You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
61 lines
2.1 KiB
61 lines
2.1 KiB
[Unit]
|
|
Description=Vsftpd
|
|
After=local-fs.target network.target vsftpd-build.service lego.target
|
|
Wants=vsftpd-build.service lego.target
|
|
|
|
# Only start if the local configuration file exists
|
|
ConditionPathExists=/etc/quadlets/vsftpd/vsftpd.conf.d/local.conf
|
|
|
|
# Stop when the target is stopped
|
|
PartOf=vsftpd.target
|
|
|
|
[Service]
|
|
# Copy a complete version of /etc/{passwd,group,shadow} in /run/quadlets/vsftpd so that SELinux
|
|
# does not prevent Vsftpd from reading those files.
|
|
#
|
|
# Oh, and by the way, mangle /etc/passwd so that local users' homes are located in /data.
|
|
# This is required by Vsftpd to let the users login.
|
|
ExecStartPre=/bin/sh -Eeuo pipefail -c '\
|
|
umask 0077 ; \
|
|
for file in passwd group shadow; do \
|
|
getent $file | (if [[ "$file" == "passwd" ]]; then \
|
|
sed -r "s|^([^:]+:[^:]*:[^:]+:1[0-9][0-9][0-9]:[^:]*:)[^:]*(:.*)$|\\1/data\\2|" ; \
|
|
else \
|
|
cat ; \
|
|
fi) > /run/quadlets/vsftpd/cache/$file ; \
|
|
done'
|
|
|
|
# Get the TLS certificates provided by the lego cookbook in place before starting vsftpd.
|
|
# /run/quadlets/vsftpd/tls is a tmpfs: it has to be populated at each start.
|
|
# When the certificates are renewed, the lego hook (other/lego/vsftpd.sh) copies them again.
|
|
ExecStartPre=/bin/bash -Eeuo pipefail -c '\
|
|
shopt -s nullglob ; \
|
|
for file in /var/lib/quadlets/lego/certificates/*.crt /var/lib/quadlets/lego/certificates/*.key; do \
|
|
install -o root -g root -m 0600 -t /run/quadlets/vsftpd/tls "$file" ; \
|
|
done'
|
|
|
|
[Container]
|
|
ContainerName=vsftpd
|
|
|
|
# Image
|
|
Image=localhost/vsftpd:latest
|
|
AutoUpdate=local
|
|
|
|
# Security
|
|
User=0
|
|
|
|
# Storage
|
|
Volume=/var/lib/quadlets/vsftpd/log:/var/log/vsftpd:Z
|
|
Volume=/var/lib/quadlets/vsftpd/data:/var/lib/vsftpd:Z
|
|
Volume=/etc/quadlets/vsftpd/vsftpd.conf.d:/etc/vsftpd:ro
|
|
Volume=/run/quadlets/vsftpd/cache/passwd:/etc/passwd:Z
|
|
Volume=/run/quadlets/vsftpd/cache/group:/etc/group:Z
|
|
Volume=/run/quadlets/vsftpd/cache/shadow:/etc/shadow:Z
|
|
Volume=/run/quadlets/vsftpd/tls:/etc/vsftpd/tls:Z
|
|
# Heads up ! You need to mount the volumes you want to share in a drop-in configuration file !
|
|
|
|
# Network
|
|
Network=host
|
|
|
|
[Install]
|
|
WantedBy=vsftpd.target
|
|
|