提及第八次实验：docker配置ftp，samba，nfs，dhcp，dns

README.md

@@ -1,2 +1 @@
-# linux
-学习Linux
+"# 2015-linux-private-canyousee" 

docker/dhcp/Dockerfile

@@ -0,0 +1,14 @@
+#version 1.0
+FROM ubuntu
+VOLUME ["~/"]
+WORKDIR ~/
+
+RUN apt-get update
+RUN apt-get -y install isc-dhcp-server
+RUN rm -v /etc/network/interfaces
+RUN rm -v /etc/default/isc-dhcp-server
+RUN rm -v /etc/dhcp/dhcpd.conf
+ADD config/interfaces /etc/network/interfaces
+ADD config/isc-dhcp-server /etc/default/isc-dhcp-server
+ADD config/dhcpd.conf /etc/dhcp/dhcpd.conf
+CMD service dhcp start

docker/dhcp/config/dhcpd.conf

@@ -0,0 +1,126 @@
+#
+# Sample configuration file for ISC dhcpd for Debian
+#
+# Attention: If /etc/ltsp/dhcpd.conf exists, that will be used as
+# configuration file instead of this file.
+#
+#
+
+# The ddns-updates-style parameter controls whether or not the server will
+# attempt to do a DNS update when a lease is confirmed. We default to the
+# behavior of the version 2 packages ('none', since DHCP v2 didn't
+# have support for DDNS.)
+ddns-update-style none;
+
+# option definitions common to all supported networks...
+option domain-name "example.org";
+option domain-name-servers ns1.example.org, ns2.example.org;
+
+default-lease-time 600;
+max-lease-time 7200;
+
+# If this DHCP server is the official DHCP server for the local
+# network, the authoritative directive should be uncommented.
+#authoritative;
+
+# Use this to send dhcp log messages to a different log file (you also
+# have to hack syslog.conf to complete the redirection).
+log-facility local7;
+
+# No service will be given on this subnet, but declaring it helps the 
+# DHCP server to understand the network topology.
+
+#subnet 10.152.187.0 netmask 255.255.255.0 {
+#}
+
+# This is a very basic subnet declaration.
+
+#subnet 10.254.239.0 netmask 255.255.255.224 {
+#  range 10.254.239.10 10.254.239.20;
+#  option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
+#}
+
+# This declaration allows BOOTP clients to get dynamic addresses,
+# which we don't really recommend.
+
+#subnet 10.254.239.32 netmask 255.255.255.224 {
+#  range dynamic-bootp 10.254.239.40 10.254.239.60;
+#  option broadcast-address 10.254.239.31;
+#  option routers rtr-239-32-1.example.org;
+#}
+
+# A slightly different configuration for an internal subnet.
+#subnet 10.5.5.0 netmask 255.255.255.224 {
+#  range 10.5.5.26 10.5.5.30;
+#  option domain-name-servers ns1.internal.example.org;
+#  option domain-name "internal.example.org";
+#  option subnet-mask 255.255.255.224;
+#  option routers 10.5.5.1;
+#  option broadcast-address 10.5.5.31;
+#  default-lease-time 600;
+#  max-lease-time 7200;
+#}
+
+# Hosts which require special configuration options can be listed in
+# host statements.   If no address is specified, the address will be
+# allocated dynamically (if possible), but the host-specific information
+# will still come from the host declaration.
+
+#host passacaglia {
+#  hardware ethernet 0:0:c0:5d:bd:95;
+#  filename "vmunix.passacaglia";
+#  server-name "toccata.fugue.com";
+#}
+
+# Fixed IP addresses can also be specified for hosts.   These addresses
+# should not also be listed as being available for dynamic assignment.
+# Hosts for which fixed IP addresses have been specified can boot using
+# BOOTP or DHCP.   Hosts for which no fixed address is specified can only
+# be booted with DHCP, unless there is an address range on the subnet
+# to which a BOOTP client is connected which has the dynamic-bootp flag
+# set.
+#host fantasia {
+#  hardware ethernet 08:00:07:26:c0:a5;
+#  fixed-address fantasia.fugue.com;
+#}
+
+# You can declare a class of clients and then do address allocation
+# based on that.   The example below shows a case where all clients
+# in a certain class get addresses on the 10.17.224/24 subnet, and all
+# other clients get addresses on the 10.0.29/24 subnet.
+
+#class "foo" {
+#  match if substring (option vendor-class-identifier, 0, 4) = "SUNW";
+#}
+
+#shared-network 224-29 {
+#  subnet 10.17.224.0 netmask 255.255.255.0 {
+#    option routers rtr-224.example.org;
+#  }
+#  subnet 10.0.29.0 netmask 255.255.255.0 {
+#    option routers rtr-29.example.org;
+#  }
+#  pool {
+#    allow members of "foo";
+#    range 10.17.224.10 10.17.224.250;
+#  }
+#  pool {
+#    deny members of "foo";
+#    range 10.0.29.10 10.0.29.230;
+#  }
+#}
+subnet 192.168.128.0 netmask 255.255.255.0 {
+ range 192.168.128.20 192.168.128.40;
+ option routers 192.168.128.1;
+ option subnet-mask 255.255.255.0;
+ option broadcast-address 192.168.128.255;
+ option domain-name-servers ns1.example.org, ns2.example.org,192.168.128.1;
+ option domain-name "example.org";
+ default-lease-time 600;
+ max-lease-time 7200;
+}
+
+
+
+
+

docker/dhcp/config/interfaces

@@ -0,0 +1,18 @@
+# This file describes the network interfaces available on your system
+# and how to activate them. For more information, see interfaces(5).
+
+source /etc/network/interfaces.d/*
+
+# The loopback network interface
+auto lo
+iface lo inet loopback
+
+# The primary network interface
+auto enp0s3
+iface enp0s3 inet dhcp
+
+auto enp0s9
+iface enp0s9 inet static
+address 192.168.128.15
+netmask 255.255.255.0
+gateway 192.168.128.15

docker/dhcp/config/isc-dhcp-server

@@ -0,0 +1,21 @@
+# Defaults for isc-dhcp-server initscript
+# sourced by /etc/init.d/isc-dhcp-server
+# installed at /etc/default/isc-dhcp-server by the maintainer scripts
+
+#
+# This is a POSIX shell fragment
+#
+
+# Path to dhcpd's config file (default: /etc/dhcp/dhcpd.conf).
+#DHCPD_CONF=/etc/dhcp/dhcpd.conf
+
+# Path to dhcpd's PID file (default: /var/run/dhcpd.pid).
+#DHCPD_PID=/var/run/dhcpd.pid
+
+# Additional options to start dhcpd with.
+#	Don't use options -cf or -pf here; use DHCPD_CONF/ DHCPD_PID instead
+#OPTIONS=""
+
+# On what interfaces should the DHCP server (dhcpd) serve DHCP requests?
+#	Separate multiple interfaces with spaces, e.g. "eth0 eth1".
+INTERFACES="enp0s9"

docker/dns/Dockerfile

@@ -0,0 +1,14 @@
+#version 1.0
+FROM ubuntu
+VOLUME ["~/"]
+WORKDIR ~/
+
+RUN apt-get update
+RUN echo "test"
+RUN apt-get -y install bind9
+RUN apt-get -y install dnsutils
+RUN rm -v /etc/bind/named.conf.local
+ADD config/named.conf.local /etc/bind/
+RUN rm -v /etc/bind/db.cuc.edu.cn
+ADD config/db.cuc.edu.cn /etc/bind/db.cuc.edu.cn
+CMD service bind9 start

docker/dns/config/db.cuc.edu.cn

@@ -0,0 +1,15 @@
+;
+; BIND data file for local loopback interface
+;
+$TTL	604800
+@	IN	SOA	cuc.edu.cn. admin.cuc.edu.cn. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	ns.cuc.edu.cn.
+ns.cuc.edu.cn.	IN	A	192.168.128.21
+wp.sec.cuc.edu.cn.	IN	A	192.168.128.15
+dvwa.sec.cuc.edu.cn.	IN	CNAME	wp.sec.cuc.edu.cn.

docker/dns/config/named.conf.local

@@ -0,0 +1,12 @@
+//
+// Do any local configuration here
+//
+
+// Consider adding the 1918 zones here, if they are not used in your
+// organization
+//include "/etc/bind/zones.rfc1918";
+zone "cuc.edu.cn"{
+type master;
+file "/etc/bind/db.cuc.edu.cn";
+allow-transfer {192.168.128.21;};
+};

docker/nfs/Dockerfile

@@ -0,0 +1,12 @@
+#version 1.0
+FROM ubuntu
+VOLUME ["~/"]
+WORKDIR ~/
+
+RUN apt-get update
+RUN apt-get -y install nfs-kernel-server
+RUN mkdir -p /var/nfs/general
+RUN chown nobody:nogroup /var/nfs/general
+RUN rm /etc/exports
+ADD config/exports /etc/exports
+CMD service nfs start

docker/nfs/config/exports

@@ -0,0 +1,2 @@
+/var/nfs/general 192.168.56.201(rw,sync)
+/home 192.168.56.201(sync,no_root_squash,no_subtree_check)

docker/proftpd/Dockerfile

@@ -0,0 +1,11 @@
+#version 1.0
+FROM ubuntu
+VOLUME ["~/"]
+WORKDIR ~/
+
+RUN apt-get update
+RUN echo "test"
+RUN apt-get -y install proftpd
+RUN rm -v /etc/proftpd/proftpd.conf
+ADD docker/proftpd/config/proftpd.conf /etc/proftpd/
+CMD service proftpd start