Bootstrap

基于alpine用dockerfile创建的ssh镜像 原创

1、下载alpine镜像

1
2
3
4
5
6
7
8
9
10
[root@docker43 ~] # docker pull alpine
Using default tag: latest
Trying to pull repository docker.io /library/alpine  ...
latest: Pulling from docker.io /library/alpine
4fe2ade4980c: Pull complete
Digest: sha256:621c2f39f8133acb8e64023a94dbdf0d5ca81896102b9e57c0dc184cadaf5528
Status: Downloaded newer image  for  docker.io /alpine :latest
[root@docker43 ~] # docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
docker.io /alpine     latest              196d12cf6ab1        3 weeks ago         4.41 MB
 

2、编写dockerfile

2.1.创建一个工作目录
1
2
3
4
5
6
[root@docker43 ~] # cd /opt/
[root@docker43 opt] # mkdir alpine_ssh && cd alpine_ssh && touch Dockerfile
[root@docker43 alpine_ssh] # ll
总用量 4
-rw-r--r-- 1 root root 654 10月  3 23:21 Dockerfile
2.2.编写Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
# 指定创建的基础镜像
FROM alpine
# 作者描述信息
MAINTAINER alpine_sshd ([email protected])
# 替换阿里云的源
RUN  echo  "http://mirrors.aliyun.com/alpine/latest-stable/main/"  /etc/apk/repositories
RUN  echo  "http://mirrors.aliyun.com/alpine/latest-stable/community/"  >>  /etc/apk/repositories
# 同步时间
# 更新源、安装openssh 并修改配置文件和生成key 并且同步时间
RUN apk update && \
     apk add --no-cache openssh-server tzdata && \
     cp  /usr/share/zoneinfo/Asia/Shanghai  /etc/localtime  && \
     sed  -i  "s/#PermitRootLogin.*/PermitRootLogin yes/g"  /etc/ssh/sshd_config  && \
     ssh -keygen -t rsa -P  ""  -f  /etc/ssh/ssh_host_rsa_key  && \
     ssh -keygen -t ecdsa -P  ""  -f  /etc/ssh/ssh_host_ecdsa_key  && \
     ssh -keygen -t ed25519 -P  ""  -f  /etc/ssh/ssh_host_ed25519_key  && \
     echo  "root:admin"  | chpasswd
# 开放22端口
EXPOSE 22
# 执行ssh启动命令
CMD [ "/usr/sbin/sshd" "-D" ]
2.3.创建镜像
1
2
3
4
# 在dockerfile所在的目录下
[root@docker43 alpine_ssh] # pwd
/opt/alpine_ssh
[root@docker43 alpine_ssh] # docker build -t alpine:sshd .
 

3、创建容器测试

  创建容器

1
2
3
4
[root@docker43 alpine_ssh] # docker run -itd -p 10022:22 --name alpine_ssh_v1 alpine:sshd
[root@docker43 alpine_ssh] # docker ps
CONTAINER ID        IMAGE               COMMAND               CREATED             STATUS              PORTS                   NAMES
b353f5f3b703        alpine:sshd          "/usr/sbin/sshd -D"    17 minutes ago      Up 17 minutes       0.0.0.0:10022->22 /tcp    alpine_ssh_v1

  测试

1
2
3
4
5
6
7
8
9
10
11
12
13
[root@docker43 alpine_ssh] # ssh [email protected] -p10022
[email protected]'s password:
Welcome to Alpine!
The Alpine Wiki contains a large amount of how-to guides and general
information about administrating Alpine systems.
See <http: //wiki .alpinelinux.org>.
You can setup the system with the  command : setup-alpine
You may change this message by editing  /etc/motd .
b353f5f3b703:~ #
 

4、问题总结

  这些都是我在手动测试的时候遇见的,已经在写Dockerfile的时候加进去了处理方法

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
1. apk add --no-cache openssh-server    # 安装openssh的问题
# apk add --no-cache openssh-server
fetch http: //dl-cdn .alpinelinux.org /alpine/v3 .8 /main/x86_64/APKINDEX . tar .gz
fetch http: //dl-cdn .alpinelinux.org /alpine/v3 .8 /community/x86_64/APKINDEX . tar .gz
(1 /3 ) Installing openssh-keygen (7.7_p1-r2)
ERROR: openssh-keygen-7.7_p1-r2: package mentioned  in  index not found (try  'apk update' )
(2 /3 ) Installing openssh-server-common (7.7_p1-r2)
(3 /3 ) Installing openssh-server (7.7_p1-r2)
ERROR: openssh-server-7.7_p1-r2: package mentioned  in  index not found (try  'apk update' )
2 errors; 4 MiB  in  14 packages
原因是:提示源没有这个openssh的包
解决方式:
在dockerfile中改为国内的源
http: //mirrors .aliyun.com /alpine/latest-stable/main/
http: //mirrors .aliyun.com /alpine/latest-stable/community/
创建容器文件修改
[root@docker43 ~] # docker run -it alpine
# vi /etc/apk/repositories
http: //mirrors .aliyun.com /alpine/latest-stable/main/
http: //mirrors .aliyun.com /alpine/latest-stable/community/
#http://dl-cdn.alpinelinux.org/alpine/v3.8/main    
#http://dl-cdn.alpinelinux.org/alpine/v3.8/community
# 注释或者删除原来的默认源,添加阿里云的源,然后执行apk update,在进行安装就OK了
2、 ssh  启动问题
# /etc/init.d/sshd start
/bin/sh /etc/init .d /sshd : not found
这样的方式不能启动,需要安装一个alpine的管理工具
apk add --no-cache openrc
# /etc/init.d/sshd start
  * WARNING: sshd is already starting
  所以使用  /usr/sbin/sshd  -D 方式启动。但是又出现如下错误
  # /usr/sbin/sshd -D
Could not load host key:  /etc/ssh/ssh_host_rsa_key
Could not load host key:  /etc/ssh/ssh_host_ecdsa_key
Could not load host key:  /etc/ssh/ssh_host_ed25519_key
sshd: no hostkeys available -- exiting.
解决方式:
ssh -keygen -t rsa -P  ""  -f  /etc/ssh/ssh_host_rsa_key
ssh -keygen -t ecdsa -P  ""  -f  /etc/ssh/ssh_host_ecdsa_key
ssh -keygen -t ed25519 -P  ""  -f  /etc/ssh/ssh_host_ed25519_key
再次启动
# /usr/sbin/sshd -D
启动成功
3、创建容器后的网络问题
[root@docker43 opt] # docker run -it alpine
WARNING: IPv4 forwarding is disabled. Networking will not work.
解决方式:
[root@docker43 ~] # vim /etc/sysctl.conf
net.ipv4.ip_forward=1     # 添加这一行
[root@docker43 ~] # docker run -it alpine
#
;