环境介绍:
Docker版本:1.5.0
镜像:docker.io:centos latest
操作步骤:
0、拉取最新centos
docker pull centos
1、启动镜像
docker run -ti centos /bin/bash
2、安装passwd
yum install passwd -y
3、修改Centos root密码
# passwd
Changing password for user root.
New password: 123456
BAD PASSWORD: The password is shorter than 8 characters
Retype new password: 123456
passwd: all authentication tokens updated successfully.
4、安装openssh
yum install openssh-server -y
5、生成公钥、私钥
[root@378ab88a06c8 /]# ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): (直接回车)
Enter same passphrase again: (直接回车)
Your identification has been saved in /etc/ssh/ssh_host_rsa_key.
Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub.
The key fingerprint is:
33:3c:34:49:e4:76:7d:45:cc:69:ac:46:85:ab:27:9e root@378ab88a06c8
The key's randomart image is:
+--[ RSA 2048]----+
| .o +=+|
| o . . o =o|
| * . o = |
| + o = |
| S o |
| + o . |
| . + |
| E |
| |
+-----------------+
[root@378ab88a06c8 /]# ssh-keygen -t rsa -f /etc/ssh/ssh_host_ecdsa_key
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): (直接回车)
Enter same passphrase again: (直接回车)
Your identification has been saved in /etc/ssh/ssh_host_ecdsa_key.
Your public key has been saved in /etc/ssh/ssh_host_ecdsa_key.pub.
The key fingerprint is:
09:ac:b0:61:55:de:e8:4f:5e:20:d9:fc:1e:b6:d7:79 root@378ab88a06c8
The key's randomart image is:
+--[ RSA 2048]----+
| ... |
| . o * |
| + B = |
| . + o o + |
| . . . S = |
| + + o . . |
| o o . o E|
| . . |
| |
+-----------------+
[root@378ab88a06c8 /]# ssh-keygen -t rsa -f /etc/ssh/ssh_host_ed25519_key
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): (直接回车)
Enter same passphrase again: (直接回车)
Your identification has been saved in /etc/ssh/ssh_host_ed25519_key.
Your public key has been saved in /etc/ssh/ssh_host_ed25519_key.pub.
The key fingerprint is:
63:0d:b5:fb:55:a4:56:47:43:6d:68:c0:47:2e:84:24 root@378ab88a06c8
The key's randomart image is:
+--[ RSA 2048]----+
| E.ooooo=*|
| o.o..++=|
| . . .o+..|
| o . o . |
| S o . |
| . . . . |
| . |
| |
| |
+-----------------+
6、编写启动脚本
# vi /run.sh
#!/bin/bash
/usr/sbin/sshd -D
# chmod +x /run.sh
7、修改SSH默认端口
# vi /etc/ssh/sshd_config
Port 222
8、退出容器,保存镜像
[root@localhost ~]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
378ab88a06c8 centos:latest "/bin/bash" 52 minutes ago Exited (0) 29 seconds ago ecstatic_hawking
[root@localhost ~]# docker commit 378ab88a06c8 sshd:centos
9f400c5422109a3403779f4b055c673fae57d1a8809a84bad7a20fcc3574b3dc
8、启动容器
[root@localhost ~]# docker images
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
sshd centos 9f400c542210 2 minutes ago 271.3 MB
192.168.31.202:5000/test latest f6c0d93ac266 3 days ago 315.6 MB
docker.io/centos latest fd44297e2ddb 3 weeks ago 215.7 MB
docker.io/busybox latest 8c2e06607696 4 weeks ago 2.43 MB
[root@localhost ~]# docker run --net=host -d sshd:centos /run.sh
bbd39bbd7e03ffbd22b88725041793c74c50dbd4316d25bd20c8053265c3f8f1
9、远程连接测试
[root@localhost ~]# ssh 192.168.31.203 -p 222
The authenticity of host '[192.168.31.203]:222 ([192.168.31.203]:222)' can't be established.
RSA key fingerprint is 79:2f:94:52:bb:22:8c:32:f2:2c:0d:82:cb:b2:26:75.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[192.168.31.203]:222' (RSA) to the list of known hosts.
[email protected]'s password:
Last login: Tue Jun 23 07:23:32 2015 from 192.168.7.46
[root@localhost ~]# ll
total 0
[root@localhost ~]# cd /
[root@localhost /]# ll
total 44
lrwxrwxrwx 1 root root 7 Apr 15 14:28 bin -> usr/bin
drwxr-xr-x 5 root root 360 Jun 23 07:22 dev
drwxr-xr-x 48 root root 4096 Jun 23 07:22 etc
drwxr-xr-x 2 root root 4096 Jun 10 2014 home
lrwxrwxrwx 1 root root 7 Apr 15 14:28 lib -> usr/lib
lrwxrwxrwx 1 root root 9 Apr 15 14:28 lib64 -> usr/lib64
drwx------ 2 root root 4096 Apr 15 14:26 lost+found
drwxr-xr-x 2 root root 4096 Jun 10 2014 media
drwxr-xr-x 2 root root 4096 Jun 10 2014 mnt
drwxr-xr-x 2 root root 4096 Jun 10 2014 opt
dr-xr-xr-x 348 root root 0 Jun 23 07:22 proc
dr-xr-x--- 2 root root 4096 Jun 4 02:20 root
drwxr-xr-x 11 root root 240 Jun 23 07:22 run
-rwxr-xr-x 1 root root 30 Jun 4 02:19 run.sh
lrwxrwxrwx 1 root root 8 Apr 15 14:28 sbin -> usr/sbin
drwxr-xr-x 2 root root 4096 Jun 10 2014 srv
dr-xr-xr-x 13 root root 0 May 15 07:27 sys
drwxrwxrwt 7 root root 140 Jun 23 07:30 tmp
drwxr-xr-x 13 root root 4096 Apr 15 14:28 usr
drwxr-xr-x 19 root root 4096 Apr 15 14:29 var
[root@localhost /]#