Block a user
ssh-jumphost (20260308)
Publicado 2026-03-08 19:48:11 +00:00 por mmh
Instalação
docker pull git.xn0.org/mmh/ssh-jumphost:20260308sha256:d185f0c2a8e657e5ecfce654c9176f3887ac3f9757334e56153cf234c22676f3Camadas da Imagem
| ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| LABEL maintainer="Matthew Headlee <mmh@matthewheadlee.com>" |
| LABEL description="A secure-by-default SSH JumpHost." |
| ENV TZ=MST7MDT |
| EXPOSE 22/tcp |
| /bin/sh -c apk update && apk upgrade && apk add shadow linux-pam openssh openssh-server openssh-server-pam google-authenticator libqrencode net-tools tini && apk info -qL shadow | xargs chmod ug-s && rm -rf /var/cache/apk/* && passwd -l root && > /etc/motd && rm -f /usr/sbin/sshd && mv /usr/sbin/sshd.pam /usr/sbin/sshd && mkdir -p /var/spool/mail/ /etc/ssh/authorized_keys.d/ /etc/ssh/host_keys/ /var/local/lib/pam_google_authenticator/ && chmod u+s /bin/netstat |
| VOLUME ["/etc/password.d/"] |
| VOLUME ["/etc/ssh/host_keys/"] |
| VOLUME ["/etc/ssh/authorized_keys.d/"] |
| VOLUME ["/var/local/lib/pam_google_authenticator/"] |
| COPY file:4cf61c96188c9fb8fcbe307712543da8d622d6253f9a7e73e2fd21fbda5a08fe in /usr/local/sbin/ |
| COPY file:24808460fa6c82e15dcd4dcdeb2bb7aebed35b91e68900eed18dda925bacf7eb in /usr/local/bin/ |
| COPY file:9ee30b8b28073599eaff3533706b2112eb9bf7bb128cd2e51b2a20b51a9fc3f5 in /etc/pam.d/sshd |
| COPY file:47a580649ed888c3653d5f6593b6269ba576087250f7c34d38ec7b59cfd718c8 in /etc/ssh/sshd_config |
| COPY file:c711ceef41db4cf3cad0701bfbadbe54ddc1f951fd9764aba0fc37ab6e9f0302 in /usr/local/bin/ |
| COPY file:3685cf5fa05f7433e0fd61fc1cddcba17e860421d8f42e4fe4a69cddc230bf63 in /etc/profile.d/motd.sh |
| ENTRYPOINT ["/sbin/tini", "/usr/local/bin/entrypoint"] |
Rótulos
| Chave | Valor |
|---|---|
| description | A secure-by-default SSH JumpHost. |
| io.buildah.version | 1.42.2 |
| maintainer | Matthew Headlee <mmh@matthewheadlee.com> |