Tomster/Fedora-CoreOS-Ignition
1
0
Fork 0
mirror of https://github.com/tommytran732/Fedora-CoreOS-Ignition synced 2024-11-22 09:21:32 -05:00
Code
173 Commits 1 Branch 0 Tags 1.6 MiB
4906ea33d8
Commit Graph

173 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Tommy
996c4a331e
Update Ignition files 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-04-15 04:24:16 -04:00
Tommy
af51a505ae
Fix gVisor SELinux context 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-04-15 04:22:34 -04:00
Robin Ophalvens
6a0f4afe1d
Add missing sed in-place flag (#1) 
* Add missing sed in-place flag

* Update README to warn passwordless users
 2023-04-15 04:05:22 -04:00
Robin Ophalvens
a71b39940e
Unbound systemd overrides affect Service section, not the Unit (#2) 
Unbound overrides affect Service section, not the Unit
 2023-04-12 07:16:14 -04:00
Tommy
3b845ea7d2
Indentcation fix 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-29 11:49:12 -04:00
Tommy
92fc6758d3
Regornaize the postinst service 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-29 01:07:50 -04:00
Tommy
6393fd4f75
Allow ICMP 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-20 13:59:24 -04:00
Tommy
948aaf845d
Remove remote filesystems 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-19 22:05:31 -04:00
Tommy
fd4cd807fc
Use runc for watchtower 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-17 18:45:07 -04:00
Tommy
db59e93bbd
Change watchtower schedule 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-17 18:40:22 -04:00
Tommy
e04ff2250e
Enable gvisor updater 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-16 14:03:16 -04:00
Tommy
e1bb116517
Allow ptrace 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-16 13:59:34 -04:00
Tommy
5b9605128f
Disable rollout wariness 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-15 19:07:01 -04:00
Tommy
c593f64c5c
Use host network for gVisor 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-15 19:03:29 -04:00
Tommy
041b880c09
Fix deletion command 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-15 03:28:08 -04:00
Tommy
a81fa14ebf
Add 5 seconds sleep 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-15 02:10:09 -04:00
Tommy
0826c5962c
Use gVisor 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-15 01:38:02 -04:00
Tommy
30196a1409
Remove do-not-query-localhost 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-03-11 11:00:35 -05:00
Tommy
be7393ba04
Update Kicksecure sysctl 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-02-04 05:26:13 -05:00
Tommy
b2bfd7df0a
Remove unnecessary unbound configs 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-01-24 09:10:51 -05:00
Tommy
73855406f7
Update unbound configuration 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-01-24 07:50:03 -05:00
Tommy
c2dc6c9363
Use link for unbound 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-01-24 02:33:44 -05:00
Tommy
3148545adf
Enable DNSSEC and DOT 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-01-24 01:07:16 -05:00
Tommy
31d030ef1a
Add VerifyHostKeyDNS 
Signed-off-by: Tommy <contact@tommytran.io>
 2023-01-18 06:53:12 -05:00
Tommy
66846eacc7
Use SSHD socket 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-12-26 10:17:18 -05:00
Tommy
28f36ae0aa
Typo fix 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-12-14 01:41:07 -05:00
Tommy
e91473fe24
Additional hardening 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-12-01 14:47:50 -05:00
Tommy
f6393dc6fa
Add auto-updater.service to Docker-Compose files 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-11-25 02:39:56 -05:00
Tommy
59fcc5ba77
Requires=network-online.target 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-16 04:23:35 -04:00
Tommy
b436314d54
kernel.yama.ptrace_scope=3 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-16 04:20:37 -04:00
Tommy
3f3cbd4bd3
Fix invalid config 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-12 19:01:25 -04:00
Tommy
5febcefa93
Update kargs 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-12 18:41:54 -04:00
Tommy
901bb8af68
Additional Mitigations 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-12 18:34:28 -04:00
Tommy
c75d4a363a
Update SSHD and Kernel configs 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-12 17:58:29 -04:00
Tommy
254eeaef42
Remove fail2ban 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-12 12:07:04 -04:00
Tommy
2387d6f27f
Update Ignition files 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-05 08:22:43 -04:00
Tommy
52c86b8089
Add NTS 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-05 08:18:33 -04:00
Tommy
372ea1030f
Create Ignition files 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-05 04:20:06 -04:00
Tommy
700e399e07
Finalize boot params 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-05 02:26:22 -04:00
Tommy
379e38d9ad
Remove sysctl.kernel.dmesg_restrict=1 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-05 01:25:39 -04:00
Tommy
740bbe5bc2
Yama ptrace 2 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-04 23:51:52 -04:00
Tommy
228f54c2fd
Remove efi=disable_early_pci_dma 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-04 23:28:40 -04:00
Tommy
0d9c6e847c
Remove sysctl.kernel.core_pattern=|/bin/false 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-04 23:21:57 -04:00
Tommy
620ed5dce2
Minor Fixes 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-04 22:59:14 -04:00
Tommy
2ce2af2b83
Fix Kargs 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-04 22:51:57 -04:00
Tommy
a3491e4774
Remove prelockd 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-04 16:13:26 -04:00
Tommy
9a7c211a09
Update SSH Keys 
Signed-off-by: Tommy <contact@tommytran.io>
 2022-09-04 16:10:20 -04:00
Tommy
441bc9a826
Update OnlyOffice.yml 2022-04-11 19:47:11 -04:00
Tommy
a4eddc6d24
Update Docker-Compose.yml 2022-04-11 19:46:45 -04:00
Tommy
de1ee30c38
Update GitLab.yml 2022-04-11 19:46:22 -04:00