Compare commits
No commits in common. "13e499a7f6e0e4a80dd2c0c36ac715856fdd8c05" and "84df38ba0d4e7a3179d66e87961038b47fdb6588" have entirely different histories.
13e499a7f6
...
84df38ba0d
5 changed files with 6 additions and 41 deletions
10
.drone.yml
10
.drone.yml
|
@ -30,11 +30,6 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
path: /var/run
|
path: /var/run
|
||||||
command:
|
|
||||||
- dockerd-entrypoint.sh
|
|
||||||
- dockerd
|
|
||||||
- --host=unix:///var/run/docker.sock
|
|
||||||
- --mtu=1492
|
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
|
@ -73,11 +68,6 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
path: /var/run
|
path: /var/run
|
||||||
command:
|
|
||||||
- dockerd-entrypoint.sh
|
|
||||||
- dockerd
|
|
||||||
- --host=unix:///var/run/docker.sock
|
|
||||||
- --mtu=1492
|
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
|
|
|
@ -1,23 +1,16 @@
|
||||||
FROM debian:trixie-slim
|
FROM debian:bookworm-slim
|
||||||
|
|
||||||
RUN set -eux && \
|
RUN set -eux && \
|
||||||
apt-get update && \
|
apt-get update && \
|
||||||
DEBIAN_FRONTEND=noninteractive apt-get upgrade -y && \
|
DEBIAN_FRONTEND=noninteractive apt-get upgrade -y && \
|
||||||
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
||||||
openssh-server \
|
openssh-server \
|
||||||
sudo \
|
|
||||||
locales \
|
locales \
|
||||||
curl \
|
curl \
|
||||||
telnet \
|
telnet \
|
||||||
net-tools \
|
net-tools \
|
||||||
screen \
|
screen \
|
||||||
vim \
|
vim \
|
||||||
git \
|
|
||||||
man \
|
|
||||||
less \
|
|
||||||
bind9-dnsutils \
|
|
||||||
unzip \
|
|
||||||
rsync \
|
|
||||||
&& \
|
&& \
|
||||||
rm -rf /var/lib/apt/lists/* && \
|
rm -rf /var/lib/apt/lists/* && \
|
||||||
rm /etc/ssh/ssh_host_*key* && \
|
rm /etc/ssh/ssh_host_*key* && \
|
||||||
|
|
23
README.md
23
README.md
|
@ -26,10 +26,10 @@
|
||||||
$ docker run -it \
|
$ docker run -it \
|
||||||
--name jumpbox \
|
--name jumpbox \
|
||||||
-v $(pwd)/jumpbox:/var/lib/jumpbox \
|
-v $(pwd)/jumpbox:/var/lib/jumpbox \
|
||||||
-e "ROOT_AUTHORIZED_KEYS=/var/lib/jumpbox/authorized_keys" \
|
-e "ROOT_AUTHORIZED_KEYS=/var/lib/jumpbox/authorized_keys"
|
||||||
-e "HOSTKEYS=/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key" \
|
-e "HOSTKEYS=/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key"
|
||||||
-e "USERADD=jumpbox:1000:1000:/bin/bash" \
|
-e "USERADD=jumpbox:1000:1000:/bin/bash"
|
||||||
-e "GROUPADD=jumpbox:1000" \
|
-e "GROUPADD=jumpbox:1000"
|
||||||
-p 1022:22 \
|
-p 1022:22 \
|
||||||
pommib/jumpbox:latest
|
pommib/jumpbox:latest
|
||||||
```
|
```
|
||||||
|
@ -53,18 +53,3 @@ services:
|
||||||
USERADD: jumpbox:1000:1000:/bin/bash
|
USERADD: jumpbox:1000:1000:/bin/bash
|
||||||
GROUPADD: jumpbox:1000
|
GROUPADD: jumpbox:1000
|
||||||
```
|
```
|
||||||
|
|
||||||
## Login as root
|
|
||||||
|
|
||||||
```
|
|
||||||
$ ssh -l root 127.0.0.1 -p 1022
|
|
||||||
```
|
|
||||||
|
|
||||||
## Login as jumpbox
|
|
||||||
|
|
||||||
To login as user jumpbox, make sure `/home/jumpbox` is a mounted volume
|
|
||||||
containing `.ssh/authorized_keys` containing your public key.
|
|
||||||
|
|
||||||
```
|
|
||||||
$ ssh -l jumpbox 127.0.0.1 -p 1022
|
|
||||||
```
|
|
||||||
|
|
|
@ -1,10 +1,8 @@
|
||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
|
|
||||||
set -x
|
|
||||||
|
|
||||||
updates_available () {
|
updates_available () {
|
||||||
docker pull "$1"
|
docker pull "$1"
|
||||||
if test "$(docker run --rm "$1" /bin/sh -c 'apt -qqq update && apt -qq list --upgradable')" != ""; then
|
if test "$(docker run -it --rm "$1" /bin/sh -c 'apt -qqq update && apt -qq list --upgradable')" != ""; then
|
||||||
return 0
|
return 0
|
||||||
else
|
else
|
||||||
return 1
|
return 1
|
||||||
|
|
1
setup.sh
1
setup.sh
|
@ -46,7 +46,6 @@ while [ "$USERADD" != "$i" ] ;do
|
||||||
USER_SHELL=$j
|
USER_SHELL=$j
|
||||||
|
|
||||||
useradd --home-dir "$BASE_DIR/$USER_NAME" --shell "$USER_SHELL" --uid "$USER_UID" --gid "$USER_GID" "$USER_NAME"
|
useradd --home-dir "$BASE_DIR/$USER_NAME" --shell "$USER_SHELL" --uid "$USER_UID" --gid "$USER_GID" "$USER_NAME"
|
||||||
echo "$USER_NAME ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/$USER_NAME"
|
|
||||||
done
|
done
|
||||||
|
|
||||||
# HOSTKEYS="/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key"
|
# HOSTKEYS="/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key"
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue