Установка в изолированных средах

docker login https://registry.ngrsoftlab.ru

docker load -i <component>.tar
docker tag alertix/<component>:<version> registry.ngrsoftlab.ru/<component>:<version>
docker push registry.ngrsoftlab.ru/<component>:<version>
docker rmi alertix/<component>:<version> registry.ngrsoftlab.ru/<component>:<version>

sudo apt install openssh-server curl docker docker.io python3 python3-docker pass postgresql-client net-tools jq -y

#!/bin/bash

mkdir repository
chown _apt repository
cd repository

dpkg-query -f '${binary:Package}\n' -W > Inststalled_Packages
while read package; do
    apt-get download $(apt-cache depends --recurse --no-recommends --no-suggests --no-conflicts --no-breaks --no-replaces --no-enhances $package | grep "^\w" | sort -u)
done < Inststalled_Packages

apt-ftparchive packages . > Packages

cd ..
tar -czvf repository.tar.gz repository/

#!/bin/bash

docker pull registry:2.7.0
docker save registry:2.7.0 -o registry.tar

#!/bin/bash

echo "Enter Alertix version:"
read version

mkdir -p images

images=(agents gateway census opensearch ioc-watcher opensearch-dashboards logstash platform-back platform-front postgres reporter signal wec ueba watchdog)
# Для аутентификации необходимо ввести данные от личного кабинета NGR
docker login registry.ngrsoftlab.ru

for image in ${images[@]} ; do
  echo $image
  docker pull registry.ngrsoftlab.ru/$image:$version
  docker tag registry.ngrsoftlab.ru/$image:$version $image
  docker image save -o images/$image.tar $image
  gzip images/$image.tar
done

tar -czvf images.tar.gz images/

#!/bin/bash

tar -xvf repository.tar.gz
cp /etc/apt/sources.list /etc/apt/sources.list.bak
echo "deb [trusted=yes] file:$(pwd)/repository/ ./" >/etc/apt/sources.list
apt update
dpkg --configure -a
apt update
touch /etc/cloud/cloud-init.disabled
apt update

#!/bin/bash

# Стандартная процедура установки Registry
apt install docker.io net-tools jq -y

echo "Enter NEW Registry user:"
read user_name

echo "Enter user $user_name NEW password:"
read -s user_password

echo "127.0.0.1 registry.ngrsoftlab.ru" >> /etc/hosts

mkdir auth
mkdir certs
openssl req -newkey rsa:4096 -x509 -sha256  -days 3650 -nodes -out certs/server.crt -keyout certs/server.key -addext "subjectAltName = DNS:registry.ngrsoftlab.ru"
docker load --input registry.tar
docker run --rm --entrypoint htpasswd registry:2.7.0 -Bbn $user_name $user_password > auth/htpasswd
docker run -d -p 443:443 --restart=always --name registry -v "$(pwd)"/auth:/auth -e "REGISTRY_AUTH=htpasswd" -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd -e REGISTRY_HTTP_ADDR=0.0.0.0:443 -v "$(pwd)"/certs:/certs -e REGISTRY_HTTP_TLS_CERTIFICATE=/certs/server.crt -e REGISTRY_HTTP_TLS_KEY=/certs/server.key registry:2.7.0

#!/bin/bash

echo "Enter Alertix version:"
read version

tar -xvf images.tar.gz

images=(agents gateway census opensearch ioc-watcher opensearch-dashboards logstash platform-back platform-front postgres reporter signal wec ueba watchdog)
# Для аутентификации необходимо ввести данные, указанные при установке
docker login registry.ngrsoftlab.ru

for image in ${images[@]} ; do
  echo $image
  docker image load -i images/$image.tar.gz
  docker tag $image:latest registry.ngrsoftlab.ru/$image:$version
  docker push registry.ngrsoftlab.ru/$image:$version
  docker rmi $image:latest registry.ngrsoftlab.ru/$image:$version
done

#!/bin/bash

# Стандартная процедура подготовки Alertix
$(grep "alertix ALL=(ALL:ALL) NOPASSWD: ALL" /etc/sudoers) && found="True" || found="False"
if [ "$found" == "False" ]; then
    echo "alertix ALL=(ALL:ALL) NOPASSWD: ALL" >> /etc/sudoers
fi

apt install openssh-server curl docker docker.io python3 python3-docker pass postgresql-client net-tools jq -y

mkdir /home/alertix/.ssh
chmod 700 /home/alertix/.ssh
touch /home/alertix/.ssh/authorized_keys
chmod 600 /home/alertix/.ssh/authorized_keys

chown -R alertix:alertix /home/alertix/

# Ввод IP адреса локального регистри
echo "Enter local registry IP address:"
read registry_ip
# Ввод предполагаемого FQDN имени хоста, например - alertix.local
echo "Enter guess FQDN for this machine:"
read fqdn

# Получение локального IP-адреса хоста
local_ip=$(hostname -I | awk '{print $1}')

echo "$registry_ip    registry.ngrsoftlab.ru    lk.ngrsoftlab.ru" >> /etc/hosts
echo "$local_ip    $fqdn" >> /etc/hosts

# Подготовка сертификата для работы с локальным регистри
mkdir /etc/docker/certs.d/
mkdir /etc/docker/certs.d/registry.ngrsoftlab.ru
echo -n | openssl s_client -connect registry.ngrsoftlab.ru:443 -servername registry.ngrsoftlab.ru | openssl x509 > server.crt
cp server.crt /etc/docker/certs.d/registry.ngrsoftlab.ru/ca.crt
cp server.crt /usr/local/share/ca-certificates/registry.ngrsoftlab.ru.crt
update-ca-certificates