Compare commits
10 commits
84df38ba0d
...
13e499a7f6
Author | SHA1 | Date | |
---|---|---|---|
13e499a7f6 | |||
1bb7df672e | |||
20f5c653ac | |||
![]() |
0b8f55ca05 | ||
c58f97d2c8 | |||
5fda9a6457 | |||
0d85cf61ae | |||
82c406ffa3 | |||
67cfd6b9a5 | |||
3c1c0ad41f |
5 changed files with 41 additions and 6 deletions
10
.drone.yml
10
.drone.yml
|
@ -30,6 +30,11 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
path: /var/run
|
path: /var/run
|
||||||
|
command:
|
||||||
|
- dockerd-entrypoint.sh
|
||||||
|
- dockerd
|
||||||
|
- --host=unix:///var/run/docker.sock
|
||||||
|
- --mtu=1492
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
|
@ -68,6 +73,11 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
path: /var/run
|
path: /var/run
|
||||||
|
command:
|
||||||
|
- dockerd-entrypoint.sh
|
||||||
|
- dockerd
|
||||||
|
- --host=unix:///var/run/docker.sock
|
||||||
|
- --mtu=1492
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: dockersock
|
- name: dockersock
|
||||||
|
|
|
@ -1,16 +1,23 @@
|
||||||
FROM debian:bookworm-slim
|
FROM debian:trixie-slim
|
||||||
|
|
||||||
RUN set -eux && \
|
RUN set -eux && \
|
||||||
apt-get update && \
|
apt-get update && \
|
||||||
DEBIAN_FRONTEND=noninteractive apt-get upgrade -y && \
|
DEBIAN_FRONTEND=noninteractive apt-get upgrade -y && \
|
||||||
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
||||||
openssh-server \
|
openssh-server \
|
||||||
|
sudo \
|
||||||
locales \
|
locales \
|
||||||
curl \
|
curl \
|
||||||
telnet \
|
telnet \
|
||||||
net-tools \
|
net-tools \
|
||||||
screen \
|
screen \
|
||||||
vim \
|
vim \
|
||||||
|
git \
|
||||||
|
man \
|
||||||
|
less \
|
||||||
|
bind9-dnsutils \
|
||||||
|
unzip \
|
||||||
|
rsync \
|
||||||
&& \
|
&& \
|
||||||
rm -rf /var/lib/apt/lists/* && \
|
rm -rf /var/lib/apt/lists/* && \
|
||||||
rm /etc/ssh/ssh_host_*key* && \
|
rm /etc/ssh/ssh_host_*key* && \
|
||||||
|
|
23
README.md
23
README.md
|
@ -26,10 +26,10 @@
|
||||||
$ docker run -it \
|
$ docker run -it \
|
||||||
--name jumpbox \
|
--name jumpbox \
|
||||||
-v $(pwd)/jumpbox:/var/lib/jumpbox \
|
-v $(pwd)/jumpbox:/var/lib/jumpbox \
|
||||||
-e "ROOT_AUTHORIZED_KEYS=/var/lib/jumpbox/authorized_keys"
|
-e "ROOT_AUTHORIZED_KEYS=/var/lib/jumpbox/authorized_keys" \
|
||||||
-e "HOSTKEYS=/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key"
|
-e "HOSTKEYS=/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key" \
|
||||||
-e "USERADD=jumpbox:1000:1000:/bin/bash"
|
-e "USERADD=jumpbox:1000:1000:/bin/bash" \
|
||||||
-e "GROUPADD=jumpbox:1000"
|
-e "GROUPADD=jumpbox:1000" \
|
||||||
-p 1022:22 \
|
-p 1022:22 \
|
||||||
pommib/jumpbox:latest
|
pommib/jumpbox:latest
|
||||||
```
|
```
|
||||||
|
@ -53,3 +53,18 @@ services:
|
||||||
USERADD: jumpbox:1000:1000:/bin/bash
|
USERADD: jumpbox:1000:1000:/bin/bash
|
||||||
GROUPADD: jumpbox:1000
|
GROUPADD: jumpbox:1000
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## Login as root
|
||||||
|
|
||||||
|
```
|
||||||
|
$ ssh -l root 127.0.0.1 -p 1022
|
||||||
|
```
|
||||||
|
|
||||||
|
## Login as jumpbox
|
||||||
|
|
||||||
|
To login as user jumpbox, make sure `/home/jumpbox` is a mounted volume
|
||||||
|
containing `.ssh/authorized_keys` containing your public key.
|
||||||
|
|
||||||
|
```
|
||||||
|
$ ssh -l jumpbox 127.0.0.1 -p 1022
|
||||||
|
```
|
||||||
|
|
|
@ -1,8 +1,10 @@
|
||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
|
|
||||||
|
set -x
|
||||||
|
|
||||||
updates_available () {
|
updates_available () {
|
||||||
docker pull "$1"
|
docker pull "$1"
|
||||||
if test "$(docker run -it --rm "$1" /bin/sh -c 'apt -qqq update && apt -qq list --upgradable')" != ""; then
|
if test "$(docker run --rm "$1" /bin/sh -c 'apt -qqq update && apt -qq list --upgradable')" != ""; then
|
||||||
return 0
|
return 0
|
||||||
else
|
else
|
||||||
return 1
|
return 1
|
||||||
|
|
1
setup.sh
1
setup.sh
|
@ -46,6 +46,7 @@ while [ "$USERADD" != "$i" ] ;do
|
||||||
USER_SHELL=$j
|
USER_SHELL=$j
|
||||||
|
|
||||||
useradd --home-dir "$BASE_DIR/$USER_NAME" --shell "$USER_SHELL" --uid "$USER_UID" --gid "$USER_GID" "$USER_NAME"
|
useradd --home-dir "$BASE_DIR/$USER_NAME" --shell "$USER_SHELL" --uid "$USER_UID" --gid "$USER_GID" "$USER_NAME"
|
||||||
|
echo "$USER_NAME ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/$USER_NAME"
|
||||||
done
|
done
|
||||||
|
|
||||||
# HOSTKEYS="/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key"
|
# HOSTKEYS="/var/lib/jumpbox/ssh_host_ed25519_key;/var/lib/jumpbox/ssh_host_rsa_key"
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue