admin-tools

An eclectic selection of system administration tools.

admin-tools uses the poshlib submodule (https://github.com/andrewgdotcom/poshlib), so to clone this repo you should use:

git clone --recurse-submodules https://github.com/andrewgdotcom/admin-tools

An ever-increasing number of the tools are also usable as poshlib modules.

General system administration

apt-repo Add an APT repository line with PGP signature by specifying the repository definition as the first argument and the URL to the PGP signing key in the second.
borgsetup Install and configure borg, borgmatic with a sensible set of defaults
borg-silencer.pl A wrapper script that prevents borg from throwing annoying compatibility warnings, but lets other errors through. Very useful for cron jobs.
borgmatic-build-excludes Canonicalise the excludes list in a borgmatic config using readlink -f
install-docker DO NOT USE
install-java8 Configure an APT repository for webupd8team and install oracle java8
multigit Perform the same operation on all git repos under PWD.
certinfo Print a summary of a PEM or JKS keystore in JSON format.

ztenable Enable zerotier join requests via the zerotier API, using the same config file as ztsetup.
ztsetup Install and configure zerotier with a prepopulated list of networks
ztlockdown Configure ufw to enforce ssh access only over zerotier

monkeyproof Install and configure monkeysphere, libpam-ssh-agent-auth for pubkey-only auth
make-pubkey-users Bulk create users pubkey-auth only and optionally prepopulate authorized_keys
convert-pubkey-users Bulk convert existing users to use pubkey-auth only
install-pam-ldap Install and configure libpam-ldap
dropbear-monkeysphere A tool to configure dropbear+monkeysphere to allow remote ssh connections during boot. Useful for unlocking crypted volumes at boot time, remotely.

Name		Name	Last commit message	Last commit date
Latest commit History 516 Commits
docs		docs
poshlib @ f361212		poshlib @ f361212
tests		tests
.gitignore		.gitignore
.gitmodules		.gitmodules
README.md		README.md
agent-sudo		agent-sudo
allow-me		allow-me
allow-me.sh		allow-me.sh
apt-repo		apt-repo
apt-repo.sh		apt-repo.sh
borg-decruft		borg-decruft
borg-silencer.pl		borg-silencer.pl
borgmatic-build-excludes		borgmatic-build-excludes
borgsetup		borgsetup
certbot-fixer		certbot-fixer
certinfo		certinfo
certinfo.sh		certinfo.sh
clean-images		clean-images
convert-pubkey-users		convert-pubkey-users
curl-wait		curl-wait
docker-compose-fixer		docker-compose-fixer
dropbear-monkeysphere		dropbear-monkeysphere
enable-rkhunter		enable-rkhunter
fix-hostname		fix-hostname
fix-linode-resolvconf		fix-linode-resolvconf
fixboot		fixboot
fixboot-chroot		fixboot-chroot
git-post-receive		git-post-receive
gpg-forward-setup		gpg-forward-setup
grub-test		grub-test
install-docker		install-docker
install-java8		install-java8
install-ntp		install-ntp
install-pam-ldap		install-pam-ldap
install-wks-server		install-wks-server
make-pubkey-users		make-pubkey-users
monkeyproof		monkeyproof
multigit		multigit
preseed-admins		preseed-admins
rsyncr		rsyncr
ssh-hardening		ssh-hardening
ssh-wait		ssh-wait
stdpane		stdpane
supervisor-to-systemd		supervisor-to-systemd
swap-inflater		swap-inflater
systemd-fixer		systemd-fixer
usermap-entrypoint.sh		usermap-entrypoint.sh
vercomp		vercomp
vercomp.sh		vercomp.sh
yaml-elastic.sh		yaml-elastic.sh
yaml-extract		yaml-extract
yum-repo		yum-repo
ztdisable		ztdisable
ztenable		ztenable
ztlockdown		ztlockdown
ztsetup		ztsetup