mirror of https://github.com/sobolevn/git-secret
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
45 lines
1.4 KiB
Docker
45 lines
1.4 KiB
Docker
FROM alpine:latest
|
|
|
|
RUN apk add --no-cache --update \
|
|
bash \
|
|
build-base \
|
|
coreutils \
|
|
curl \
|
|
findutils \
|
|
gcc \
|
|
libffi-dev \
|
|
musl-dev \
|
|
net-tools \
|
|
openrc \
|
|
openssh \
|
|
openssh-server \
|
|
openssh-sftp-server \
|
|
openssl-dev \
|
|
py-boto \
|
|
py2-pip \
|
|
python2-dev \
|
|
rsyslog \
|
|
sudo \
|
|
xz \
|
|
&& pip install --upgrade pip \
|
|
&& if ! getent passwd <%= @username %>; then \
|
|
adduser -h /home/<%= @username %> -s /bin/bash -D <%= @username %>; \
|
|
passwd -d <%= @username %>; \
|
|
fi \
|
|
&& echo "<%= @username %> ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers \
|
|
&& echo "Defaults !requiretty" >> /etc/sudoers \
|
|
&& mkdir -p /home/<%= @username %>/.ssh \
|
|
&& chown -R <%= @username %> /home/<%= @username %>/.ssh \
|
|
&& chmod 0700 /home/<%= @username %>/.ssh \
|
|
&& echo '<%= IO.read(@public_key).strip %>' >> /home/<%= @username %>/.ssh/authorized_keys \
|
|
&& chown <%= @username %> /home/<%= @username %>/.ssh/authorized_keys \
|
|
&& chmod 0600 /home/<%= @username %>/.ssh/authorized_keys \
|
|
&& sed -ri 's/^#?PubkeyAuthentication\s+.*/PubkeyAuthentication yes/' /etc/ssh/sshd_config \
|
|
&& sed -ri 's/^#?PasswordAuthentication\s+.*/PasswordAuthentication no/' /etc/ssh/sshd_config \
|
|
&& sed -ri 's/^#?ChallengeResponseAuthentication\s+.*/ChallengeResponseAuthentication no/' /etc/ssh/sshd_config \
|
|
&& sed -ri 's/^#?UsePrivilegeSeparation\s+.*/UsePrivilegeSeparation no/' /etc/ssh/sshd_config \
|
|
&& echo "UseDNS=no" >> /etc/ssh/sshd_config \
|
|
&& rc-update add sshd
|
|
|
|
EXPOSE 22
|