Docker-BioInf-per-student.sh

#!/usr/bin/bash
while getopts ":u:b:o:q:r:l:p:s:m:c:" opt; do
  case $opt in
    u) nuser="$OPTARG"
    ;;
    b) base="$OPTARG"
    ;;
    o) portD="$OPTARG"
    ;;
    q) quota="$OPTARG"
    ;;
    r) ram="$OPTARG"
    ;;
    l) limit="$OPTARG"
    ;;
    p) pass="$OPTARG"
    ;;
    s) start="$OPTARG"
    ;;
    m) email="$OPTARG"
    ;;
    c) command="$OPTARG"
    ;;
    \?) echo "Invalid option -$OPTARG" >&2
    ;;
  esac
done
source Settings.ini
if [ "$nuser" == "" ] ; then
	echo "Error! No user name"
	read -p "Press enter to continue"
	exit
fi
if [ `docker ps -a | grep -c ${nuser}$` -ne 0 ] ; then 
	echo "User '$nuser' already have Docker container"
	exit
fi
echo "nuser=$nuser base=$base portD=$portD quota=$quota ram=$ram limit=$limit pass=$pass start=$start email=$email command=[$command]"
if [ "$base" == "" ] ; then exit; fi
if [ "$portD" == "" ] ; then portD=$[$(sort -nur usedports | head -n 1)+1]; fi
echo $portD >> usedports
if [ "$quota" == "" ] ; then quota="10G" ; fi
if [ "$ram" != "" ] ; then ram="--memory=${ram} --memory-swap=${ram}" ; fi
if [ "$limit" != "" ] ; then limit="--cpus=${limit}" ; fi
if [ "$pass" == "" ] ; then pass=$(cat /dev/urandom | tr -dc a-zA-Z0-9 | head -c8) ; fi
if [ "$start" == "" ] ; then start="h" ; fi

sudo useradd -g docker -N -s /bin/bash --create-home $nuser
sudo setquota -u $nuser $quota $quota 0 0 /
cd /home/$nuser
echo $admin | sudo tee admin > /dev/null
echo $smtp_url | sudo tee smtp_url > /dev/null
echo $nuser | sudo tee nuser > /dev/null
echo $base | sudo tee base > /dev/null
echo $portD | sudo tee portD > /dev/null
echo $quota | sudo tee quota > /dev/null
echo $ram | sudo tee ram > /dev/null
echo $limit | sudo tee limit > /dev/null
echo $pass | sudo tee pass > /dev/null
echo $start | sudo tee start > /dev/null
echo $email | sudo tee email > /dev/null
echo $command | sudo tee command > /dev/null
chmod 555 ./command
 [ -d "/home/$nuser/setup" ] && chown -R $nuser /home/$nuser/setup
 [ -e "docker.txt" ] && chown $nuser docker.txt
 [ -e "mail.txt" ] && chown $nuser mail.txt

 [ -e "/home/$nuser/setup/setup.done" ] && sudo rm -f /home/$nuser/setup/setup.done
sudo su $nuser
admin=`cat admin`
smtp_url=`cat smtp_url`
nuser=`cat nuser`
uid=$(id -u $nuser)
gid=$(id -g $nuser)
base=`cat base`
portD=`cat portD`
quota=`cat quota`
ram=`cat ram`
limit=`cat limit`
pass=`cat pass`
start=`cat start`
email=`cat email`
URLp="https://${base}:${portD}0"
URLs="${URLp}/s"
URLn="${URLp}/n"
URLb="${URLp}/b"
URLr="${URLp}/r"
URLj="${URLp}/j"
URLv="${URLp}/v"
for st in r j n b h v
do
	stv=start${st}
	eval ${stv}="false"
	if [ "$(echo $start | grep -c $st)" -ne "0" ]
	then declare ${stv}="true"
	fi
done

# rm -rf /home/$nuser/setup /home/$nuser/log
mkdir -p /home/$nuser/setup /home/$nuser/$nuser/ /home/$nuser/log/supervisor
./command
docker volume create --opt type=none --opt device=/home/$nuser/$nuser --opt o=bind,size=${quota}B,uid=$uid --name $nuser > /dev/null
pushd /home/$nuser/setup  > /dev/null

key=/cert/live/$base/privkey.pem
cert=/cert/live/$base/fullchain.pem
dhparam=/cert/dhparam.pem

tee update.sh << END > /dev/null
#!/bin/bash
env DEBIAN_FRONTEND=noninteractive apt-get update -y -q --allow-releaseinfo-change
env DEBIAN_FRONTEND=noninteractive apt-get upgrade -y -q --no-install-recommends
env DEBIAN_FRONTEND=noninteractive apt-get dist-upgrade -y -q --no-install-recommends
env DEBIAN_FRONTEND=noninteractive apt-get autoremove -y -qq
env DEBIAN_FRONTEND=noninteractive apt-get autoclean -y -qq
env DEBIAN_FRONTEND=noninteractive apt-get clean -y -qq
for pic in supervisor rstudio noVNC jupyter shellinabox   #  VS
do
	wget -q https://github.com/zajakin/Docker-BioInf/raw/master/images/\${pic}.png -O /usr/share/novnc/\${pic}.png
done
ln -sf /usr/share/novnc/vnc.html /usr/share/novnc/index.html
sed -i 's@^<table>.*</table>@@' /usr/lib/python3/dist-packages/supervisor/ui/status.html
cp /usr/lib/python3/dist-packages/supervisor/ui/status.html /usr/lib/python3/dist-packages/supervisor/ui/status.dist
sed -i 's@<li class="action-button"><a href="index.html?action=refresh">Refresh</a></li>@@' /usr/lib/python3/dist-packages/supervisor/ui/status.html
sed -i 's@<li class="action-button"><a href="index.html?action=restartall">Restart All</a></li>@@' /usr/lib/python3/dist-packages/supervisor/ui/status.html
sed -i 's@<li class="action-button"><a href="index.html?action=stopall">Stop All</a></li>@@' /usr/lib/python3/dist-packages/supervisor/ui/status.html
sed -i 's@<div id="header">@<table><tr align="center"><td><a href="${URLp}/home/"><h1>Home directory</h1></a></td><td><a href="${URLp}/public/"><h1>Public directory</h1></a></td></tr><tr align="center" valign="bottom"><td><a href="${URLr}"><img src="${URLp}/rstudio.png" /><br /><h1>R-Studio</h1></a></td><!--td><a href="${URLv}"><img src="${URLp}/VS.png" /><br /><h1>VS Code</h1></a></td--><td><a href="${URLj}"><img src="${URLp}/jupyter.png" /><br /><h1>Jupyter notebook</h1></a></td></tr><tr align="center" valign="bottom"><td><a href="${URLn}/vnc.html"><img src="${URLp}/noVNC.png" /><br /><h1>noVNC</h1></a></td><td><a href="${URLb}"><img src="${URLp}/shellinabox.png" /><br /><h1>Shell in a box</h1></a></td></tr><tr align="center"><td STYLE="border-style:solid; border-width:1px 1px 1px 1px"><a href="https://github.com/zajakin/Docker-BioInf"><h3>Created by Docker-BioInf system</h3></a></td><td STYLE="border-style:solid; border-width:1px 1px 1px 1px"><a href="http://${base}:61208"><h3>Tasks monitoring</h3></a></td></tr></table><div id="header" hidden="">@' /usr/lib/python3/dist-packages/supervisor/ui/status.html
#sed -i 's@  <div class="push">@<table><tr align="center"><td><a href="${URLp}/home/"><h1>Home directory</h1></a></td><td><a href="${URLp}/public/"><h1>Public directory</h1></a></td></tr><tr align="center" valign="bottom"><td><a href="${URLr}"><img src="${URLp}/rstudio.png" /><br /><h1>R-Studio</h1></a></td><!--td><a href="${URLv}"><img src="${URLp}/VS.png" /><br /><h1>VS Code</h1></a></td--><td><a href="${URLj}"><img src="${URLp}/jupyter.png" /><br /><h1>Jupyter notebook</h1></a></td></tr><tr align="center" valign="bottom"><td><a href="${URLn}/vnc.html"><img src="${URLp}/noVNC.png" /><br /><h1>noVNC</h1></a></td><td><a href="${URLb}"><img src="${URLp}/shellinabox.png" /><br /><h1>Shell in a box</h1></a></td></tr><tr align="center"><td STYLE="border-style:solid; border-width:1px 1px 1px 1px"><a href="https://github.com/zajakin/Docker-BioInf"><h3>Created by Docker-BioInf system</h3></a></td><td STYLE="border-style:solid; border-width:1px 1px 1px 1px"><a href="http://${base}:61208"><h3>Tasks monitoring</h3></a></td></tr></table><div class="push">@' /usr/lib/python3/dist-packages/supervisor/ui/status.html
[ ! -e "/etc/nginx/nginx.dist" ] && mv /etc/nginx/nginx.conf /etc/nginx/nginx.dist
[ ! -d /home/$nuser/.ssh ] && mkdir --mode=700 /home/$nuser/.ssh && chown ${nuser}:${nuser} /home/$nuser/.ssh
if [ ! -d /home/$nuser/.ssh/serverkeys ] ; then cp -r /etc/ssh /home/$nuser/.ssh/serverkeys
else cp -pf /home/$nuser/.ssh/serverkeys/ssh_host* /etc/ssh ; fi
[ `cat /etc/ssh/sshd_config | grep -c "^X11UseLocalhost no"` -eq 0 ] && echo "X11UseLocalhost no" >> /etc/ssh/sshd_config
[ ! -d "/var/log/nginx" ] && mkdir /var/log/nginx
echo '@include common-auth' > /etc/pam.d/nginx
usermod -aG shadow www-data
[ ! -d "/home/$nuser/public" ] && mkdir /home/$nuser/public
chown ${nuser}:${nuser} /home/$nuser/public
ln -sfn /home/$nuser/public /usr/share/novnc/public
ln -sfn /home/$nuser /usr/share/novnc/home
sed -i "s/UI.initSetting('resize', 'off');/UI.initSetting('resize', 'remote');/g" /usr/share/novnc/app/ui.js
xhost +si:localuser:root
echo 'daemon off;
user www-data;
worker_processes 2;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
        worker_connections 2000;
        # multi_accept on;
}
http {
	map \$http_upgrade \$connection_upgrade {
		default upgrade;
		""      close;
	}
	upstream vnc_proxy {
		server 127.0.0.1:6000;
	}
	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;
	include /etc/nginx/mime.types;
	default_type application/octet-stream;
	ssl_session_timeout  1d;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv2 SSLv3, ref: POODLE
	ssl_prefer_server_ciphers on;
	ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
	ssl_certificate        $cert;
	ssl_certificate_key    $key;
	ssl_dhparam            $dhparam;
	ssl_session_cache shared:SSL:50m;
	ssl_stapling on;
	ssl_stapling_verify on;
	add_header Strict-Transport-Security max-age=15768000;
	access_log /var/log/nginx-access.log;
	error_log /var/log/nginx-error.log error;
	server {
		listen 443 ssl http2;
		root /usr/share/novnc;
		rewrite ^/\$ $URLs/ permanent;
		rewrite ^/s\$ $URLs/ permanent; 
		location /s/ {
			auth_pam                "Secure zone";
			auth_pam_service_name   "nginx";
			rewrite ^/s/(.*)\$ /\$1 break;
			proxy_pass http://localhost:9000;
			proxy_redirect http://localhost:9000/ $URLs/;
			proxy_http_version 1.1;
			proxy_buffering off;
		}
		rewrite ^/home\$ $URLp/home/ permanent; 
		location /home/ {
			autoindex on;
			auth_pam                "Secure zone";
			auth_pam_service_name   "nginx";
		}
		rewrite ^/public\$ $URLp/public/ permanent; 
		location /public/ {
			autoindex on;
		}
		rewrite ^/r\$ $URLr/ permanent;
		location /r/ {
			rewrite ^/r/(.*)\$ /\$1 break;
			proxy_pass http://localhost:8787;
			proxy_redirect http://localhost:8787/ $URLr/;
			proxy_http_version 1.1;
			proxy_set_header Upgrade \$http_upgrade;
			proxy_set_header Connection \$connection_upgrade;
			proxy_read_timeout 20d;
			proxy_buffering off;
		}
		# rewrite ^/stable-(.*)\$ $URLv/stable-\$1 permanent; 
		# rewrite ^/v\$ $URLv/ permanent; 
		# location /v/ {
		# 	rewrite ^/v/(.*)\$ /\$1 break;
		# 	auth_pam                "Secure zone";
		# 	auth_pam_service_name   "nginx";
		# 	proxy_pass http://localhost:8000 ;
		# 	proxy_redirect http://localhost:8000 ${URLv} ;
		# 	proxy_set_header X-Real-IP \$remote_addr;
		# 	proxy_set_header Host \$host:${portD}0;
		# 	proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
		# 	proxy_http_version 1.1;
		# 	proxy_set_header Upgrade \$http_upgrade;
		# 	proxy_set_header Connection \$connection_upgrade;
		# 	proxy_read_timeout 20d;
		# 	proxy_buffering off;
		# }
		rewrite ^/j\$ $URLj/ permanent; 
		location /j/ {
			# rewrite ^/j/(.*)\$ /\$1 break;
			auth_pam                "Secure zone";
			auth_pam_service_name   "nginx";
			proxy_pass http://localhost:8888 ;
			proxy_redirect http://localhost:8888/j ${URLj} ;
			proxy_set_header X-Real-IP \$remote_addr;
			proxy_set_header Host \$host:${portD}0;
			proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
			proxy_http_version 1.1;
			proxy_set_header Upgrade \$http_upgrade;
			proxy_set_header Connection \$connection_upgrade;
			proxy_read_timeout 20d;
			proxy_buffering off;
		}
		location ~* /j/(api/kernels/[^/]+/(channels|iopub|shell|stdin)|terminals/websocket)/? {
			proxy_pass http://localhost:8888;
			auth_pam                "Secure zone";
			auth_pam_service_name   "nginx";
			proxy_set_header X-Real-IP \$remote_addr;
			proxy_set_header Host \$host:${portD}0;
			proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
			proxy_set_header X-NginX-Proxy true;
			proxy_http_version 1.1;
			proxy_set_header Upgrade "websocket";
			proxy_set_header Connection "upgrade";
			proxy_read_timeout 20d;
			proxy_buffering off;
		}
		rewrite ^/n\$ $URLn/ permanent;
		location /n/ {
			rewrite ^/n/(.*)\$ /\$1 break;
			auth_pam                "Secure zone";
			auth_pam_service_name   "nginx";
			proxy_pass http://localhost:6000;
			proxy_redirect http://localhost:6000/ $URLn/;
			proxy_http_version 1.1;
			proxy_set_header Upgrade \$http_upgrade;
			proxy_set_header Connection \$connection_upgrade;
			proxy_read_timeout 1d;
			proxy_buffering off;
		}
		location /websockify {
			proxy_http_version 1.1;
			auth_pam                "Secure zone";
			auth_pam_service_name   "nginx";
			proxy_pass http://vnc_proxy;
			proxy_set_header Upgrade \$http_upgrade;
			proxy_set_header Connection "upgrade";
			proxy_read_timeout 1d;
			proxy_buffering off;
		}
		rewrite ^/b\$ $URLb/ permanent; 
		location /b/ {
			rewrite ^/b/(.*)\$ /\$1 break;
			proxy_pass http://localhost:4200;
			proxy_redirect http://localhost:4200/ $URLb/;
			proxy_http_version 1.1;
			proxy_set_header Upgrade \$http_upgrade;
			proxy_set_header Connection \$connection_upgrade;
			proxy_read_timeout 20d;
			proxy_buffering off;
		}
	}
}' > /etc/nginx/nginx.conf
# ln -s /etc/nginx/sites-available/shiny-server /etc/nginx/sites-enabled/shiny-server
OLDCONF=\$(dpkg -l|grep "^rc"|awk '{print \$2}')
env DEBIAN_FRONTEND=noninteractive apt purge -y \$OLDCONF
apt-mark showmanual | grep -vFf /image_packages.txt > /etc/supervisor/conf.d/installed_packages.txt
rm -rf /root/.local/share/Trash/*/** &> /dev/null
rm -f /home/$nuser/core &> /dev/null
rm -f /home/$nuser/.jupyter/jupyter_notebook_config.py
/sbin/runuser -u $nuser -- jupyter notebook --generate-config -y
echo -e "c.NotebookApp.password = ''\nc.NotebookApp.token = ''\nc.JupyterHub.bind_url = 'http://0.0.0.0:8888'\nc.NotebookApp.base_url = '/j'" | /sbin/runuser -u $nuser -- tee -a /home/$nuser/.jupyter/jupyter_notebook_config.py &> /dev/null
echo "Update finished."
END
# rm -rf /home/*/.local/share/Trash/*/** &> /dev/null
# PASS=\$(python3 -c "from notebook.auth import passwd; print(passwd('$pass'))")
# echo -e "c.NotebookApp.password = u'\$PASS'\n
tee setup.sh << END > /dev/null
#!/bin/bash
if [ ! -e /etc/supervisor/conf.d/setup.done ]; then
	groupadd -g $gid $nuser
	useradd -u $uid -g $gid -G sudo -d /home/$nuser -s /bin/bash -m $nuser
	echo "$nuser:$pass" | chpasswd
	mkdir -p /home/$nuser/.vnc
	echo $pass | vncpasswd -f > /home/$nuser/.vnc/passwd
	cp -r -n /etc/skel/.[!.]* /home/$nuser
	chown -R $nuser /home/$nuser
	[ -e /etc/supervisor/conf.d/installed_packages.txt ] && env DEBIAN_FRONTEND=noninteractive apt-get update -y --allow-releaseinfo-change &&  env DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -y \`cat /etc/supervisor/conf.d/installed_packages.txt | tr '\n' ' '\`
	/etc/supervisor/conf.d/update.sh
	mv /etc/supervisor/conf.d/setup.conf /etc/supervisor/conf.d/setup.done
	/usr/bin/pkill supervisord
fi
END
chmod +rx *.sh

# username=$nuser
# password=$pass
echo -e "[supervisord]
user=root
nodaemon=true
redirect_stderr=true

[supervisorctl]
serverurl=unix:///tmp/supervisor.sock

[unix_http_server]
file = /tmp/supervisor.sock
chmod = 0777
chown= nobody:nogroup

[inet_http_server]
port=0.0.0.0:9000
" > supervisord.conf

echo -e '[program:setup]
command=/bin/bash -c /etc/supervisor/conf.d/setup.sh
stdout_logfile=/var/log/setup.log
autostart=true
autorestart=false
user=root
startsecs=0
stopsignal=KILL
numprocs=1
redirect_stderr=true
' > setup.conf

# --user $uid:$gid -v /var/run/docker.sock:/var/run/docker.sock --net dockers-net --ip=$base
docker run -d --hostname="$(echo $base | cut -d'.' -f1)_$nuser" --name=$nuser --workdir /home/$nuser $ram $limit \
  -p ${portD}0:443 -p ${portD}1:${portD}1/udp -p ${portD}2:22 -p ${portD}3:${portD}3 -p ${portD}4:${portD}4 -p ${portD}5:${portD}5 \
	-v $nuser:/home/$nuser -v data:/data -v /home/$nuser/setup:/etc/supervisor/conf.d -v cert:/cert:ro -v /home/$nuser/log:/var/log \
	--shm-size=2g --restart always ghcr.io/zajakin/docker-bioinf

echo -e "[program:1_novnc_1_novnc]
command=websockify --web=/usr/share/novnc/ 6000 localhost:5902
stdout_logfile=/var/log/novnc.log
autostart=$startn
autorestart=true
user=root
stopsignal=KILL
numprocs=1
redirect_stderr=true
" > novnc.conf

echo -e "[program:1_novnc_2_vnc]
command=/sbin/runuser -u $nuser -- /usr/bin/vncserver :2 -fg -localhost yes -depth 24 -geometry 1920x1080 -port 5902 -SecurityTypes None -xstartup /usr/bin/startlxde
stdout_logfile=/var/log/vnc.log
autostart=$startn
autorestart=true
user=root
stopsignal=QUIT
numprocs=1
redirect_stderr=true
" > vnc.conf
 
echo -e '[program:1_novnc_3_remove_X_win_start_lock]
command=/bin/bash -c "rm -f /tmp/.X2-lock; rm -fr /tmp/.X11-unix; pkill Xtigervnc; pkill mem-cached; pkill websockify; pkill ssh-agent"
stdout_logfile=/var/log/remove_X_win_start_lock.log
autostart=false
autorestart=false
user=root
startsecs=0
stopsignal=KILL
numprocs=1
redirect_stderr=true
' > remove_X_win_start_lock.conf

echo -e "[program:2_shellinaboxd]
command=/usr/bin/shellinaboxd -t --css /etc/shellinabox/options-available/00_White\ On\ Black.css
stdout_logfile=/var/log/shellinaboxd.log
autostart=$startb
autorestart=true
user=root
stopsignal=TERM
numprocs=1
redirect_stderr=true
" > shellinaboxd.conf

echo -e "[program:3_RStudio]
command=/usr/lib/rstudio-server/bin/rserver --server-daemonize 0
stdout_logfile=/var/log/rserver.log
autostart=$startr
autorestart=true
user=root
stopsignal=TERM
numprocs=1
redirect_stderr=true
" > RStudio.conf
#  --certfile=$cert --keyfile=$key
echo -e "[program:4_jupyter_notebook]
command=/sbin/runuser -u $nuser -- jupyter notebook -y --ip=0.0.0.0 --no-browser --config=/home/$nuser/.jupyter/jupyter_notebook_config.py
stdout_logfile=/var/log/jupyter_notebook.log
directory=/home/$nuser
autostart=$startj
autorestart=true
user=root
stopsignal=TERM
numprocs=1
redirect_stderr=true
" > jupyter_notebook.conf

echo -e "[program:5_sshd]
command=/usr/sbin/sshd -D
stdout_logfile=/var/log/sshd.log
autostart=$starth
autorestart=true
user=root
stopsignal=KILL
numprocs=1
redirect_stderr=true
" > sshd.conf

echo -e '[program:6_nginx]
command=/usr/sbin/nginx
stdout_logfile=/var/log/nginx.log
autostart=true
autorestart=true
user=root
stopsignal=TERM
numprocs=1
redirect_stderr=true
' > nginx.conf

echo -e '[program:7_update]
command=/etc/supervisor/conf.d/update.sh
stdout_logfile=/var/log/update.log
autostart=false
autorestart=false
user=root
startsecs=0
stopsignal=KILL
numprocs=1
redirect_stderr=true
' > update.conf

echo -e '[program:8_restart_server]
command=/usr/bin/pkill supervisord
stdout_logfile=/var/log/restart_server.log
autostart=false
autorestart=false
user=root
startsecs=0
stopsignal=KILL
numprocs=1
redirect_stderr=true
' > restart_server.conf

# echo -e "[program:9_VS_Code]
# command=code-server serve-local --disable-telemetry --without-connection-token --accept-server-license-terms --host 127.0.0.1
# stdout_logfile=/var/log/VS.log
# autostart=$startv
# autorestart=true
# user=root
# stopsignal=TERM
# numprocs=1
# redirect_stderr=true
# " > VS_Code.conf
# 
chmod +r *
while [ `docker top $nuser | grep -c /usr/bin/supervisord` -ne 1 ]
do
  sleep 1s
done
sleep 2s
while [ `docker top $nuser | grep -c supervisor/conf.d/setup.sh` -ne 0 ]
do
  sleep 1s
done
docker exec $nuser pkill supervisord
popd > /dev/null
echo -e "User:\t$nuser\tPassword:\t$pass\tssh:\tssh -X ${nuser}@${base} -p ${portD}2\tor web-ddress:\t$URLp" > docker.txt
if [ ! "$email" == "#" ] ; then
  messageID=`echo $((date && echo $email) | md5sum | awk '{print$1}')@$base`
  tee mail.txt << END
From: <$admin>
CC: <$admin>
To: <$email>
Message-ID: <$messageID>
Subject: Access to Docker container
 
Hi!
 
Your Docker container is ready.
User: $nuser
Password: $pass
 
Addresses:
1) Dashboard - ${URLp}
2) ssh -X ${nuser}@${base} -p ${portD}2
   or ssh://${nuser}@${base}:${portD}2
3) mosh ${nuser}@${base} -p ${portD}1 --ssh="ssh -p ${portD}2"
4) RStudio (should be started in Dashboard) - $URLr
5) Jupyter notebook (should be started in Dashboard) - $URLj 
6) ShellInABox (should be started in Dashboard) - $URLb 
7) VNC (should be started in Dashboard) - $URLn
8) Download files from docker ${URLp}/home/
9) Shared files without password ${URLp}/public/
10) Exposed ports for your processes: ${portD}3:${portD}3 ${portD}4:${portD}4 ${portD}5:${portD}5

If you can not access to Docker container from home:
1) Check your external IP ( for example on https://www.whatsmyip.org )
2) Send this IP to $admin to adjust firewall.

Server tasks monitoring http://${base}:61208 
.
END
	/usr/bin/curl $smtp_url --mail-from $admin --mail-rcpt $email --upload-file mail.txt
fi
./command
exit # exit from su
cd ~