blocks|key|23719|text|我建议一个更好的解决方案是在启动容器时将--add-host+NAME:IP参数设置为docker+run。这将更新/etc/hosts/文件，而不需要成为根用户。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|23720|否则，您可以通过将-u+USER标志指定给docker+run来覆盖USER设置。然而，我建议不要这样做，因为你不应该真的在运行的容器中改变东西。相反，您可以在Dockerfile中进行更改并构建新的镜像。|23721|entityMap^0|K|I|1M|B|0|9|7|L|A|Y|4|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|I|$]]

I'd suggest a better solution is to give the <code>--add-host NAME:IP</code> argument to docker run when starting the container. That will update the <code>/etc/hosts/</code> file without any need to become root.

Otherwise, you can override the the <code>USER</code> setting by giving the <code>-u USER</code> flag to <code>docker run</code>. I would advise against this however, as you shouldn't really be changing things in a running container. Instead, make your changes in a Dockerfile and build a new image.

blocks|key|4531262|text|最终，我决定重建我的Docker镜像，这样我就可以通过一些我知道的东西来更改root密码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531263|RUN+echo+'root:Docker!'+%7C+chpasswd|code-block|syntax|javascript|4531264|或|4531265|RUN+echo+'Docker!'+%7C+passwd+--stdin+root+|4531266|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Eventually, I decided to rebuild my Docker images, so that I change the root password by something I will know.

<pre><code>RUN echo 'root:Docker!' | chpasswd
</code></pre>

or

<pre><code>RUN echo 'Docker!' | passwd --stdin root 
</code></pre>

blocks|key|23776|text|因为我是以非特权用户的身份在容器中运行，所以无法通过su切换到root，这正是我的问题。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23777|但我不想像之前的答案那样重建一个新的映像。|23778|相反，我发现我可以使用'nsenter‘以根用户身份访问容器，请参阅：https://github.com/jpetazzo/nsenter|offset|length|23779|首先确定主机上容器的PID：|23780|docker+inspect+--format+{{.State.Pid}}+<container_name_or_ID>|code-block|syntax|javascript|23781|然后使用nsenter以root用户身份进入容器|23782|nsenter+--target+<PID>+--mount+--uts+--ipc+--net+--pid|23783|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/jpetazzo/nsenter^0|0|0|Z|Z|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|12|8|@]|9|@$F|13|G|14|1|15]]|A|$]]|$1|H|3|I|5|6|7|16|8|@]|9|@]|A|$]]|$1|J|3|K|5|L|7|17|8|@]|9|@]|A|$M|N]]|$1|O|3|P|5|6|7|18|8|@]|9|@]|A|$]]|$1|Q|3|R|5|L|7|19|8|@]|9|@]|A|$M|N]]|$1|S|3|-4|5|6|7|1A|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]]]

I had exactly this problem of not being able to su to root because I was running in the container as an unprivileged user.

But I didn't want to rebuild a new image as the previous answers suggest.

Instead I have found that I could access the container as root using 'nsenter', see: <a href="https://github.com/jpetazzo/nsenter" rel="noreferrer">https://github.com/jpetazzo/nsenter</a>

First determine the PID of your container on the host:

<pre><code>docker inspect --format {{.State.Pid}} &lt;container_name_or_ID&gt;
</code></pre>

Then use nsenter to enter the container as root

<pre><code>nsenter --target &lt;PID&gt; --mount --uts --ipc --net --pid
</code></pre>

blocks|key|23829|text|密码是'+ubuntu‘用户的'ubuntu’(至少在ubuntu的docker中是14.04.03)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23830|注意：'ubuntu‘是在容器启动后创建的，所以，如果你这样做：|23831|+docker+run+-i+-t+--entrypoint+/bin/bash++ubuntu+++++|code-block|syntax|javascript|23832|您将直接获得根提示符。从那里你可以强制更改根目录的密码，提交容器，并可选地将其标记(使用-f)到ubuntu:最新，如下所示：|23833|root@ec384466fbbb:~#+passwd
Enter+new+UNIX+password:
Retype+new+UNIX+password:
passwd:+password+updated+successfully
root@ec384466fbbb:~#+exit

%25+docker+commit+ec3844
5d3c03e7d6d861ce519fe33b184cd477b8ad03247ffe19b2a57d3f0992d71bca

docker+tag+-f+5d3c+ubuntu:latest|23834|您必须在ubuntu:latest上重新构建您的最终依赖项。|23835|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

The password is 'ubuntu' for the 'ubuntu' user (at least in docker for ubuntu :14.04.03).

NB: 'ubuntu' is created after the startup of the container so, if you just do this:

<pre><code> docker run -i -t --entrypoint /bin/bash ubuntu 
</code></pre>

You'll get the root prompt directly. From there you can force the password change of root, commit the container and optionally tag it (with -f) to ubuntu:latest like this: 

<pre><code>root@ec384466fbbb:~# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
root@ec384466fbbb:~# exit

% docker commit ec3844
5d3c03e7d6d861ce519fe33b184cd477b8ad03247ffe19b2a57d3f0992d71bca

docker tag -f 5d3c ubuntu:latest
</code></pre>

You must rebuild your eventual dependencies on ubuntu:latest.

blocks|key|23847|text|我可以用下面的命令让它工作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23848|root@gitnew:#+docker+exec+-it+--user+$(username)+$(containername)+/bin/bash|code-block|syntax|javascript|23849|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I am able to get it working with the below command.

<pre><code>root@gitnew:# docker exec -it --user $(username) $(containername) /bin/bash
</code></pre>

blocks|key|23860|text|docker+exec+-u+0+-it+containername+bash|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|23861|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>docker exec -u 0 -it containername bash
</code></pre>

blocks|key|23909|text|您可以在Dockerfile中使用USER+root命令。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23910|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

You can use the USER root command in your Dockerfile.

blocks|key|4531483|text|获取正在运行的容器的shell并更改根路径。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531484|docker+exec+-u+0+-it+<MyContainer>+bash

root@MyContainer:/#+passwd
Enter+new+UNIX+password:+
Retype+new+UNIX+password:+|code-block|syntax|javascript|4531485|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Get a shell of your running container and change the root pass.
<pre><code>docker exec -u 0 -it &lt;MyContainer&gt; bash

root@MyContainer:/# passwd
Enter new UNIX password: 
Retype new UNIX password: 
</code></pre>

blocks|key|4531512|text|尝试执行以下命令以获取root访问权限|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531513|$+sudo+-i+|code-block|syntax|javascript|4531514|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

try the following command to get the root access 

<pre><code>$ sudo -i 
</code></pre>

blocks|key|23992|text|当您启动容器时，您将成为root用户，但您将不知道root的pw是什么。要将其设置为您知道的值，只需使用"passwd+root“即可。快照/提交容器以保存您的操作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|23993|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

When you start the container, you will be root but you won't know what root's pw is. To set it to something you know simply use "passwd root". Snapshot/commit the container to save your actions.

blocks|key|24013|text|默认情况下，docker容器以root用户身份运行。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|24014|如果您仍在使用容器，则可以使用exit命令返回到root+(默认用户)用户，而不是再次运行容器。|24015|示例：|24016|[dev@6c4c86bccf93+~]$+ls
[dev@6c4c86bccf93+~]$+other-commands..
[dev@6c4c86bccf93+~]$+exit
[root@6c4c86bccf93+/]#+ls|code-block|syntax|javascript|24017|entityMap^0|F|4|0|F|4|O|4|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|T|8|@$9|U|A|V|B|C]|$9|W|A|X|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|Y|8|@]|D|@]|E|$]]|$1|J|3|K|5|L|7|Z|8|@]|D|@]|E|$M|N]]|$1|O|3|-4|5|6|7|10|8|@]|D|@]|E|$]]]|P|$]]

By default docker containers run as the <code>root</code> user.

If you are still using the container you can use <code>exit</code> command to get back to <code>root</code> (default user) user instead of running the container again.

Example -

<pre><code>[dev@6c4c86bccf93 ~]$ ls
[dev@6c4c86bccf93 ~]$ other-commands..
[dev@6c4c86bccf93 ~]$ exit
[root@6c4c86bccf93 /]# ls
</code></pre>

blocks|key|4531643|text|在某些情况下，您需要能够在使用sudo的用户下执行类似的操作(例如，运行在容器中的应用程序为用户提供了一个外壳)。只需将以下代码添加到Dockerfile中：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4531644|RUN+apt-get+update+++++++++#+If+necessary
RUN+apt-get+install+sudo+++#+If+your+base+image+does+not+contain+sudo.
RUN+useradd+-m+-N+-s+/bin/bash+-u+1000+-p+'$1$miTOHCYy$K.c4Yw.edukWJ7z9rbpTZ0'+user+&&+\
++++usermod+-aG+sudo+user++#+Grant+sudo+to+the+user
USER+user|code-block|syntax|javascript|4531645|现在，在默认图像user+user下，您将能够使用第3行上设置的密码执行sudo。|4531646|请参见how+to+generate+password+hash+for+useradd+here+or+here。|4531647|entityMap|0|LINK|mutability|MUTABLE|url|https://blog.sleeplessbeastie.eu/2015/09/28/how-to-programmatically-create-system-user-with-defined-password/|1|https://serverfault.com/a/688380/555276^0|F|4|0|0|D|4|10|4|0|11|7|19|4|0|1H|4|1|0^^$0|@$1|2|3|4|5|6|7|Y|8|@$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|11|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|12|8|@$9|13|A|14|B|C]|$9|15|A|16|B|C]]|D|@]|E|$]]|$1|M|3|N|5|6|7|17|8|@$9|18|A|19|B|C]]|D|@$9|1A|A|1B|1|1C]|$9|1D|A|1E|1|1F]]|E|$]]|$1|O|3|-4|5|6|7|1G|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]|W|$5|R|S|T|E|$U|X]]]]

In some cases you need to be able to do things like that under a user with <code>sudo</code> (e.g. the application running in the container provides a shell to users). Simply add this into you Dockerfile:

<pre><code>RUN apt-get update # If necessary
RUN apt-get install sudo # If your base image does not contain sudo.
RUN useradd -m -N -s /bin/bash -u 1000 -p '$1$miTOHCYy$K.c4Yw.edukWJ7z9rbpTZ0' user &amp;&amp; \
 usermod -aG sudo user # Grant sudo to the user
USER user
</code></pre>

Now under the default image user <code>user</code> you will be able to <code>sudo</code> with the password set on line 3.

See how to generate password hash for <code>useradd</code> <a href="https://blog.sleeplessbeastie.eu/2015/09/28/how-to-programmatically-create-system-user-with-defined-password/" rel="nofollow noreferrer">here</a> or <a href="https://serverfault.com/a/688380/555276">here</a>.

blocks|key|4531678|text|在docker容器中设置固定的root密码可能会危害系统，因此不应使用。相反，您可以使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4531679|+docker+exec+-itu+0+CONTAINER_ID+bash|code-block|syntax|javascript|4531680|当容器启动并运行时，只要您想要root访问容器。|4531681|上面的命令假设您希望运行bash作为您的shell。我不使用微软视窗，但我猜你可能会尝试CMD或CMD.EXE，而不是bash，如果你是在微软视窗机器上。|4531682|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Setting a fixed root password in a docker container can compromise systems, and so shouldn't be used. Instead you might use:
<pre><code> docker exec -itu 0 CONTAINER_ID bash
</code></pre>
whenever you want root access to the container, while the container is up and running.
The above command assumes you want to run bash as your shell.
I don't use MS Windows, but I'd guess that you might try CMD or CMD.EXE instead of bash if you're on a MS Windows machine.

I'm using a Docker image which was built using the USER command to use a non-root user called <code>dev</code>.
Inside a container, I'm "dev", but I want to edit the <code>/etc/hosts</code> file.

So I need to be root. I'm trying the su command, but I'm asked to enter the root password.

What's the default root user's password inside a Docker container?

Root password inside a Docker container

我使用的是一个Docker镜像，它是使用USER命令构建的，它使用一个名为dev的非根用户。在容器中，我是"dev"，但我想编辑/etc/hosts文件。所以我需要成为root用户。我正在尝试su命令，但系统要求我输入root密码。Docker容器中默认的root用户密码是多少？

问Docker容器内的Root密码
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Docker容器内的Root密码EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Docker容器内的Root密码
EN