Docker - 如何使用SSH连接到正在运行中的容器

## 

## 安装 openssh-server 和 epel-release

##



yum -y install openssh-server epel-release

yum -y install pwgen

rm -f /etc/ssh/ssh_host_ecdsa_key /etc/ssh/ssh_host_rsa_key

ssh-keygen -q -N "" -t dsa -f /etc/ssh/ssh_host_ecdsa_key

ssh-keygen -q -N "" -t rsa -f /etc/ssh/ssh_host_rsa_key 

sed -i "s/#UsePrivilegeSeparation.*/UsePrivilegeSeparation no/g" /etc/ssh/sshd_config

sed -i "s/UsePAM.*/UsePAM yes/g" /etc/ssh/sshd_config

ssh-keygen -A

##

## 创建一个设置根密码的脚本，将其命名为set_root_pw.sh。并将其保存在一个文件夹中

##



#!/bin/bash

if [ -f /.root_pw_set ]; then

echo "Root password already set!"

exit 0

fi




PASS=${ROOT_PASS:-$(pwgen -s 12 1)}

_word=$( [ ${ROOT_PASS} ] && echo "preset" || echo "random" )

echo "=> Setting a ${_word} password to the root user"

echo "root:$PASS" | chpasswd




echo "=> Done!"

touch /.root_pw_set




echo "========================================================================"

echo "You can now connect to this CentOS container via SSH using:"

echo ""

echo "    ssh -p  root@"

echo "and enter the root password '$PASS' when prompted"

echo ""

echo "Please remember to change the above password as soon as possible!"

echo "========================================================================"

##

## 使用以下内容创建run.sh文件，并将其保存在与上面创建的set_root_pw.sh文件相同的文件夹中

##



#!/bin/bash




if [ "${AUTHORIZED_KEYS}" != "**None**" ]; then

    echo "=> Found authorized keys"
    
    mkdir -p /root/.ssh
    
    chmod 700 /root/.ssh
    
    touch /root/.ssh/authorized_keys
    
    chmod 600 /root/.ssh/authorized_keys
    
    IFS=
    
\n'

    arr=$(echo ${AUTHORIZED_KEYS} | tr "," "\n")
    
    for x in $arr
    
    do
    
        x=$(echo $x |sed -e 's/^ *//' -e 's/ *$//')
        
        cat /root/.ssh/authorized_keys | grep "$x" >/dev/null 2>&1
        
        if [ $? -ne 0 ]; then
        
            echo "=> Adding public key to /root/.ssh/authorized_keys: $x"
            
            echo "$x" >> /root/.ssh/authorized_keys
            
        fi
        
    done
    
fi



if [ ! -f /.root_pw_set ]; then

/set_root_pw.sh

fi

exec /usr/sbin/sshd -D