worldcone/forgejo
2
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
forgejo/docker/s6/openssh/setup

28 lines
737 B
Plaintext
Raw Normal View History

Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 05:54:55 +09:00
#!/bin/sh
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-13 00:39:40 +09:00
# Check if host keys are present, else create them
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 06:13:22 +09:00
if ! test -f /data/ssh/ssh_host_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 05:54:55 +09:00
ssh-keygen -q -f /data/ssh/ssh_host_key -N '' -t rsa1
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-13 00:39:40 +09:00
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 06:13:22 +09:00
if ! test -f /data/ssh/ssh_host_rsa_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 05:54:55 +09:00
ssh-keygen -q -f /data/ssh/ssh_host_rsa_key -N '' -t rsa
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-13 00:39:40 +09:00
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 06:13:22 +09:00
if ! test -f /data/ssh/ssh_host_dsa_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 05:54:55 +09:00
ssh-keygen -q -f /data/ssh/ssh_host_dsa_key -N '' -t dsa
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-13 00:39:40 +09:00
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 06:13:22 +09:00
if ! test -f /data/ssh/ssh_host_ecdsa_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 05:54:55 +09:00
ssh-keygen -q -f /data/ssh/ssh_host_ecdsa_key -N '' -t ecdsa
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-13 00:39:40 +09:00
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 06:13:22 +09:00
if ! test -f /data/ssh/ssh_host_ed25519_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 05:54:55 +09:00
ssh-keygen -q -f /data/ssh/ssh_host_ed25519_key -N '' -t ed25519
fi
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-13 00:39:40 +09:00
# Set correct right to ssh keys
chown -R root:root /data/ssh/*
Add syslog & fix `/data/git` rights & SOCAT_LINK env var - Resolve #1893 - Add syslogd to output sshd log on stdout (via `docker logs`) - Enforce directory rights on `/data/git`, `/data/gogs` & `/data/ssh` - Add `SOCAT_LINK` environment variable to prevent the creation of scout links when they are not needed (see #1815)
2015-11-05 04:19:39 +09:00
chmod 0700 /data/ssh
chmod 0600 /data/ssh/*
Reference in a new issue Copy permalink