Ajout : iodined tunnel IP sur DNS.

[lhc/ateliers.git] / remote / iodine

diff --git a/remote/iodine b/remote/iodine
new file mode 100755 (executable)
index 0000000..2c124c1
--- /dev/null
+++ b/remote/iodine
@@ -0,0 +1,9 @@
+#!/bin/sh -eu
+tool=$(readlink -e "${0%/*}/..")
+. "$tool"/remote/lib.sh
+
+sudo install -d -m 750 -o iodine -g nogroup \
+ /var/run/iodine
+
+gpg --decrypt "$tool"/var/sec/iodine/"$local_iodine_ns".pass.gpg |
+sudo iodine -f -t /var/run/iodine/ -u iodine "$@" "$local_iodine_ns"