blocks|key|4531262|text|最终，我决定重建我的Docker镜像，这样我就可以通过一些我知道的东西来更改root密码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531263|RUN+echo+'root:Docker!'+%7C+chpasswd|code-block|syntax|javascript|4531264|或|4531265|RUN+echo+'Docker!'+%7C+passwd+--stdin+root+|4531266|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Eventually, I decided to rebuild my Docker images, so that I change the root password by something I will know.

<pre><code>RUN echo 'root:Docker!' | chpasswd
</code></pre>

or

<pre><code>RUN echo 'Docker!' | passwd --stdin root 
</code></pre>

blocks|key|23847|text|我可以用下面的命令让它工作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23848|root@gitnew:#+docker+exec+-it+--user+$(username)+$(containername)+/bin/bash|code-block|syntax|javascript|23849|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I am able to get it working with the below command.

<pre><code>root@gitnew:# docker exec -it --user $(username) $(containername) /bin/bash
</code></pre>

blocks|key|23860|text|docker+exec+-u+0+-it+containername+bash|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|23861|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>docker exec -u 0 -it containername bash
</code></pre>

blocks|key|23776|text|因为我是以非特权用户的身份在容器中运行，所以无法通过su切换到root，这正是我的问题。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23777|但我不想像之前的答案那样重建一个新的映像。|23778|相反，我发现我可以使用'nsenter‘以根用户身份访问容器，请参阅：https://github.com/jpetazzo/nsenter|offset|length|23779|首先确定主机上容器的PID：|23780|docker+inspect+--format+{{.State.Pid}}+<container_name_or_ID>|code-block|syntax|javascript|23781|然后使用nsenter以root用户身份进入容器|23782|nsenter+--target+<PID>+--mount+--uts+--ipc+--net+--pid|23783|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/jpetazzo/nsenter^0|0|0|Z|Z|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|12|8|@]|9|@$F|13|G|14|1|15]]|A|$]]|$1|H|3|I|5|6|7|16|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|17|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|18|8|@]|9|@]|A|$]]|$1|Q|3|R|5|L|7|19|8|@]|9|@]|A|$M|N]]|$1|S|3|-4|5|6|7|1A|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]]]

I had exactly this problem of not being able to su to root because I was running in the container as an unprivileged user.

But I didn't want to rebuild a new image as the previous answers suggest.

Instead I have found that I could access the container as root using 'nsenter', see: <a href="https://github.com/jpetazzo/nsenter" rel="noreferrer">https://github.com/jpetazzo/nsenter</a>

First determine the PID of your container on the host:

<pre><code>docker inspect --format {{.State.Pid}} &lt;container_name_or_ID&gt;
</code></pre>

Then use nsenter to enter the container as root

<pre><code>nsenter --target &lt;PID&gt; --mount --uts --ipc --net --pid
</code></pre>

blocks|key|4531483|text|获取正在运行的容器的shell并更改根路径。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531484|docker+exec+-u+0+-it+<MyContainer>+bash

root@MyContainer:/#+passwd
Enter+new+UNIX+password:+
Retype+new+UNIX+password:+|code-block|syntax|javascript|4531485|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Get a shell of your running container and change the root pass.
<pre><code>docker exec -u 0 -it &lt;MyContainer&gt; bash

root@MyContainer:/# passwd
Enter new UNIX password: 
Retype new UNIX password: 
</code></pre>

blocks|key|23829|text|密码是'+ubuntu‘用户的'ubuntu’(至少在ubuntu的docker中是14.04.03)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23830|注意：'ubuntu‘是在容器启动后创建的，所以，如果你这样做：|23831|+docker+run+-i+-t+--entrypoint+/bin/bash++ubuntu+++++|code-block|syntax|javascript|23832|您将直接获得根提示符。从那里你可以强制更改根目录的密码，提交容器，并可选地将其标记(使用-f)到ubuntu:最新，如下所示：|23833|root@ec384466fbbb:~#+passwd
Enter+new+UNIX+password:
Retype+new+UNIX+password:
passwd:+password+updated+successfully
root@ec384466fbbb:~#+exit

%25+docker+commit+ec3844
5d3c03e7d6d861ce519fe33b184cd477b8ad03247ffe19b2a57d3f0992d71bca

docker+tag+-f+5d3c+ubuntu:latest|23834|您必须在ubuntu:latest上重新构建您的最终依赖项。|23835|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

The password is 'ubuntu' for the 'ubuntu' user (at least in docker for ubuntu :14.04.03).

NB: 'ubuntu' is created after the startup of the container so, if you just do this:

<pre><code> docker run -i -t --entrypoint /bin/bash ubuntu 
</code></pre>

You'll get the root prompt directly. From there you can force the password change of root, commit the container and optionally tag it (with -f) to ubuntu:latest like this: 

<pre><code>root@ec384466fbbb:~# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
root@ec384466fbbb:~# exit

% docker commit ec3844
5d3c03e7d6d861ce519fe33b184cd477b8ad03247ffe19b2a57d3f0992d71bca

docker tag -f 5d3c ubuntu:latest
</code></pre>

You must rebuild your eventual dependencies on ubuntu:latest.

blocks|key|23719|text|我建议一个更好的解决方案是在启动容器时将--add-host+NAME:IP参数设置为docker+run。这将更新/etc/hosts/文件，而不需要成为根用户。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|23720|否则，您可以通过将-u+USER标志指定给docker+run来覆盖USER设置。然而，我建议不要这样做，因为你不应该真的在运行的容器中改变东西。相反，您可以在Dockerfile中进行更改并构建新的镜像。|23721|entityMap^0|K|I|1M|B|0|9|7|L|A|Y|4|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|I|$]]

I'd suggest a better solution is to give the <code>--add-host NAME:IP</code> argument to docker run when starting the container. That will update the <code>/etc/hosts/</code> file without any need to become root.

Otherwise, you can override the the <code>USER</code> setting by giving the <code>-u USER</code> flag to <code>docker run</code>. I would advise against this however, as you shouldn't really be changing things in a running container. Instead, make your changes in a Dockerfile and build a new image.

blocks|key|23909|text|您可以在Dockerfile中使用USER+root命令。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23910|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

You can use the USER root command in your Dockerfile.

blocks|key|23992|text|当您启动容器时，您将成为root用户，但您将不知道root的pw是什么。要将其设置为您知道的值，只需使用"passwd+root“即可。快照/提交容器以保存您的操作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23993|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

When you start the container, you will be root but you won't know what root's pw is. To set it to something you know simply use "passwd root". Snapshot/commit the container to save your actions.

blocks|key|24013|text|默认情况下，docker容器以root用户身份运行。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|24014|如果您仍在使用容器，则可以使用exit命令返回到root+(默认用户)用户，而不是再次运行容器。|24015|示例：|24016|[dev@6c4c86bccf93+~]$+ls
[dev@6c4c86bccf93+~]$+other-commands..
[dev@6c4c86bccf93+~]$+exit
[root@6c4c86bccf93+/]#+ls|code-block|syntax|javascript|24017|entityMap^0|F|4|0|F|4|O|4|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|T|8|@$9|U|A|V|B|C]|$9|W|A|X|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|Y|8|@]|D|@]|E|$]]|$1|J|3|K|5|L|7|Z|8|@]|D|@]|E|$M|N]]|$1|O|3|-4|5|6|7|10|8|@]|D|@]|E|$]]]|P|$]]

By default docker containers run as the <code>root</code> user.

If you are still using the container you can use <code>exit</code> command to get back to <code>root</code> (default user) user instead of running the container again.

Example -

<pre><code>[dev@6c4c86bccf93 ~]$ ls
[dev@6c4c86bccf93 ~]$ other-commands..
[dev@6c4c86bccf93 ~]$ exit
[root@6c4c86bccf93 /]# ls
</code></pre>

blocks|key|4531643|text|在某些情况下，您需要能够在使用sudo的用户下执行类似的操作(例如，运行在容器中的应用程序为用户提供了一个外壳)。只需将以下代码添加到Dockerfile中：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4531644|RUN+apt-get+update+++++++++#+If+necessary
RUN+apt-get+install+sudo+++#+If+your+base+image+does+not+contain+sudo.
RUN+useradd+-m+-N+-s+/bin/bash+-u+1000+-p+'$1$miTOHCYy$K.c4Yw.edukWJ7z9rbpTZ0'+user+&&+\
++++usermod+-aG+sudo+user++#+Grant+sudo+to+the+user
USER+user|code-block|syntax|javascript|4531645|现在，在默认图像user+user下，您将能够使用第3行上设置的密码执行sudo。|4531646|请参见how+to+generate+password+hash+for+useradd+here+or+here。|4531647|entityMap|0|LINK|mutability|MUTABLE|url|https://blog.sleeplessbeastie.eu/2015/09/28/how-to-programmatically-create-system-user-with-defined-password/|1|https://serverfault.com/a/688380/555276^0|F|4|0|0|D|4|10|4|0|11|7|19|4|0|1H|4|1|0^^$0|@$1|2|3|4|5|6|7|Y|8|@$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|11|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|12|8|@$9|13|A|14|B|C]|$9|15|A|16|B|C]]|D|@]|E|$]]|$1|M|3|N|5|6|7|17|8|@$9|18|A|19|B|C]]|D|@$9|1A|A|1B|1|1C]|$9|1D|A|1E|1|1F]]|E|$]]|$1|O|3|-4|5|6|7|1G|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]|W|$5|R|S|T|E|$U|X]]]]

In some cases you need to be able to do things like that under a user with <code>sudo</code> (e.g. the application running in the container provides a shell to users). Simply add this into you Dockerfile:

<pre><code>RUN apt-get update # If necessary
RUN apt-get install sudo # If your base image does not contain sudo.
RUN useradd -m -N -s /bin/bash -u 1000 -p '$1$miTOHCYy$K.c4Yw.edukWJ7z9rbpTZ0' user &amp;&amp; \
 usermod -aG sudo user # Grant sudo to the user
USER user
</code></pre>

Now under the default image user <code>user</code> you will be able to <code>sudo</code> with the password set on line 3.

See how to generate password hash for <code>useradd</code> <a href="https://blog.sleeplessbeastie.eu/2015/09/28/how-to-programmatically-create-system-user-with-defined-password/" rel="nofollow noreferrer">here</a> or <a href="https://serverfault.com/a/688380/555276">here</a>.

blocks|key|4531512|text|尝试执行以下命令以获取root访问权限|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531513|$+sudo+-i+|code-block|syntax|javascript|4531514|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

try the following command to get the root access 

<pre><code>$ sudo -i 
</code></pre>

blocks|key|4531678|text|在docker容器中设置固定的root密码可能会危害系统，因此不应使用。相反，您可以使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531679|+docker+exec+-itu+0+CONTAINER_ID+bash|code-block|syntax|javascript|4531680|当容器启动并运行时，只要您想要root访问容器。|4531681|上面的命令假设您希望运行bash作为您的shell。我不使用微软视窗，但我猜你可能会尝试CMD或CMD.EXE，而不是bash，如果你是在微软视窗机器上。|4531682|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Setting a fixed root password in a docker container can compromise systems, and so shouldn't be used. Instead you might use:
<pre><code> docker exec -itu 0 CONTAINER_ID bash
</code></pre>
whenever you want root access to the container, while the container is up and running.
The above command assumes you want to run bash as your shell.
I don't use MS Windows, but I'd guess that you might try CMD or CMD.EXE instead of bash if you're on a MS Windows machine.

I'm using a Docker image which was built using the USER command to use a non-root user called <code>dev</code>.
Inside a container, I'm "dev", but I want to edit the <code>/etc/hosts</code> file.

So I need to be root. I'm trying the su command, but I'm asked to enter the root password.

What's the default root user's password inside a Docker container?

Root password inside a Docker container

容器

Docker

我使用的是一个Docker镜像，它是使用USER命令构建的，它使用一个名为dev的非根用户。在容器中，我是"dev"，但我想编辑/etc/hosts文件。所以我需要成为root用户。我正在尝试su命令，但系统要求我输入root密码。Docker容器中默认的root用户密码是多少？

问Docker容器内的Root密码
EN

回答 13

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Docker容器内的Root密码EN

回答 13

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Docker容器内的Root密码
EN