This is a modified container that includes a slightly modified version of update-systemd-resolved to notify systemd-resolved of DNS server changes, rather than overwriting /etc/resolv.conf. Here's the original setup.
This is a Docker implementation of the original AWS VPN client PoC with OpenVPN using SAML authentication. The goal is to have an easy to consume Linux client.
See the original blog post for the implementation details.
- openvpn-v2.4.9-aws.patch - patch required to build AWS compatible OpenVPN v2.4.9, based on the AWS source code (thanks to @heprotecbuthealsoattac) for the link.
- openvpn-v2.5.1-aws.patch - patch for OpenVPN v2.5.1, based on the AWS source code (thanks to @heprotecbuthealsoattac) for the link.
- server.go - Go server to listen on http://127.0.0.1:35001 and save SAML Post data to the file.
- entrypoint.sh - bash wrapper to run OpenVPN. It runs OpenVPN first time to get SAML Redirect and open browser and second time with actual SAML response.
- Dockerfile - for building the docker image.
- docker-compose.yml - for running the image properly.
- Place AWS configuration file at the same folder of
docker-compose.yml
, naming itvpn.conf
- Execute
docker-compose up
(Better to not use-d
option, for getting the login URL in the logs and stopping the container in a easier way)