Browse Source

Licensing and Makefile standards

master
DarkFeather 6 years ago
parent
commit
70a7f8835b
  1. 27
      Bastion/LICENSE
  2. 31
      Bastion/Makefile
  3. 27
      DarkNet/LICENSE
  4. 28
      DarkNet/Makefile
  5. 27
      Foundation/LICENSE
  6. 19
      Foundation/Makefile
  7. 15
      Foundation/foundation.conf
  8. 27
      Geth/LICENSE
  9. 13
      Geth/Makefile
  10. 27
      IRC/LICENSE
  11. 7
      IRC/Makefile
  12. 27
      LICENSE
  13. 27
      Print/LICENSE
  14. 15
      Print/Makefile
  15. 28
      README
  16. 27
      SSH/LICENSE
  17. 7
      SSH/Makefile
  18. 27
      SSL/LICENSE
  19. 11
      SSL/Makefile
  20. 27
      Sora/LICENSE
  21. 15
      Sora/Makefile
  22. 27
      TeamGreen/LICENSE
  23. 9
      TeamGreen/Makefile
  24. 27
      VirusScan/LICENSE
  25. 11
      VirusScan/Makefile
  26. 27
      Visitant/Makefile
  27. 142
      Visitant/sshd_config
  28. 4
      Visitant/vnc.config
  29. 27
      WebServer/LICENSE
  30. 15
      WebServer/Makefile
  31. 27
      WhiteHatDemo/LICENSE
  32. 8
      WhiteHatDemo/Makefile
  33. 27
      Yggdrasil/LICENSE
  34. 5
      Yggdrasil/Makefile

27
Bastion/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

31
Bastion/Makefile

@ -1,23 +1,30 @@
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
pacman -Syu freerdp putty
${INSTALLER} freerdp putty
install: compile create-crypt.bash remote new-ssh-key
bash ./create-crypt.bash
echo Bastion > /etc/hostname
hostname Bastion
id bastion || (useradd -m bastion)
if ! id bastion; then useradd -m bastion; fi
sed -i 's/UsePam yes/UsePam yes\nAllowUsers bastion/' /etc/ssh/sshd_config
ssh-keygen -A
systemctl enable sshd
cat ./bastion.bashrc >> /home/bastion/.bashrc
mkdir /home/bastion/bin
mkdir -p /home/bastion/bin
cp ./remote /home/bastion/bin
cp ./new-ssh-key /home/bastion/bin
@echo Set a password for the bastion user:
passwd bastion
checkperm:
chmod u+x /home/bastion/bin/*
chown -R bastion:bastion /home/bastion
chown -R bastion:bastion /crypt
@echo Set a password for the bastion user:
passwd bastion
diff:
diff /home/bastion/.bashrc ./bastion.bashrc
test: compile
@echo Nothing to test.
@ -25,3 +32,17 @@ test: compile
clean:
@echo Nothing to clean.
reverse:
cp /home/bastion/.bashrc ./bastion.bashrc
foldingathome:
if ! getent passwd fah; then useradd fah; fi
if [ ! -d /usr/local/src/fahclient ]; then git -C /usr/local/src/ clone https://aur.archlinux.org/fahclient.git; fi
git -C /usr/local/src/fahclient pull
printf "What is your deprivileged user? "; read user; chown -R $$user /usr/local/src/fahclient; cd /usr/local/src/fahclient; sudo -u $$user makepkg -sri
chown fah:fah /opt/fah
sudo -u fah FAHClient --configure
cp foldingathome.service /usr/lib/systemd/system
systemctl daemon-reload
systemctl start foldingathome
systemctl enable foldingathome

27
DarkNet/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

28
DarkNet/Makefile

@ -1,43 +1,29 @@
INSTALLER != if [ `uname -r | grep -c kali` -eq 1 ]; then echo apt-get install; fi; if [ `uname -r | grep -c ARCH` -eq 1 ]; then echo pacman -S; fi; if [ -f /etc/redhat-release ]; then echo yum install; fi; if [ `uname -r | grep -c fc24` -eq 1 ]; then echo dnf install; fi;
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
${INSTALLER} tor torsocks lynx transmission-cli openvpn
if [ -x `which startxfce4` ]; then ${INSTALLER} transmission-gtk ; fi
${INSTALLER} tor torsocks lynx deluge openvpn
if [ ! -d /usr/local/src/tor-browser-en ]; then git -C /usr/local/src/ clone https://aur.archlinux.org/tor-browser-en.git; fi
git -C /usr/local/src/tor-browser-en pull
install: compile
cp tor-lynx /usr/local/bin
cp update-transmission-blocklist /root/bin
@echo
@Optionally, install tor-browser-en from /usr/local/src/.
reverse:
cp /usr/local/bin/tor-lynx .
cp /root/bin/update-transmission-blocklist .
diff:
diff ./tor-lynx /usr/local/bin/tor-lynx
test:
tor-lynx
bash ./tor-lynx
checkperm:
chown root:root /usr/local/bin/tor-lynx /root/bin/update-transmission-blocklist
chown root:root /usr/local/bin/tor-lynx
chmod 0755 /usr/local/bin/tor-lynx
chmod 0700 /root/bin/update-transmission-blocklist
clean:
@echo Nothing to do.
foldingathome:
if ! getent passwd fah; then useradd fah; fi
if [ ! -d /usr/local/src/fahclient ]; then git -C /usr/local/src/ clone https://aur.archlinux.org/fahclient.git; fi
git -C /usr/local/src/fahclient pull
printf "What is your deprivileged user? "; read user; chown -R $$user /usr/local/src/fahclient; cd /usr/local/src/fahclient; sudo -u $$user makepkg -sri
chown fah:fah /opt/fah
sudo -u fah FAHClient --configure
cp foldingathome.service /usr/lib/systemd/system
systemctl daemon-reload
systemctl start foldingathome
systemctl enable foldingathome

27
Foundation/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

19
Foundation/Makefile

@ -1,6 +1,6 @@
HTTPROOT = /srv/http/aninix.net
INSTALLER != /usr/bin/bash -c "$$(curl -s https://aninix.net/foundation/installer-test.bash)"
MAKEFILECHECKS = '^INSTALLER != /usr/bin/bash -c "$$(curl -s https://aninix.net/foundation/installer-test.bash)"' '^compile:' '^install: compile' '^diff:' '^reverse:' '^test:' '^checkperm:' '^clean: '
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
MAKEFILECHECKS = "$$(egrep '^INSTALLER' ./Makefile)" '^compile:' '^install: compile' '^diff:' '^reverse:' '^test:' '^checkperm:' '^clean:'
compile:
[ -x /usr/bin/git ] || ${INSTALLER} git
@ -16,11 +16,10 @@ compile:
passwd git; if [ "$?" -ne 0 ]; then echo Password not set.; fi;
@echo Use SSH keys to access the repository in read/write
install: ${HTTPROOT} compile /home/git/.gitconfig ./foundation.conf /etc/lighttpd/lighttpd.conf /usr/bin/lighttpd /root/bin/restart-service ./cgitrc ./git-makerepo
install: compile /home/git/.gitconfig ./foundation.conf ./cgitrc ./git-makerepo ./installer-test.bash
mkdir -p /srv/foundation
ln -sf /srv/foundation ${HTTPROOT}
${INSTALLER} cgit python-pygments
if [ -d ${HTTPROOT} ]; then cp ./foundation.conf /etc/lighttpd/conf.d; chown http:http /etc/lighttpd/conf.d/foundation.conf; ln -sf /usr/share/webapps/cgit ${HTTPROOT}; usermod -a -G git http; lighttpd -t -f /etc/lighttpd/lighttpd.conf && /root/bin/restart-service lighttpd; wget -O ${HTTPROOT}/foundation/FoundationIcon.png https://aninix.net/wiki/images/4/4b/FoundationIcon.png; fi
if [ -d ${HTTPROOT} ]; then ln -sf /srv/foundation ${HTTPROOT}; cp ./foundation.conf /etc/lighttpd/conf.d; chown http:http /etc/lighttpd/conf.d/foundation.conf; ln -sf /usr/share/webapps/cgit ${HTTPROOT}; usermod -a -G git http; lighttpd -t -f /etc/lighttpd/lighttpd.conf && systemctl restart lighttpd; wget -O ${HTTPROOT}/foundation/FoundationIcon.png https://aninix.net/wiki/images/4/4b/FoundationIcon.png; fi
cp ./cgitrc /etc/
bash -c $$'sed -i \"s/$$(grep \'formatter = Html\' /usr/lib/cgit/filters/syntax-highlighting.py)/formatter = HtmlFormatter(encoding=\'utf-8\', style=\'paraiso-dark\')/\" /usr/lib/cgit/filters/syntax-highlighting.py'
cp ./git-makerepo /usr/local/bin
@ -41,6 +40,7 @@ diff:
diff ./git-makerepo /usr/local/bin/git-makerepo
diff ./foundation.conf /etc/lighttpd/conf.d/foundation.conf
diff ./cgitrc /etc/lighttpd/conf.d/foundation.conf
diff ./installer-test.bash /srv/foundation/installer-test.bash
reverse:
cp /etc/cgitrc .
@ -59,11 +59,8 @@ checkperm:
if [ -d ${HTTPROOT} ]; then chmod 0640 ${HTTPROOT}/foundation/FoundationIcon.png; chown root:git ${HTTPROOT}/foundation/FoundationIcon.png; fi
find-missing-hooks-in-src:
@echo Checking for missing standard hooks per https://aninix.net/wiki/Development_Best_Practices#Makefiles
@echo Expected checks:
@for i in ${MAKEFILECHECKS}; do echo $$i; done
@for i in `wget -q -O - https://aninix.net/foundation/ | grep toplevel-repo | cut -f 4 -d \'`; do if [ -z $$i ]; then continue; fi; for file in `find ../../$$i -type f -name Makefile`; do if [ ! -f "$$file" ]; then echo NO MAKEFILE FOR $$i; else echo Checking $$file; for check in ${MAKEFILECHECKS}; do if [ `egrep -c "$$check" "$$file"` -eq 0 ]; then echo Missing hook $$check in $$file; fi; done; fi; done; done
@echo Checking for missing standard hooks per 'https://aninix.net/wiki/Development_Best_Practices#Makefiles'
@for i in `wget -q -O - https://aninix.net/foundation/ | grep toplevel-repo | cut -f 4 -d \'`; do if [ -z $$i ]; then continue; fi; if [ ! -d /usr/local/src/$$i ]; then echo "$$i is not checked out."; continue; fi; for file in `find ../../$$i -maxdepth 2 -type f -name Makefile`; do if [ ! -f "$$file" ]; then echo NO MAKEFILE FOR $$i; else echo Checking $$file; for check in ${MAKEFILECHECKS}; do if [ `egrep -c "$$check" "$$file"` -eq 0 ]; then echo Missing hook $$check in $$file; fi; done; fi; done; if [ ! -f "../../$$i/LICENSE" ]; then echo NO LICENSE FILE FOR $$i; fi; done
@echo
@echo The following projects have tags for "find-missing-hooks-in-src" to ensure consistency:
find /usr/local/src/ -type f -name Makefile -exec egrep -l '^find-missing-hooks-in-src:' {} \;
@for i in `wget -q -O - https://aninix.net/foundation/ | grep toplevel-repo | cut -f 4 -d \'`; do if [ -z $$i ]; then continue; fi; if [ ! -d /usr/local/src/$$i ]; then echo "$$i is not checked out."; continue; fi; egrep -R -l '^find-missing-hooks-in-src:' ../../$$i; done

15
Foundation/foundation.conf

@ -1,10 +1,8 @@
server.modules += ( "mod_cgi", )
$HTTP["url"] =~ "^/cgit" {
server.document-root = "/usr/share/webapps/cgit"
server.indexfiles = ("cgit.cgi")
cgi.assign = ("cgit.cgi" => "")
}
alias.url += ("/cgit" => "/usr/share/webapps/cgit/")
cgi.assign = ("cgit.cgi" => "")
$HTTP["url"] =~ "^/foundation" {
dir-listing.activate = "enable"
}
@ -12,6 +10,9 @@ url.rewrite-if-not-file += (
"^/foundation/([^?]*)" => "/cgit/cgit.cgi/$1/tree",
)
url.rewrite-once += (
"^/foundation/$" => "/cgit/cgit.cgi/",
"^/foundation$" => "/cgit/cgit.cgi/",
"^/foundation$" => "/cgit/cgit.cgi",
"^/foundation/$" => "/cgit/cgit.cgi",
"^/cgit$" => "/cgit/cgit.cgi",
"^/cgit/$" => "/cgit/cgit.cgi",
)

27
Geth/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

13
Geth/Makefile

@ -1,4 +1,5 @@
DEPLIST=python-vincenty python-voluptuous python-webcolors python-multidict python-aiohttp python-async-timeout
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
for i in ${DEPLIST}; do if [ ! -d /usr/local/src/$$i ]; then git -C /usr/local/src/ clone https://aur.archlinux.org/$$i; fi; git -C /usr/local/src/$$i pull; done
@ -12,9 +13,21 @@ install: compile
@echo 'Visit https://home-assistant.io/components/#all to see what you can integrate with this service.'
@echo 'Visit http://localhost:8123/ to configure and monitor this system.'
remote:
#Thanks to http://www.raspberry-pi-geek.com/Archive/2015/10/Raspberry-Pi-IR-remote#article_l1
sudo apt-get install lirc
# We use Raspberry Pi IR infrared remote Shield V1.0 expansion board Transceivers Module by 1Panda Tech LTD, which lists button1 as Pin13, button2 as pin15, IR IN as PIN 11, and IR OUT as PIN 12
sudo /bin/bash -c 'printf "lirc_dev\nlirc_rpi gpio_in_pin=11 gpio_out_pin=12\n" >> /etc/modules'
sudo /bin/bash -c 'cat remote/hardware.conf > /etc/lirc/hardware.conf'
sudo /bin/bash -c 'printf "dtoverlay=lirc-rpi,gpio_in_pin=11,gpio_out_pin=12\n" >> /boot/config.txt'
sudo shutdown -r now
reverse:
@echo Nothing to do
diff:
@echo Nothing to do
test:
@echo Nothing to do.

27
IRC/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

7
IRC/Makefile

@ -1,3 +1,5 @@
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile: qchat-compile # werewolf-compile
if ! getent passwd ircd; then useradd -G git,ssl -d /etc/inspircd/ ircd; fi
if [ ! -d /usr/local/src/inspircd ]; then git -C /usr/local/src/ clone https://aur.archlinux.org/inspircd.git; fi
@ -10,7 +12,7 @@ compile: qchat-compile # werewolf-compile
@echo You will need to manually install the inspircd and anope packages in /usr/local/src.
@echo Anope should be installed entirely to the /opt/anope structure.
install: /usr/bin/inspircd /opt/anope/bin/services qchat-install checkperm # werewolf-install
install: compile /usr/bin/inspircd /opt/anope/bin/services qchat-install checkperm # werewolf-install
# Hook for Heartbeat
if [ -f /usr/local/etc/Heartbeat/services.list ] && [ `grep -c inspircd /usr/local/etc/Heartbeat/services.list` -eq 0 ]; then printf 'IRC ; pgrep -c inspircd ; 1\nIRCServices ; pgrep -ac services ; 1\n' >> /usr/local/etc/Heartbeat/services.list; fi
@echo
@ -69,3 +71,6 @@ werewolf-install: werewolf-compile ./werewolf.service
systemctl daemon-reload
systemctl enable werewolf
systemctl start werewolf
diff:
@echo Nothing to do.

27
LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

27
Print/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

15
Print/Makefile

@ -1,11 +1,13 @@
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
pacman -Sy cups cups-filters
${INSTALLER} cups cups-filters
git clone https://aur.archlinux.org/brscan4.git /usr/local/src/brscan4
cd /usr/local/src/brscan4
sudo -u depriv makepkg -sri
install: scanner printer
install: compile scanner printer
test:
@echo Nothing to do.
@ -28,3 +30,12 @@ printer:
cupsenable AniNIXPrint
lpstat -s
@echo Browse to http://localhost:631/, as the printer may need additional configuration for cups.
checkperm:
@echo Nothing to do.
diff:
@echo Nothing to do.
clean:
@echo Nothing to do.

28
README

@ -1 +1,27 @@
This is a readme.
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

27
SSH/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

7
SSH/Makefile

@ -1,5 +1,7 @@
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
pacman -S openssh
${INSTALLER} openssh
install: compile
ssh-keygen -A
@ -11,6 +13,9 @@ install: compile
systemctl enable sshd
systemctl start sshd
diff: ./sshd_config
diff ./sshd_config /etc/ssh/sshd_config
reverse:
egrep -v '^#' /etc/ssh/sshd_config | egrep -v '^$$' > ./sshd_config

27
SSL/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

11
SSL/Makefile

@ -1,8 +1,8 @@
CERTROOT = "/etc/letsencrypt/live/aninix.net/"
INSTALLPKG = pacman --noconfirm -S
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
${INSTALLPKG} certbot openssl
${INSTALLER} certbot openssl
if ! getent group ssl; then groupadd ssl; fi
install: compile
@ -27,6 +27,9 @@ checkperm:
reverse:
@echo Nothing to do.
diff:
@echo Nothing to do.
clean:
@echo Nothing to do.
@ -35,11 +38,13 @@ update:
cat ${CERTROOT}/cert.pem > ${CERTROOT}/certkey.pem
cat ${CERTROOT}/privkey.pem >> ${CERTROOT}/certkey.pem
make checkperm
if [ -d /usr/lib/systemd/system/yggdrasil.service ]; then bash -c 'cd /usr/local/src/ConfigPackages/Yggdrasil; make ssl'; fi
if [ -f /usr/lib/systemd/system/yggdrasil.service ]; then make -C /usr/local/src/ConfigPackages/Yggdrasil ssl; fi
currentinfo:
openssl x509 -text -noout -in ${CERTROOT}/cert.pem| less
test: currentinfo
selfsigned: compile
[ ! -f ${CERTROOT}/cert.pem ]
if [ ! -f /etc/ssl/certs/dhparam.pem ]; then openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048; fi

27
Sora/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

15
Sora/Makefile

@ -1,7 +1,9 @@
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
pacman -S openldap
${INSTALLER} openldap
install: /etc/openldap/slapd.conf ./includes.txt ./indexes.txt ./ldap.conf ./ldapadd.txt ./ldap-adduser.bash
install: compile /etc/openldap/slapd.conf ./includes.txt ./indexes.txt ./ldap.conf ./ldapadd.txt ./ldap-adduser.bash
@echo Running steps from https://wiki.archlinux.org/index.php/OpenLDAP
systemctl stop slapd.service
systemctl disable slapd.service
@ -58,6 +60,15 @@ checkperm:
chmod 0750 /etc/openldap/*.d
chmod u+x /root/bin/ldap-adduser
diff: ./slapd.conf
@echo Slapd no longer uses a single conf file. Your configuration may not match!
slapcat -f ./test.slapd.conf -b "dc=aninix,dc=net"
diff ./test.slapd.conf ./slapd.conf
rm ./test.slapd.conf
test:
slaptest
tls: ./sslsupport.txt /etc/letsencrypt/live/aninix.net/cert.pem
if ! (id ldap | grep '(ssl)'); then usermod -a -G ssl ldap; fi
if ! egrep '^TLSCipherSuite DEFAULT' /etc/openldap/slapd.conf; then cat sslsupport.txt >> /etc/openldap/slapd.conf; fi

27
TeamGreen/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

9
TeamGreen/Makefile

@ -1,5 +1,9 @@
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
pacman -Syu --noconfirm
if [ `echo ${INSTALLER} | egrep -c '^pacman'` -eq 1 ]; then pacman -Syu --noconfirm; fi
if [ `echo ${INSTALLER} | egrep -c '^yum ' -eq 1 ]; then yum update; fi
if [ `echo ${INSTALLER} | egrep -c '^apt ' -eq 1 ]; then apt-get update && apt-get upgrade; fi
install: compile
@echo Run \'make test\' to validate all packages.
@ -7,6 +11,9 @@ install: compile
reverse:
@echo Nothing to do.
diff:
@echo Nothing to do.
test: fake-aninix
bash ./teamgreen.bash
make restore-hosts

27
VirusScan/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

11
VirusScan/Makefile

@ -1,9 +1,10 @@
SCRIPTS = vscan
SCRIPTS = vscan
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
pacman -S clamav --noconfirm
${INSTALLER} clamav
install: ${SCRIPTS} download compile
install: compile ${SCRIPTS} download compile
if [ `pgrep -afc clamd` -lt 1 ]; then systemctl start clamd; fi
systemctl enable clamd
/usr/bin/freshclam
@ -16,6 +17,10 @@ reverse:
for i in ${SCRIPTS}; do cat /root/bin/$$i > ./$$i; done
cat /usr/local/bin/download > ./download
diff:
for i in ${SCRIPTS}; do diff ./$$i /root/bin/$$i; done
diff ./download /usr/local/bin/download
test:
/bin/bash ./download https://aninix.net/ /tmp/file

27
Visitant/Makefile

@ -1,27 +0,0 @@
compile:
pacman -S openssh tigervnc # pulseaudio pamixer pulseaudio-alsa
install: compile ssh vnc # pulse
clean:
reverse:
cp /etc/ssh/sshd_config .
cp /etc/skel/.vnc.config ./vnc.config
ssh: /usr/bin/sshd
if ! grep ssh-allow /etc/group; then groupadd ssh-allow; fi
if ! grep sftp-home-jail /etc/group; then groupadd sftp-home-jail; fi
cp ./sshd_config /etc/ssh/sshd_config
ssh-keygen -A
systemctl start sshd
systemctl enable sshd
vnc: /usr/bin/vncserver
@echo Use vncserver to start a vncserver. You can copy vnc.config to your home directory as \$$HOME/.vnc/config to start it across localhost for SSH tunneling.
@echo 'We highly recommend using SSH tunneling to route traffic remotely. ssh user@host -L 5901:localhost:<service port> will handle the forwarding.'
pulse: /usr/bin/pulseaudio
if ! grep audio /etc/group; then groupadd audio; fi
@echo All audio-capable users need to be in the audio group. You can start pulseaudio as an individual user with "pulseaudio --start"

142
Visitant/sshd_config

@ -1,142 +0,0 @@
# $OpenBSD: sshd_config,v 1.89 2013/02/06 00:20:42 dtucker Exp $
# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options override the
# default value.
# Authentication:
StrictModes yes
RSAAuthentication yes
ChallengeResponseAuthentication no
DenyGroups [^ssh-allow]
AllowGroups ssh-allow
PermitRootLogin no
# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
# but this is overridden so installations will only check .ssh/authorized_keys
AuthorizedKeysFile .ssh/authorized_keys
# Forwarding options #
AllowTcpForwarding yes
X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost yes
PrintMotd yes
PrintLastLog yes
PermitTunnel yes
# override default of no subsystems
Subsystem sftp /usr/lib/ssh/sftp-server
### UNUSED OPTIONS ####
#Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
# The default requires explicit activation of protocol 1
#Protocol 2
# HostKey for protocol version 1
#HostKey /etc/ssh/ssh_host_key
# HostKeys for protocol version 2
#HostKey /etc/ssh/ssh_host_rsa_key
#HostKey /etc/ssh/ssh_host_dsa_key
#HostKey /etc/ssh/ssh_host_ecdsa_key
# Lifetime and size of ephemeral version 1 server key
#KeyRegenerationInterval 1h
#ServerKeyBits 1024
# Logging
# obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
#LogLevel INFO
# Authentication #
#MaxAuthTries 6
#MaxSessions 10
#LoginGraceTime 2m
#PubkeyAuthentication yes
#ForwardX11Trusted yes
#AuthorizedPrincipalsFile none
#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here!
#PasswordAuthentication yes
#PermitEmptyPasswords no
# Change to no to disable s/key passwords
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
#UsePAM yes
#AllowAgentForwarding yes
#GatewayPorts no
#ChrootDirectory none
#VersionAddendum none
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation sandbox # Default for new installations.
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS yes
#PidFile /run/sshd.pid
#MaxStartups 10:30:100
# no default banner path
#Banner none
## MATCH GROUP COMMANDS
Match Group sftp-home-jail
X11Forwarding no
AllowTcpForwarding no
PermitTunnel no
ForceCommand internal-sftp #/usr/lib/ssh/sftp-server
ChrootDirectory /home # Lock the user in their home directory

4
Visitant/vnc.config

@ -1,4 +0,0 @@
geometry=1200x700
alwaysshared
dpi=96
localhost

27
WebServer/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

15
WebServer/Makefile

@ -1,4 +1,4 @@
INSTALLER != if [ `uname -r | grep -c kali` -eq 1 ]; then echo apt-get install; fi; if [ `uname -r | grep -c ARCH` -eq 1 ]; then echo pacman -S; fi; if [ -f /etc/redhat-release ]; then echo yum install; fi; if [ `uname -r | grep -c fc24` -eq 1 ]; then echo dnf install; fi;
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
FILELIST = style.css Template.php head.php foot.php crashreporting unlisted/blackpage.php
compile:
@ -14,11 +14,16 @@ install: compile
mkdir -p /etc/lighttpd/conf.d
cp ./fastcgi.conf /etc/lighttpd/conf.d
make test
make checkperm
# Hook for Heartbeat
if [ -f /usr/local/etc/Heartbeat/services.list ] && [ `grep -c WebServer /usr/local/etc/Heartbeat/services.list` -eq 0 ]; then printf 'WebServer ; pgrep -c lighttpd ; 2\nWebServer ; pgrep -c php-cgi ; 4\n' >> /usr/local/etc/Heartbeat/services.list; fi
# Hook for systemd
if [ -f /usr/lib/systemd/system/lighttpd.service ]; then systemctl disable lighttpd; systemctl stop lighttpd; cp /usr/lib/systemd/system/lighttpd.service /usr/lib/systemd/system/webserver.service; sed -i '/^Description=/c\Description=AniNIX::WebServer (Lighttpd)' /usr/lib/systemd/system/webserver.service; systemctl daemon-reload; systemctl enable webserver; systemctl start webserver; fi
diff: /srv/http/aninix.net /etc/lighttpd
for i in ${FILELIST}; do echo $$i; diff ./$$i /srv/http/aninix.net/$$i; echo done
diff ./lighttpd.conf /etc/lighttpd/lighttpd.conf
diff ./fastcgi.conf /etc/lighttpd/conf.d/fastcgi.conf
reverse: /srv/http/aninix.net /etc/lighttpd
for i in ${FILELIST}; do cp -r /srv/http/aninix.net/$$i .; done
@ -28,8 +33,10 @@ reverse: /srv/http/aninix.net /etc/lighttpd
test:
lighttpd -t -f /etc/lighttpd/lighttpd.conf
checkperm:
chmod
checkperm: /srv/http/aninix.net/ /etc/lighttpd/
chmod -R 0755 /srv/http/aninix.net/
chmod -R 0750 /etc/lighttpd/
chgrp -R http /srv/http/aninix.net/ /etc/lighttpd/
clean:
@echo Nothing to do.

27
WhiteHatDemo/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

8
WhiteHatDemo/Makefile

@ -1,8 +1,9 @@
FIRSTINTERFACE != bash -c "ip addr list | grep mtu | grep -v '1: lo:' | cut -f 2 -d ':' | sed 's/ //g'"
TARGETSITE="facebook.com"
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
pacman -Syu tigervnc inetutils --noconfirm
${INSTALLER} tigervnc inetutils
if ! getent passwd testuser; then useradd -m testuser; echo You need to set the testuser password.; fi
install: compile
@ -11,7 +12,10 @@ install: compile
@echo You should also grab a Kali Linux iso from https://aninix.net/wolfpack
reverse:
@echo Nothing to do.
cat /etc/lighttpd/lighttpd.conf > ./lighttpd.conf
diff:
diff ./lighttpd.conf /etc/lighttpd/lighttpd.conf
test:
lighttpd -t -f ./lighttpd.conf

27
Yggdrasil/LICENSE

@ -0,0 +1,27 @@
# http://www.wtfpl.net/about/
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
ANINIX ADDENDUM
Trademark Pending 2017 (https://aninix.net/irc/)
The "AniNIX" name and |> logo is trademark-pending as of 2017. All
AniNIX materials can be reproduced and re-used, though you must
contact the admins of the network to get written permission to use
the AniNIX name.
Attribution is appreciated for other materials but not legally
required or necessary.

5
Yggdrasil/Makefile

@ -1,5 +1,5 @@
FILELIST = yggdrasil-get yggdrasil-lock yggdrasil-set-music-data yggdrasil-unlock youtube-mp3
INSTALLER != if [ `uname -r | grep -c kali` -eq 1 ]; then echo apt-get install; fi; if [ `uname -r | grep -c ARCH` -eq 1 ]; then echo pacman -S; fi; if [ -f /etc/redhat-release ]; then echo yum install; fi; if [ `uname -r | grep -c fc24` -eq 1 ]; then echo dnf install; fi;
INSTALLER != curl -s https://aninix.net/foundation/installer-test.bash | /bin/bash
compile:
if [ ! -d /srv/yggdrasil ]; then mkdir -p /srv/yggdrasil/Pictures /srv/yggdrasil/Videos /srv/yggdrasil/Digital_Library /srv/yggdrasil/Pictures /srv/yggdrasil/new_acquisition /srv/yggdrasil/Software; fi
@ -22,6 +22,9 @@ scripts: ${FILELIST}
reverse:
for i in ${FILELIST}; do cp /usr/local/bin/$$i .; done
diff:
for i in ${FILELIST}; do diff ./$$i /usr/local/bin/$$i; done
clean:
@echo Nothing to do.