基于commit命令创建
1.获取ubuntu镜像,并创建一个容器
docker pull ubuntu:18.04
docker run -it ubuntu:18.04 bash
root@b896306796ee:/#
- 配置软件源
root@b896306796ee:/# apt-get update
默认官方源比较慢,国内163、sohu等镜像源快些,在容器内创建/etc/apt/sources.list.d/163.list文件,
root@b896306796ee:/# vi /etc/apt/sources.list.d/163.list
bash: vi: command not found
这是因为vim没有安装,使用apt-get install vim命令安装
把如下内容添加到文件
然后再重新执行apt-get update命令。
- 安装和配置SSH服务
A. 安装SSH服务,选择主流的openssh-server作为服务端
root@b896306796ee:/# apt-get install openssh-server
B. 创建目录 /var/run/sshd,启动SSH服务
root@b896306796ee:/# mkdir -p /var/run/sshd
root@b896306796ee:/# /usr/sbin/sshd -D &
[1] 4024
root@b896306796ee:/#
C.查看SSH服务默认监听端口22
root@b896306796ee:/# netstat -tunlp
bash: netstat: command not found
root@b896306796ee:/# apt-get install net-tools
D. 修改SSH服务的安全登录配置,取消pam登录限制
sed -ri 's/session required pam_loginuid.so/#session required pam_loginuid.so/g' /etc/pam.d/sshd
E.在root用户目录下创建.ssh目录,并复制需要登录的公钥信息(一般为本地主机用户目录下的.ssh/id_rsa.pub文件,可由ssh-keygen -t rsa命令生成)到authorized_keys文件中
root@b896306796ee:/# mkdir root/.ssh
root@b896306796ee:/# vi /root/.ssh/authorized_keys
F.创建自动启动SSH服务的可执行文件run.sh,并添加可执行权限
root@b896306796ee:/# vi /run.sh
root@b896306796ee:/# chmod +x run.sh
root@b896306796ee:/# cat /run.sh
#! /bin/bash
/usr/sbin/sshd -D
- 退出容器,保存镜像
root@b896306796ee:/# exit
[root@iZ8vb0t4q1k74m22ntlvheZ ~]# docker commit b896306796ee sshd:ubuntu
sha256:a63516943457ddef7e6ffcac5f964c8832b82d2abf2ad3eb6492c35bc9cf6ee0
- 使用镜像
启动容器,并添加端口映射10022–>22。其中10022是宿主主机的端口,22是容器的SSH服务监听端口
[root@iZ8vb0t4q1k74m22ntlvheZ ~]# docker run -p 10022:22 -d sshd:ubuntu /run.sh
在宿主主机(192.168.1.200)或其他主机上上,可以通过SSH访问10022端口来登录容器
[root@iZ8vb0t4q1k74m22ntlvheZ ~]# ssh 127.0.0.1 -p 10022
使用Dockerfile
- 创建工作目录
mkdir sshd_ubuntu
cd sshd_ubuntu
touch run.sh Dockerfile
[root@iZ8vb0t4q1k74m22ntlvheZ sshd_ubuntu]# ls
authorized_keys Dockerfile run.sh
- 编写run.sh脚本和生成authorized_keys文件
[root@iZ8vb0t4q1k74m22ntlvheZ sshd_ubuntu]# cat run.sh
#! /bin/bash
/usr/sbin/sshd -D
在宿主主机上生成SSH密钥对,并创建authorized_keys文件
ssh-keygen -t rs
[root@iZ8vb0t4q1k74m22ntlvheZ .ssh]# cat id_rs.pub
ssh-rsa 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
把 id_rs.pub里的密钥复制到authorized_keys
[root@iZ8vb0t4q1k74m22ntlvheZ sshd_ubuntu]# cat authorized_keys
ssh-rsa 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
- 编写Dockerfile
[root@iZ8vb0t4q1k74m22ntlvheZ sshd_ubuntu]# cat Dockerfile
FROM ubuntu:18.04
MAINTAINER docker_user(user@docker.com)
RUN echo "deb http://mirrors.163.com/ubuntu/ bionic main restricted universe multiverse" > /etc/apt/sources.list
RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-security main restricted universe multiverse" >> /etc/apt/sources.list
RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-updates main restricted universe multiverse" >> /etc/apt/sources.list
RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-proposed main restricted universe multiverse" >> /etc/apt/sources.list
RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-backports main restricted universe multiverse" >> /etc/apt/sources.list
RUN apt-get update
RUN apt-get install -y openssh-server
RUN mkdir -p /var/run/sshd
RUN mkdir -p /root/.ssh
RUN sed -ri 's/session required pam_loginuid.so/#session required pam_loginuid.so/g' /etc/pam.d/sshd
ADD authorized_keys /root/.ssh/authorized_keys
ADD run.sh /run.sh
RUN chmod 755 /run.sh
EXPOSE 22
CMD ["/run.sh"]
- 创建镜像
[root@iZ8vb0t4q1k74m22ntlvheZ sshd_ubuntu]# docker build -t sshd:dockerfile .
Sending build context to Docker daemon 17.92kB
Step 1/17 : FROM ubuntu:18.04
---> 5a214d77f5d7
Step 2/17 : MAINTAINER docker_user(user@docker.com)
---> Using cache
---> 29554c7990a5
Step 3/17 : RUN echo "deb http://mirrors.163.com/ubuntu/ bionic main restricted universe multiverse" > /etc/apt/sources.list
---> Using cache
---> 28b934e08f83
Step 4/17 : RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-security main restricted universe multiverse" >> /etc/apt/sources.list
---> Using cache
---> fdef4bc19684
Step 5/17 : RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-updates main restricted universe multiverse" >> /etc/apt/sources.list
---> Using cache
---> 1bd61b26603f
Step 6/17 : RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-proposed main restricted universe multiverse" >> /etc/apt/sources.list
---> Using cache
---> 5bba44261e54
Step 7/17 : RUN echo "deb http://mirrors.163.com/ubuntu/ bionic-backports main restricted universe multiverse" >> /etc/apt/sources.list
---> Using cache
---> 924dd364e5c2
Step 8/17 : RUN apt-get update
---> Using cache
---> 0cb8b0ecb986
Step 9/17 : RUN apt-get install -y openssh-server
---> Using cache
---> e917f2bd9a82
Step 10/17 : RUN mkdir -p /var/run/sshd
---> Using cache
---> bc39ae04d340
Step 11/17 : RUN mkdir -p /root/.ssh
---> Using cache
---> aa69bcaa51d7
Step 12/17 : RUN sed -ri 's/session required pam_loginuid.so/#session required pam_loginuid.so/g' /etc/pam.d/sshd
---> Using cache
---> 3bc517cd23a9
Step 13/17 : ADD authorized_keys /root/.ssh/authorized_keys
---> 32000e555216
Step 14/17 : ADD run.sh /run.sh
---> 43159e26e04e
Step 15/17 : RUN chmod 755 /run.sh
---> Running in 18ad7460a4a3
Removing intermediate container 18ad7460a4a3
---> 92ee2ae83e43
Step 16/17 : EXPOSE 22
---> Running in 9a5e330fc41f
Removing intermediate container 9a5e330fc41f
---> 42d19421a2f7
Step 17/17 : CMD ["/run.sh"]
---> Running in 75cea58186cd
Removing intermediate container 75cea58186cd
---> ace41785be03
Successfully built ace41785be03
Successfully tagged sshd:dockerfile
在本地查看sshd:dockerfile镜像已存在
5. 测试镜像,运行容器
[root@iZ8vb0t4q1k74m22ntlvheZ sshd_ubuntu]# docker run -d -p 10122:22 sshd:dockerfile
c5421821f9f37acdd79764e2a04a3f5391fd37d87e51021b93edc7d836ef5731
在宿主主机新打开一个终端,连接到新建的容器
[root@iZ8vb0t4q1k74m22ntlvheZ sshd_ubuntu]# ssh 127.0.0.1 -p 10122