ssh_scan

This git repo provides mozilla/ssh_scan in a Docker container.

Project: https://github.com/jumanjihouse/docker-ssh-scan
Docker image: https://registry.hub.docker.com/u/jumanjiman/ssh_scan/

How-to

Build and test

We use circleci to build, test, and publish the image to Docker hub.

ci/build
ci/test

Pull an already-built image

docker pull jumanjiman/ssh_scan

Tags

We provide multiple tags:

optimistic: jumanjiman/ssh_scan:latest
pessimistic: jumanjiman/ssh_scan:<version>_<builddate>_git_<hash>

Example:

jumanjiman/ssh_scan:0.0.21-14-g36f8a92_20170608T1421_git_7361b44
                    ^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^     ^^^^^^^
                            |                |              |
                            |                |              +--> hash from this git repo
                            |                |
                            |                +-----------------> build date and time
                            |
                            +----------------------------------> version of ssh_scan

Labels

Each built image has labels that generally follow http://label-schema.org/

We add a label, ci-build-url, that is not currently part of the schema. This extra label provides a permanent link to the CI build for the image.

View the ci-build-url label on a built image:

docker inspect \
  -f '{{ index .Config.Labels "io.github.jumanjiman.ci-build-url" }}' \
  jumanjiman/ssh_scan

Query all the labels inside a built image:

docker inspect jumanjiman/ssh_scan | jq -M '.[].Config.Labels'

Run

Interactively:

docker run --rm -it \
--read-only \
--cap-drop all \
jumanjiman/ssh_scan --target <some_ip> --port <some_port> --policy /etc/ssh_scan/stribika.yml