Compare commits

...

10 commits

5 changed files with 41 additions and 6 deletions

View file

@ -30,6 +30,11 @@ services:
volumes: volumes:
- name: dockersock - name: dockersock
path: /var/run path: /var/run
command:
- dockerd-entrypoint.sh
- dockerd
- --host=unix:///var/run/docker.sock
- --mtu=1492
volumes: volumes:
- name: dockersock - name: dockersock
@ -68,6 +73,11 @@ services:
volumes: volumes:
- name: dockersock - name: dockersock
path: /var/run path: /var/run
command:
- dockerd-entrypoint.sh
- dockerd
- --host=unix:///var/run/docker.sock
- --mtu=1492
volumes: volumes:
- name: dockersock - name: dockersock

View file

@ -1,16 +1,23 @@
FROM debian:bookworm-slim FROM debian:trixie-slim
RUN set -eux && \ RUN set -eux && \
apt-get update && \ apt-get update && \
DEBIAN_FRONTEND=noninteractive apt-get upgrade -y && \ DEBIAN_FRONTEND=noninteractive apt-get upgrade -y && \
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
openssh-server \ openssh-server \
sudo \
locales \ locales \
curl \ curl \
telnet \ telnet \
net-tools \ net-tools \
screen \ screen \
vim \ vim \
git \
man \
less \
bind9-dnsutils \
unzip \
rsync \
&& \ && \
rm -rf /var/lib/apt/lists/* && \ rm -rf /var/lib/apt/lists/* && \
rm /etc/ssh/ssh_host_*key* && \ rm /etc/ssh/ssh_host_*key* && \

View file

@ -26,10 +26,10 @@
$ docker run -it \ $ docker run -it \
--name jumpbox \ --name jumpbox \
-v $(pwd)/jumpbox:/var/lib/jumpbox \ -v $(pwd)/jumpbox:/var/lib/jumpbox \
-e "ROOT_AUTHORIZED_KEYS=/var/lib/jumpbox/authorized_keys" -e "ROOT_AUTHORIZED_KEYS=/var/lib/jumpbox/authorized_keys" \
-e "HOSTKEYS=/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key" -e "HOSTKEYS=/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key" \
-e "USERADD=jumpbox:1000:1000:/bin/bash" -e "USERADD=jumpbox:1000:1000:/bin/bash" \
-e "GROUPADD=jumpbox:1000" -e "GROUPADD=jumpbox:1000" \
-p 1022:22 \ -p 1022:22 \
pommib/jumpbox:latest pommib/jumpbox:latest
``` ```
@ -53,3 +53,18 @@ services:
USERADD: jumpbox:1000:1000:/bin/bash USERADD: jumpbox:1000:1000:/bin/bash
GROUPADD: jumpbox:1000 GROUPADD: jumpbox:1000
``` ```
## Login as root
```
$ ssh -l root 127.0.0.1 -p 1022
```
## Login as jumpbox
To login as user jumpbox, make sure `/home/jumpbox` is a mounted volume
containing `.ssh/authorized_keys` containing your public key.
```
$ ssh -l jumpbox 127.0.0.1 -p 1022
```

View file

@ -1,8 +1,10 @@
#!/bin/sh #!/bin/sh
set -x
updates_available () { updates_available () {
docker pull "$1" docker pull "$1"
if test "$(docker run -it --rm "$1" /bin/sh -c 'apt -qqq update && apt -qq list --upgradable')" != ""; then if test "$(docker run --rm "$1" /bin/sh -c 'apt -qqq update && apt -qq list --upgradable')" != ""; then
return 0 return 0
else else
return 1 return 1

View file

@ -46,6 +46,7 @@ while [ "$USERADD" != "$i" ] ;do
USER_SHELL=$j USER_SHELL=$j
useradd --home-dir "$BASE_DIR/$USER_NAME" --shell "$USER_SHELL" --uid "$USER_UID" --gid "$USER_GID" "$USER_NAME" useradd --home-dir "$BASE_DIR/$USER_NAME" --shell "$USER_SHELL" --uid "$USER_UID" --gid "$USER_GID" "$USER_NAME"
echo "$USER_NAME ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/$USER_NAME"
done done
# HOSTKEYS="/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key" # HOSTKEYS="/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key"