Centos7部署ssh

概要：宿主机Ubuntu-14.04.1，容器CentOS 7.3

1、下载centos官网镜像

sunny@DOCKER:~$ docker pull centos

sunny@DOCKER:~$ docker images

REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE

centos latest d4350798c2ee 9 weeks ago 191.8 MB

 

2、启动容器

sunny@DOCKER:~$ docker run -it centos /bin/bash

[root@0b9ffde064bc /]# cat /etc/redhat-release

CentOS Linux release 7.3.1611 (Core)

安装ssh关联包

[root@0b9ffde064bc /]# yum install passwd openssl openssh-server -y

生成秘钥文件

[root@0b9ffde064bc /]# ssh-keygen -q -t rsa -b 2048 -f /etc/ssh/ssh_host_rsa_key -N ''

[root@0b9ffde064bc /]# ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ''

[root@0b9ffde064bc /]# ssh-keygen -t dsa -f /etc/ssh/ssh_host_ed25519_key -N ''

修改 /etc/ssh/sshd_config 配置信息

[root@0b9ffde064bc /]# sed -i "s/#UsePrivilegeSeparation.*/UsePrivilegeSeparation no/g" /etc/ssh/sshd_config

[root@0b9ffde064bc /]# sed -i "s/UsePAM.*/UsePAM no/g" /etc/ssh/sshd_config

启动sshd服务

[root@0b9ffde064bc /]# /usr/sbin/sshd -D

 

3、设置root密码

另开窗口，

sunny@DOCKER:~$ docker exec -it 0b9 /bin/bash

[root@0b9ffde064bc /]# yum install net-tools

[root@0b9ffde064bc /]# netstat -lnp |grep 22

修改root登录密码，

[root@0b9ffde064bc /]# passwd root

Changing password for user root.

New password: ceshi123

 

4、保存镜像，启动新容器

sunny@DOCKER:~$ docker commit 0b9ff centos/centos7-ssh:20170217

ddb0d6ede83244ad785df791a77c2b2219ada377d4a3e1093c48703b16575547

sunny@DOCKER:~$ docker images

REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE

centos/centos7-ssh 20170217 ddb0d6ede832 7 seconds ago 265.6 MB

sunny@DOCKER:~$ docker rmi f398a

Untagged: centos/centos7-ssh:20170217

Deleted: f398a3bed4da8b6595e81a663e7f4395d5fa4985793c2b61c1e74083278d20e3

------------------------------------------------

suny@DOCKER:~$ docker run -d -p 10022:22 centos/centos7-ssh:20170217 /usr/sbin/sshd -D

a23b064c1e14f5d31466cd0e5134b219b3825689db19cc4ad0b428d8acd4daa0

sunny@DOCKER:~$ docker ps -a

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

a23b064c1e14 centos/centos7-ssh:20170217 "/usr/sbin/sshd -D" 15 seconds ago Up 15 seconds 0.0.0.0:10022->22/tcp high_einstein

sunny@DOCKER:~$ docker port a23

22/tcp -> 0.0.0.0:10022

[root@a23b064c1e14 /]# passwd

Changing password for user root.

New password: ceshi123

 

5、外部主机连接到容器

[root@maven www]# ssh root@192.168.1.185 -p 10022

root@192.168.1.185's password:

Last login: Fri Feb 17 06:01:18 2017 from 192.168.1.57

[root@a23b064c1e14 ~]# df -h