From 94b19c2b2929dfa51c10fa9ae8a1ec4f2e0a3543 Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:12:28 +0200 Subject: [PATCH 1/9] r1 --- .github/workflows/deploy-gh.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 2d043ea..46c00f0 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -41,6 +41,7 @@ jobs: - run: | systemctl status sshd ssh -o StrictHostKeyChecking=no $(hostname -i) echo hello + cat /etc/ssh/ssh_config sleep 200 From abe5e4e7fd9caf2e6b5257a9a9c60b2857267d5f Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:14:24 +0200 Subject: [PATCH 2/9] r1 --- .github/workflows/deploy-gh.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 46c00f0..98b2605 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -41,7 +41,7 @@ jobs: - run: | systemctl status sshd ssh -o StrictHostKeyChecking=no $(hostname -i) echo hello - cat /etc/ssh/ssh_config + sudo iptables -S sleep 200 From fdec77ce58e8744e889f295abbb5c2c4dea46daa Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:17:31 +0200 Subject: [PATCH 3/9] r1 --- .github/workflows/deploy-gh.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 98b2605..9c28245 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -39,9 +39,9 @@ jobs: id_rsa.pub - run: | - systemctl status sshd ssh -o StrictHostKeyChecking=no $(hostname -i) echo hello sudo iptables -S + ps -ef sleep 200 From 0ff0afc8950f441d04f5039e8e484ed40b1c79fc Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:21:26 +0200 Subject: [PATCH 4/9] r1 --- .github/workflows/deploy-gh.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 9c28245..9bcef4d 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -39,7 +39,10 @@ jobs: id_rsa.pub - run: | - ssh -o StrictHostKeyChecking=no $(hostname -i) echo hello + set -vx + #ssh -o StrictHostKeyChecking=no $(hostname -i) echo hello + ip addr + sudo iptables -S ps -ef sleep 200 @@ -71,5 +74,6 @@ jobs: chmod 600 id_rsa.pub mv id_rsa.pub .ssh/ + ip addr ssh -o StrictHostKeyChecking=no $ip echo hello From b09995eb40bc5779c3c9da3cca49c1fbf07df5bf Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:27:53 +0200 Subject: [PATCH 5/9] r1 --- .github/workflows/deploy-gh.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 9bcef4d..c19446a 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -43,7 +43,7 @@ jobs: #ssh -o StrictHostKeyChecking=no $(hostname -i) echo hello ip addr - sudo iptables -S + sudo iptables -L -v -n ps -ef sleep 200 From cb3c980befc63eec23ffba89a8994e13a11eac3b Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:34:53 +0200 Subject: [PATCH 6/9] r1 --- .github/workflows/deploy-gh.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index c19446a..35ed1a3 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -29,6 +29,10 @@ jobs: ssh-keygen -q -b 2048 -t rsa -N '' -C 'cluster key' -f ~/.ssh/id_rsa cp ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys cp ~/.ssh/id_rsa.pub . + sudo iptables -P INPUT ACCEPT + sudo iptables -P OUTPUT ACCEPT + sudo iptables -P FORWARD ACCEPT + sudo iptables -F - name: Upload control node data uses: actions/upload-artifact@v4 From b960118f6e680e4ae0fe6852714bb4952132e3db Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:47:26 +0200 Subject: [PATCH 7/9] r1 --- .github/workflows/deploy-gh.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 35ed1a3..859e1a3 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -70,6 +70,11 @@ jobs: - run: | set -vx + sudo iptables -P INPUT ACCEPT + sudo iptables -P OUTPUT ACCEPT + sudo iptables -P FORWARD ACCEPT + sudo iptables -F + echo ${{ matrix.id }} ip=$(cat control-node-ip.txt) From 02bcf64f8640b9cd15d267ee91714683daee9e1d Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:56:26 +0200 Subject: [PATCH 8/9] r1 --- .github/workflows/deploy-gh.yaml | 19 +++++++++++++++---- 1 file changed, 15 insertions(+), 4 deletions(-) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 859e1a3..966ef9b 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -29,10 +29,13 @@ jobs: ssh-keygen -q -b 2048 -t rsa -N '' -C 'cluster key' -f ~/.ssh/id_rsa cp ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys cp ~/.ssh/id_rsa.pub . + sudo iptables -X + sudo iptables -t nat -F + sudo iptables -t nat -X + sudo iptables -t mangle -F + sudo iptables -t mangle -X sudo iptables -P INPUT ACCEPT - sudo iptables -P OUTPUT ACCEPT sudo iptables -P FORWARD ACCEPT - sudo iptables -F - name: Upload control node data uses: actions/upload-artifact@v4 @@ -70,10 +73,18 @@ jobs: - run: | set -vx + sudo iptables -X + sudo iptables -t nat -F + sudo iptables -t nat -X + sudo iptables -t mangle -F + sudo iptables -t mangle -X sudo iptables -P INPUT ACCEPT - sudo iptables -P OUTPUT ACCEPT sudo iptables -P FORWARD ACCEPT - sudo iptables -F + sudo iptables -P OUTPUT ACCEPT +# sudo iptables -P INPUT ACCEPT +# sudo iptables -P OUTPUT ACCEPT +# sudo iptables -P FORWARD ACCEPT +# sudo iptables -F echo ${{ matrix.id }} ip=$(cat control-node-ip.txt) From 2fcbc36f3a53f99c71f4fc1c0ef915848bdcc10c Mon Sep 17 00:00:00 2001 From: Alexei Fedotov Date: Sun, 16 Jun 2024 00:58:23 +0200 Subject: [PATCH 9/9] r1 --- .github/workflows/deploy-gh.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/deploy-gh.yaml b/.github/workflows/deploy-gh.yaml index 966ef9b..b733145 100644 --- a/.github/workflows/deploy-gh.yaml +++ b/.github/workflows/deploy-gh.yaml @@ -81,10 +81,10 @@ jobs: sudo iptables -P INPUT ACCEPT sudo iptables -P FORWARD ACCEPT sudo iptables -P OUTPUT ACCEPT -# sudo iptables -P INPUT ACCEPT -# sudo iptables -P OUTPUT ACCEPT -# sudo iptables -P FORWARD ACCEPT -# sudo iptables -F + # sudo iptables -P INPUT ACCEPT + # sudo iptables -P OUTPUT ACCEPT + # sudo iptables -P FORWARD ACCEPT + # sudo iptables -F echo ${{ matrix.id }} ip=$(cat control-node-ip.txt)