18
Dockerfile
18
Dockerfile
@@ -5,22 +5,16 @@ MAINTAINER BeN
|
|||||||
RUN apt-get clean && apt-get update && apt-get -y upgrade
|
RUN apt-get clean && apt-get update && apt-get -y upgrade
|
||||||
|
|
||||||
RUN apt-get install -y \
|
RUN apt-get install -y \
|
||||||
openssh-server \
|
openssh-server
|
||||||
inetutils-syslogd \
|
|
||||||
sudo
|
|
||||||
|
|
||||||
RUN apt-get clean && rm -rf /var/lib/apt/lists/*
|
RUN apt-get clean && rm -rf /var/lib/apt/lists/*
|
||||||
RUN useradd -rm -d /home/ben -s /bin/bash -g 100 -u 1000 ben && \
|
|
||||||
echo "ben ALL=NOPASSWD: ALL" > /etc/sudoers.d/ben
|
|
||||||
|
|
||||||
#RUN echo 'ben:ben' | chpasswd
|
RUN useradd -rm -d /home/ben -s /bin/bash -g root -G sudo -u 1000 ben
|
||||||
|
|
||||||
RUN sed -i 's/#PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config
|
RUN echo 'ben:ben' | chpasswd
|
||||||
COPY src/issue.net /etc/issue.net
|
|
||||||
COPY src/secure.conf /etc/ssh/sshd_config.d/secure.conf
|
|
||||||
COPY src/start.sh /start.sh
|
|
||||||
|
|
||||||
RUN service ssh start
|
RUN service ssh start
|
||||||
|
|
||||||
EXPOSE 22
|
EXPOSE 22
|
||||||
#CMD ["/usr/sbin/sshd","-D", "-e"]
|
|
||||||
CMD ["/start.sh"]
|
CMD ["/usr/sbin/sshd","-D"]
|
||||||
|
|||||||
21
make.conf
21
make.conf
@@ -1,21 +0,0 @@
|
|||||||
IMAGE=openssh
|
|
||||||
|
|
||||||
CONTNAME=$(IMAGE)-1
|
|
||||||
|
|
||||||
DATAVOLUME=/home/_dockervol/openssh
|
|
||||||
|
|
||||||
STARTOPT= \
|
|
||||||
--hostname bastion \
|
|
||||||
-e TZ="Europe/Paris" \
|
|
||||||
-p 22122:22 \
|
|
||||||
-v $(DATAVOLUME)/homeben:/home/ben \
|
|
||||||
-v $(DATAVOLUME)/etcssh/ssh_host_ecdsa_key:/etc/ssh/ssh_host_ecdsa_key \
|
|
||||||
-v $(DATAVOLUME)/etcssh/ssh_host_ecdsa_key.pub:/etc/ssh/ssh_host_ecdsa_key.pub \
|
|
||||||
-v $(DATAVOLUME)/etcssh/ssh_host_ed25519_key:/etc/ssh/ssh_host_ed25519_key \
|
|
||||||
-v $(DATAVOLUME)/etcssh/ssh_host_ed25519_key.pub:/etc/ssh/ssh_host_ed25519_key.pub \
|
|
||||||
-v $(DATAVOLUME)/etcssh/ssh_host_rsa_key:/etc/ssh/ssh_host_rsa_key \
|
|
||||||
-v $(DATAVOLUME)/etcssh/ssh_host_rsa_key.pub:/etc/ssh/ssh_host_rsa_key.pub \
|
|
||||||
-v $(DATAVOLUME)/log/ssh.log:/var/log/ssh.log \
|
|
||||||
-v $(DATAVOLUME)/log/auth.log:/var/log/auth.log \
|
|
||||||
--name $(CONTNAME) \
|
|
||||||
$(IMAGE)
|
|
||||||
32
makefile
32
makefile
@@ -1,13 +1,32 @@
|
|||||||
include make.conf
|
#########################################
|
||||||
|
#VARIABLES: CAN BE EDITED
|
||||||
|
#########################################
|
||||||
|
|
||||||
|
CONTAINER=test
|
||||||
|
|
||||||
|
CONTNAME=$(CONTAINER)-1
|
||||||
|
|
||||||
|
DATAVOLUME=$(shell pwd)
|
||||||
|
|
||||||
|
#net=host: mandatory for others containers to connect to mysql
|
||||||
|
STARTOPT=-d \
|
||||||
|
-p 22122:22 \
|
||||||
|
--name $(CONTNAME) \
|
||||||
|
$(CONTAINER)
|
||||||
|
|
||||||
|
|
||||||
|
#########################################
|
||||||
|
# ACTIONS: DO NOT EDIT BEYOND THIS POINT
|
||||||
|
#########################################
|
||||||
|
|
||||||
build:
|
build:
|
||||||
docker build -t $(IMAGE) .
|
docker build -t $(CONTAINER) .
|
||||||
|
|
||||||
build-nocache:
|
build-nocache:
|
||||||
docker build --no-cache -t $(IMAGE) .
|
docker build --no-cache -t $(CONTAINER) .
|
||||||
|
|
||||||
run:
|
run:
|
||||||
docker run -d $(STARTOPT)
|
docker run $(STARTOPT)
|
||||||
|
|
||||||
bash:
|
bash:
|
||||||
docker exec -i -t $(CONTNAME) /bin/bash
|
docker exec -i -t $(CONTNAME) /bin/bash
|
||||||
@@ -22,7 +41,4 @@ clear:
|
|||||||
docker rmi -f $(CONTAINER)
|
docker rmi -f $(CONTAINER)
|
||||||
|
|
||||||
install:
|
install:
|
||||||
docker run -d --restart=always $(STARTOPT)
|
docker run --restart=always $(STARTOPT)
|
||||||
|
|
||||||
reinstall:
|
|
||||||
make stop;make delete ;make install
|
|
||||||
|
|||||||
@@ -1,12 +0,0 @@
|
|||||||
* * * * * * * * * * * W A R N I N G * * * * * * * * * * * * *
|
|
||||||
THIS SYSTEM IS RESTRICTED TO AUTHORIZED USERS FOR AUTHORIZED USE
|
|
||||||
ONLY. UNAUTHORIZED ACCESS IS STRICTLY PROHIBITED AND MAY BE
|
|
||||||
PUNISHABLE UNDER THE COMPUTER FRAUD AND ABUSE ACT OF 1986 OR
|
|
||||||
OTHER APPLICABLE LAWS. IF NOT AUTHORIZED TO ACCESS THIS SYSTEM,
|
|
||||||
DISCONNECT NOW. BY CONTINUING, YOU CONSENT TO YOUR KEYSTROKES
|
|
||||||
AND DATA CONTENT BEING MONITORED. ALL PERSONS ARE HEREBY
|
|
||||||
NOTIFIED THAT THE USE OF THIS SYSTEM CONSTITUTES CONSENT TO
|
|
||||||
MONITORING AND AUDITING.
|
|
||||||
################################################################
|
|
||||||
|
|
||||||
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
PermitRootLogin no
|
|
||||||
PermitEmptyPasswords no
|
|
||||||
AllowTcpForwarding yes
|
|
||||||
MaxStartups 10:30:60
|
|
||||||
Banner /etc/issue.net
|
|
||||||
AllowUsers ben
|
|
||||||
LogLevel VERBOSE
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
/usr/sbin/syslogd
|
|
||||||
/usr/sbin/sshd -D
|
|
||||||
Reference in New Issue
Block a user