sh vpn docker openvpn全局保护双因素身份验证

Posted 2021-05-07

#https://raw.githubusercontent.com/dlenski/openconnect/globalprotect/globalprotect-challenge-login.py

sudo add-apt-repository ppa:lenski/openconnect-gp
sudo apt-get update

#Install openconnect
sudo apt-get install openconnect

./globalprotect-challenge-login.py 199.231.127.83 --no-verify
# Username: xyz.xyz

#!/bin/bash

#1st ask for a password, assume username is mwilson

USER=`whoami`
VPNDIR="/home/$USER/vpn"

fill_fifo() {
  mkfifo $VPNDIR/scaryfifo
  echo "$USER
$PASSWORD" > $VPNDIR/scaryfifo
  rm $VPNDIR/scaryfifo
}

echo "Using current username of $USER"
echo "Invoking askpass"
PASSWORD=`ssh-askpass`

fill_fifo &
sleep 1

docker run -it --cap-add=NET_ADMIN --device /dev/net/tun --rm --name mcsvpn-eu -v /home/$USER/vpn/:/vpn -p 5922:22 -d $USER/openvpn-client --config /vpn/eu-mcs-vpn.conf --auth-user-pass /vpn/scaryfifo 

fill_fifo &
sleep 1

#docker run -it --cap-add=NET_ADMIN --device /dev/net/tun --rm --name mcsvpn-us -v /home/$USER/vpn/:/vpn -p 5923:22 -d $USER/openvpn-client --config /vpn/us-mcs-vpn.conf --auth-user-pass /vpn/scaryfifo


docker run --rm --net container:mcsvpn-eu --name mcsjump-eu -d -e USER=`whoami` -v ~/.ssh/pubkeys/:/keys $USER/ssh-jumphost
#docker run --rm --net container:mcsvpn-us --name mcsjump-us -d -e USER=`whoami` -v ~/.ssh/pubkeys/:/keys $USER/ssh-jumphost