This image serves as the base image for applications / services that require running an isolated shell via OpenSSH server. Also includes openssl, rsync, autossh and sshfs .
Based on Alpine Linux from my alpine-s6 image with the s6 init system overlayed in it.
The image is tagged respectively for the following architectures,
- armhf
- armv7l
- aarch64
- x86_64 (retagged as the
latest)
non-x86_64 builds have embedded binfmt_misc support and contain the qemu-user-static binary that allows for running it also inside an x86_64 environment that has it.
Pull the image for your architecture it's already available from Docker Hub.
# make pull
docker pull woahbase/alpine-ssh:x86_64
If you want to run images for other architectures, you will need to have binfmt support configured for your machine. multiarch, has made it easy for us containing that into a docker container.
# make regbinfmt
docker run --rm --privileged multiarch/qemu-user-static:register --reset
Without the above, you can still run the image that is made for your architecture, e.g for an x86_64 machine..
This images already has a user alpine configured to drop
privileges to the passed PUID/PGID which is ideal if its used
to run in non-root mode. That way you only need to specify the
values at runtime and pass the -u alpine if need be. (run id
in your terminal to see your own PUID/PGID values.)
Running make gets a shell.
# make
docker run --rm \
--name docker_ssh --hostname ssh \
-c 128 -m 256m \
-e PGID=1000 -e PUID=1000 \
-p 64822:64822 \
-v data/user:/home/alpine \
-v data/host:/etc/ssh \
-e S6_USER=alpine \
-e S6_USERPASS=insecurebydefault \
-e S6_ROOTPASS=insecurebydefaultroot \
woahbase/alpine-ssh:x86_64 \
/bin/bash
then login inside the container (from anywhere in the network) with
ssh alpine@<machine-ip> -p 64822
Stop the container with a timeout, (defaults to 2 seconds)
# make stop
docker stop -t 2 docker_ssh
Removes the container, (always better to stop it first and -f
only when needed most)
# make rm
docker rm -f docker_ssh
Restart the container with
# make restart
docker restart docker_ssh
Get a shell inside a already running container,
# make debug
docker exec -it docker_ssh /bin/bash
set user or login as root,
# make rdebug
docker exec -u root -it docker_ssh /bin/bash
To check logs of a running container in real time
# make logs
docker logs -f docker_ssh
If you have the repository access, you can clone and build the image yourself for your own system, and can push after.
Before you clone the repo, you must have Git, GNU make, and Docker setup on the machine.
git clone https://github.com/woahbase/alpine-ssh
cd alpine-ssh
You can always skip installing make but you will have to type the whole docker commands then instead of using the sweet make targets.
You need to have binfmt_misc configured in your system to be able to build images for other architectures.
Otherwise to locally build the image for your system.
[ARCH defaults to x86_64, need to be explicit when building
for other architectures.]
# make ARCH=x86_64 build
# sets up binfmt if not x86_64
docker build --rm --compress --force-rm \
--no-cache=true --pull \
-f ./Dockerfile_x86_64 \
--build-arg DOCKERSRC=woahbase/alpine-s6:x86_64 \
--build-arg PGID=1000 \
--build-arg PUID=1000 \
-t woahbase/alpine-ssh:x86_64 \
.
To check if its working..
# make ARCH=x86_64 test
docker run --rm -it \
--name docker_ssh --hostname ssh \
-e PGID=1000 -e PUID=1000 \
--entrypoint sh \
woahbase/alpine-ssh:x86_64 \
-ec 'git --version; openssl version; rsync --version;ssh -V;'
And finally, if you have push access,
# make ARCH=x86_64 push
docker push woahbase/alpine-ssh:x86_64
Sources at Github. Built at Travis-CI.org (armhf / x64 builds). Images at Docker hub. Metadata at Microbadger.
Maintained by WOAHBase.