alpine: update portainer

alpine/apps/docker/docker.sh

@@ -1,17 +1,15 @@
 #!/bin/dash
 
-rc-update del iptables
+mkdir /srv/stacks
-rc-update del ip6tables
+mkdir /srv/data
-apk del iptables ip6tables
 
-# swapoff -a
+sed -i '/\/community/s/^#//g' /etc/apk/repositories
-# sed -i "/swap/d" /etc/fstab
 
-# sed -i "s/# //" /etc/apk/repositories
+apk update
-
+apk add docker docker-cli-compose
-apk add docker docker-compose
 
 # sysctl -w net/netfilter/nf_conntrack_max=131072
 
 rc-update add docker boot
 service docker start
+

alpine/apps/portainer/compose.yaml

@@ -0,0 +1,15 @@
+services:
+  portainer:
+    image: "portainer/portainer-ce:latest"
+    container_name: "portainer"
+    restart: unless-stopped
+    ports:
+      - 9443:9443
+    networks:
+      - bridge
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock"
+      - "/srv/data/portainer/data:/data"
+
+networks:
+  bridge:

alpine/apps/portainer/portainer.sh

@@ -1,3 +1,10 @@
 #!/bin/dash
 
-docker run -d --name="portainer" --restart=unless-stopped -p 8000:8000 -p 9000:9000 -p 9443:9443 -v /var/run/docker.sock:/var/run/docker.sock -v /srv/portainer/data:/data portainer/portainer-ce
+# docker run -d --name="portainer" --restart=unless-stopped -p 8000:8000 -p 9000:9000 -p 9443:9443 -v /var/run/docker.sock:/var/run/docker.sock -v /srv/portainer/data:/data portainer/portainer-ce
+
+BASE_URL=https://git.netm.ch/m/os-init/raw/branch/main
+
+mkdir /srv/stacks/portainer
+cd /srv/stacks/portainer
+wget "${BASE_URL}"/alpine/apps/portainer/compose.yaml
+docker compose up -d

alpine/files/rules-save

@@ -6,4 +6,6 @@
 -A INPUT -i lo -j ACCEPT
 # Ping
 -A INPUT -p icmp -j ACCEPT
+# SSH
+-A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT
 COMMIT

alpine/init.sh

@@ -67,12 +67,6 @@ IP6TablesInstall() {
 SSHEnableRootLogin() {
 	sed -i "/PermitRootLogin prohibit-password/c\PermitRootLogin yes #prohibit-password" /etc/ssh/sshd_config
 	service sshd restart
-
-	if [ -f "/etc/iptables/rules-save" ]; then
-		sed -i '/^-A INPUT -i lo -j ACCEPT.*/a -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT' /etc/iptables/rules-save
-		sed -i '/^-A INPUT -i lo -j ACCEPT.*/a # SSH' /etc/iptables/rules-save
-		iptables-restore /etc/iptables/rules-save
-	fi
 }
 SNMPDInstall() {
 	cummunityname=public