/ssh/sshd_config_backup
+sed -i 's/#PubkeyAuthentication/PubkeyAuthentication/' /etc/ssh/sshd_config
+sed -i 's/#AuthorizedKeysFile/AuthorizedKeysFile/' /etc/ssh/sshd_config
+systemctl restart sshd