创建带sshd服务的docker image

参考：https://docs.docker.com/examples/running_ssh_service/

1. 创建一个空目录用于存放Dockerfile

mkdir -p /home/thm/docker/test/new_image

vim Dockerfile

Dockerfile的内容为：

 

  FROM tanghuimin0713/ubuntu_amd64:14.04
  RUN apt-get update
  RUN apt-get install -y openssh-server
  #RUN mkdir /var/run/sshd
  RUN sed -i 's/^PermitRootLogin/#PermitRootLogin/' /etc/ssh/sshd_config
  RUN echo "PermitRootLogin yes" >> /etc/ssh/sshd_config
  RUN echo "root:root" | chpasswd
  EXPOSE 22

 

2. build a image

docker build -t tanghuimin0713/ubuntu_amd64_ssh .

3. run a container

docker run -d -p 2222:22 tanghuimin0713/ubuntu_amd64_ssh /usr/sbin/sshd -D

4. 主机下ssh登陆docker容器

ssh root@localhost -p 2222

密码为：root

root@ubuntu:/home/thm/docker/test/new_image# ssh root@localhost -p 2222
The authenticity of host '[localhost]:2222 ([127.0.0.1]:2222)' can't be established.
ECDSA key fingerprint is bd:41:3f:e4:e3:bd:b4:46:54:fe:1b:46:eb:60:f3:73.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[localhost]:2222' (ECDSA) to the list of known hosts.
root@localhost's password: 
Welcome to Ubuntu 14.04 LTS (GNU/Linux 3.13.0-32-generic x86_64)

 * Documentation:  https://help.ubuntu.com/

The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.

root@db36812760ac:~# 

成功。

若在ssh登陆时提示：

 

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
bd:41:3f:e4:e3:bd:b4:46:54:fe:1b:46:eb:60:f3:73.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /root/.ssh/known_hosts:5
  remove with: ssh-keygen -f "/root/.ssh/known_hosts" -R 172.17.0.2
ECDSA host key for 172.17.0.2 has changed and you have requested strict checking.
Host key verification failed.

 

rm $HOME/.ssh/known_hosts即可。