diff --git a/source/syonad/prepar.rst b/source/syonad/prepar.rst index 4e15151..227c6b3 100644 --- a/source/syonad/prepar.rst +++ b/source/syonad/prepar.rst @@ -6,4 +6,50 @@ Introduction Voici la documentation pour preparer le system ou sera executer l'agent. -On commence par installer les packet necessaire comme qemu, etc... +.. code-block:: + + apt-get install -y \ + vim \ + htop \ + socat \ + ebtables \ + qemu-system qemu-utils qemu-kvm \ + genisoimage \ + curl \ + whois \ + tcpdump \ + bridge-utils + + sysctl -w net.ipv4.ip_forward=1 + iptables -A OUTPUT -p icmp --icmp-type time-exceeded -j DROP + + iptables -N ACCEPT_BOGON + + iptables -A ACCEPT_BOGON -s 10.0.0.0/8 -j ACCEPT + iptables -A ACCEPT_BOGON -s 192.168.0.0/16 -j ACCEPT + iptables -A ACCEPT_BOGON -s 192.168.15.0/24 -j DROP + iptables -A ACCEPT_BOGON -s 172.16.0.0/12 -j ACCEPT + iptables -A ACCEPT_BOGON -s 127.0.0.0/8 -j ACCEPT + iptables -A ACCEPT_BOGON -s 169.254.0.0/16 -j ACCEPT + iptables -A ACCEPT_BOGON -s 0.0.0.0/8 -j ACCEPT + iptables -A ACCEPT_BOGON -s 240.0.0.0/4 -j ACCEPT + iptables -A ACCEPT_BOGON -s 224.0.0.0/4 -j ACCEPT + iptables -A ACCEPT_BOGON -j DROP + + iptables -A INPUT -j ACCEPT_BOGON + + brctl addbr br-public + brctl stp "br-public" off + ip link set up dev "br-public" + + ip link add name "br-000000" type bridge + ip link set dev "br-000000" type bridge stp_state 0 + ip link set up dev "br-000000" + + ip link set "eno1" master "br-000000" + ip a add 192.168.14.101/24 dev "br-000000" + ip route replace default via 192.168.14.1 dev "br-000000" + ip a del 192.168.14.101/24 dev eno1 + pkill dhclient + + systemctl daemon-reload