{"id":19040772,"url":"https://github.com/cloudfoundry/os-conf-release","last_synced_at":"2025-05-12T23:09:34.763Z","repository":{"id":44883374,"uuid":"56263086","full_name":"cloudfoundry/os-conf-release","owner":"cloudfoundry","description":"Additional Linux OS configuration release","archived":false,"fork":false,"pushed_at":"2025-05-06T22:03:51.000Z","size":5343,"stargazers_count":30,"open_issues_count":1,"forks_count":47,"subscribers_count":32,"default_branch":"master","last_synced_at":"2025-05-12T23:09:23.549Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cloudfoundry.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2016-04-14T19:03:24.000Z","updated_at":"2025-05-06T22:03:55.000Z","dependencies_parsed_at":"2023-02-08T19:45:40.005Z","dependency_job_id":"4fd2fbe3-c19f-4c43-a6cd-1d7deb449d70","html_url":"https://github.com/cloudfoundry/os-conf-release","commit_stats":{"total_commits":226,"total_committers":58,"mean_commits":3.896551724137931,"dds":0.7743362831858407,"last_synced_commit":"14e433923e986066f4cb5164ce20c6bbb612cb30"},"previous_names":[],"tags_count":14,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudfoundry%2Fos-conf-release","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudfoundry%2Fos-conf-release/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudfoundry%2Fos-conf-release/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cloudfoundry%2Fos-conf-release/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cloudfoundry","download_url":"https://codeload.github.com/cloudfoundry/os-conf-release/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253837411,"owners_count":21971984,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-08T22:25:09.300Z","updated_at":"2025-05-12T23:09:34.739Z","avatar_url":"https://github.com/cloudfoundry.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"## BOSH Linux OS Configuration Release\n\nEnables configuration of a typical Linux OS:\n\n- customize login banner text (job: `login_banner`)\n- add UNIX users to VM (job: `user_add`)\n- add system wide CA certificates (job: `ca_certs`)\n- configure resolv.conf search domain (job: `resolv`)\n- change TCP keepalive kernel args (job: `tcp_keepalive`)\n- apply arbitrary sysctls (job: `sysctl`)\n- disable port forwarding (job: `harden_sshd`)\n  - Note: use with caution, as this can have unintended consequences on features such as SSH Access and Tunneling.\n\nSee https://github.com/cloudfoundry-incubator/windows-utilities-release for Windows OS configuration.\n\nFor a description of these and other functions, see `jobs/`.\n\n## Usage\n\nInclude the release:\n\n```yaml\nreleases:\n  name: os-conf\n  version: latest\n```\n\n## Examples\n\nIn this example, we use BOSH's [Runtime Config](https://bosh.io/docs/runtime-config.html) to customize login banner and create two users: first, an _operator_ user with an encrypted password; second, a _backup_ user with an ssh-key:\n\n```yaml\naddons:\n  - name: os-configuration\n    jobs:\n    - name: login_banner\n      release: os-conf\n      properties:\n        login_banner:\n          text: |\n            Authorized Use Only.\n            Unauthorized use will be prosecuted to the fullest extent of the law.\n    - name: user_add\n      release: os-conf\n      properties:\n        persistent_homes: true\n        users:\n        - name: backup\n          public_key: \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbss5XtLYRYDeV8AmouVYOHmYPxPsN4F59fZnY4kJnimM3sk5TbP0ow19GMDppQOPzAQ1TcYH4sYhpnxwq5f32XYtw12rFnO8BatHISWIdjoEjHfdA1qLIMGouWZPbGIQ1qURbfJdR9e2shS7U/WSXD+AJ9Zy0ZKTsIvlukWSX8Nsxvfn7VaAFvhgI3YPmhjV3TCEVMDsWGbBXlMq+qiJt22JEOw+3dnrvfGzRUULGznO/8y4NvVQsQc5KGnJkeQWkmlOIrhUGYwd/hMn6zQEIxkR4elmwp+pjyLR0qYLUFjpMn2GJMG7lvTzF8SzQLhzTVrjW1E3nve2eCuJ5bB6/\"\n          shell: /bin/zsh # OPTIONAL: Defaults to `/bin/bash`\n          sudo: false # OPTIONAL: Defaults to `true`\n```\n\nIn this example, we configure our BOSH deployment manifest to configure the DNS search domain to `pivotal.io` and the TCP keepalive kernel settings:\n\n```yaml\ninstance_groups:\n- name: network-infrastructure\n  jobs:\n  - name: tcp_keepalive\n    release: os-conf\n    properties:\n      tcp_keepalive:\n        time:     120\n        interval:  30\n        probes:     8\n  - name: resolv\n    release: os-conf\n    properties:\n      search: pivotal.io\n```\n\nSee `manifests/` and `jobs/*/spec` for more examples.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcloudfoundry%2Fos-conf-release","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcloudfoundry%2Fos-conf-release","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcloudfoundry%2Fos-conf-release/lists"}