add apple container machine artifacts: two Dockerfiles (recon-machine, ubuntu-systemd-admin) and the apple-container-machine skill

1 files changed, 72 insertions, 0 deletions

diff --git a/2026/apple-container-machine-machines/Dockerfile.recon-machine b/2026/apple-container-machine-machines/Dockerfile.recon-machine
new file mode 100644
index 0000000..79897ff
--- /dev/null
+++ b/2026/apple-container-machine-machines/Dockerfile.recon-machine
@@ -0,0 +1,72 @@
+FROM ubuntu:24.04
+
+ENV container container
+
+# Base system + networking
+RUN apt-get update && \
+    apt-get install -y \
+    dbus systemd openssh-server \
+    curl wget ca-certificates \
+    sudo iproute2 iputils-ping net-tools \
+    dnsutils whois traceroute mtr-tiny \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Recon CLI tooling
+RUN apt-get update && \
+    apt-get install -y \
+    nmap \
+    netcat-openbsd \
+    nikto \
+    sqlmap \
+    hydra \
+    jq \
+    python3 python3-pip python3-venv \
+    dnsmap \
+    dnsrecon \
+    dnswalk \
+    dirb \
+    wfuzz \
+    sslscan \
+    testssl.sh \
+    whatweb \
+    smbclient \
+    ldap-utils \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Go for installing Go-based tools
+RUN apt-get update && \
+    apt-get install -y golang-go && \
+    apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Install Go-based recon tools
+RUN go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest && \
+    go install github.com/projectdiscovery/httpx/cmd/httpx@latest && \
+    go install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest && \
+    go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest && \
+    go install github.com/tomnomnom/httprobe@latest && \
+    go install github.com/tomnomnom/gf@latest && \
+    go install github.com/tomnomnom/waybackurls@latest && \
+    go install github.com/tomnomnom/assetfinder@latest && \
+    go install github.com/ffuf/ffuf/v2@latest && \
+    go install github.com/OJ/gobuster/v3@latest
+
+# Copy go-installed binaries to system PATH and add GOPATH/bin to profile
+RUN cp /root/go/bin/* /usr/local/bin/ 2>/dev/null; true
+RUN echo 'export PATH=$PATH:/root/go/bin' > /etc/profile.d/gopath.sh && chmod +x /etc/profile.d/gopath.sh
+
+# Init setup for container machine
+RUN >/etc/machine-id && >/var/lib/dbus/machine-id
+
+RUN systemctl set-default multi-user.target && \
+    systemctl mask \
+      dev-hugepages.mount \
+      sys-fs-fuse-connections.mount \
+      systemd-update-utmp.service \
+      systemd-tmpfiles-setup.service \
+      console-getty.service && \
+    systemctl disable \
+      networkd-dispatcher.service
+
+# SSH config for remote access
+RUN sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config && \
+    sed -i 's/^#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config