Prepare the system
==================

Introduction
------------

Voici la documentation pour preparer le system ou sera executer l'agent.

.. code-block::

    apt-get install -y \
        vim \
        htop \
        socat \
        ebtables \
        qemu-system qemu-utils qemu-kvm \
        genisoimage \
        curl \
        whois \
        tcpdump \
        bridge-utils

    sysctl -w net.ipv4.ip_forward=1
    iptables -A OUTPUT -p icmp --icmp-type time-exceeded -j DROP

    iptables -N ACCEPT_BOGON

    iptables -A ACCEPT_BOGON -s 10.0.0.0/8 -j ACCEPT
    iptables -A ACCEPT_BOGON -s 192.168.0.0/16 -j ACCEPT
    iptables -A ACCEPT_BOGON -s 192.168.15.0/24 -j DROP
    iptables -A ACCEPT_BOGON -s 172.16.0.0/12 -j ACCEPT
    iptables -A ACCEPT_BOGON -s 127.0.0.0/8 -j ACCEPT
    iptables -A ACCEPT_BOGON -s 169.254.0.0/16 -j ACCEPT
    iptables -A ACCEPT_BOGON -s 0.0.0.0/8 -j ACCEPT
    iptables -A ACCEPT_BOGON -s 240.0.0.0/4 -j ACCEPT
    iptables -A ACCEPT_BOGON -s 224.0.0.0/4 -j ACCEPT
    iptables -A ACCEPT_BOGON -j DROP

    iptables -A INPUT -j ACCEPT_BOGON

    brctl addbr br-public
    brctl stp   "br-public" off
    ip link set up dev "br-public"

    ip link add name "br-000000" type bridge
    ip link set dev "br-000000" type bridge stp_state 0
    ip link set up dev "br-000000"

    ip link  set "eno1" master "br-000000"
    ip a add 192.168.14.101/24 dev "br-000000"
    ip route replace default via 192.168.14.1 dev "br-000000"
    ip a del 192.168.14.101/24 dev eno1
    pkill dhclient

    systemctl daemon-reload