페이지 이력

# cat /etc/rocky-release
Rocky Linux release 9.1 (Blue Onyx)
# dnf install podman
# mkdir -p /opt/gmazoyer_looking_glass/agent
# cd /opt/gmazoyer_looking_glass
# touch logo.png
# touch config.php
# touch looking-glass.log
# touch looking-glass.db
# chown 33:33 looking-glass.*
# ssh-keygen -C looking_glass_agent -f ./agent/id_rsa
# cut -d" " -f2 ./agent/id_rsa.pub | base64 -d >| id_rsa.pub.b64
# chcon -R system_u:object_r:container_file_t:s0 /opt/gmazoyer_looking_glass
# podman image pull docker.io/gmazoyer/looking-glass
# podman run --name looking_glass \
    --restart unless-stopped \
    -v /opt/gmazoyer_looking_glass/logo.png:/var/www/html/logo.png \
    -v /opt/gmazoyer_looking_glass/config.php:/var/www/html/config.php \
    -v /opt/gmazoyer_looking_glass/looking-glass.db:/var/www/html/looking-glass.db \
    -v /opt/gmazoyer_looking_glass/looking-glass.log:/var/log/looking-glass.log \
    -v /opt/gmazoyer_looking_glass/agent:/home/agent \
    -v /opt/gmazoyer_looking_glass/agent/id_rsa.pub:/var/www/html/id_rsa.pub \
    -v /opt/gmazoyer_looking_glass/agent/id_rsa.pub.b64:/var/www/html/id_rsa.pub.b64 \
    -p 80:80/tcp \
    -d docker.io/gmazoyer/looking-glass
# podman stop looking_glass
# podman start looking_glass
# podman restart looking_glass

# vi /opt/gmazoyer_looking_glass/config.php
# podman restart looking_glass

# podman exec -it looking_glass bash

root@container:# cat /var/www/html/Dockerfile
FROM php:8.1-apache
RUN apt update \
    && apt -y install bash git ssh openssl libgmp-dev libgmp3-dev libsqlite3-dev \
    && ln -s /usr/include/x86_64-linux-gnu/gmp.h /usr/include/gmp.h \
    && docker-php-ext-install -j$(nproc) gmp \
    && docker-php-ext-install pdo_sqlite \
    && a2enmod remoteip \
    && git clone https://github.com/gmazoyer/looking-glass.git --branch master --single-branch /var/www/html/ \
    && apt purge -y --auto-remove git \
    && rm -rf /var/lib/apt/lists/* \
    && mkdir -p /var/log/ \
    && touch /var/log/looking-glass.log \
    && chown www-data /var/log/looking-glass.log

root@container:# ls -al /var/log/apache2
access.log -> /dev/stdout
error.log -> /dev/stderr
other_vhosts_access.log -> /dev/stdout

# docker logs looking_glass
[Wed Apr 05 01:47:56.264821 2023] [mpm_prefork:notice] [pid 1] AH00163: Apache/2.4.53 (Debian) PHP/8.1.6 configured -- resuming normal operations
[Wed Apr 05 01:47:56.264943 2023] [core:notice] [pid 1] AH00094: Command line: 'apache2 -D FOREGROUND'
CLIENT_IP - - [05/Apr/2023:01:49:34 +0000] "GET / HTTP/1.1" 200 2015 "-" ...
CLIENT_IP - - [05/Apr/2023:01:49:34 +0000] "GET /logo.png HTTP/1.1" 200 15346 "http://SERVER_IP/" ...
...
CLIENT_IP - - [05/Apr/2023:01:49:34 +0000] "POST /execute.php HTTP/1.1" 200 677 "http://SERVER_IP/" ...
CLIENT_IP - - [05/Apr/2023:01:49:34 +0000] "GET /favicon.ico HTTP/1.1" 404 491 "http://SERVER_IP/" ...
CLIENT_IP - - [05/Apr/2023:01:53:13 +0000] "GET /config.php HTTP/1.1" 403 495 "-" ...
[Wed Apr 05 01:53:13.005230 2023] [authz_core:error] [pid 15] [client 150.183.121.83:56375] AH01630: client denied by server configuration: /var/

# tail -f /opt/gmazoyer_looking_glass/looking_glass.log
[2023-04-05 04:06:42] [client: CLIENT_IP] daej_rtr1 > [BEGIN]  show bgp ipv4 unicast CLIENT_IP