docker創建可以遠程連接的容器
拉取centos基礎鏡像
docker pull centos:7.2.1511
docker pull registry.cn-hangzhou.aliyuncs.com/repos_zyl/centos:0.0.1
啟動鏡像
sudo docker run -i -t centos:7.2.1511 /bin/bash
yum -y install openssh-server
啟動sshd:
# /usr/sbin/sshd -D
這時報以下錯誤：
[root@ b5926410fe60 /]# /usr/sbin/sshd
Could not load host key: /etc/ssh/ssh_host_rsa_key
Could not load host key: /etc/ssh/ssh_host_ecdsa_key
Could not load host key: /etc/ssh/ssh_host_ed25519_key
執行以下命令解決：
ssh-keygen -q -t rsa -b 2048 -f /etc/ssh/ssh_host_rsa_key -N ''
ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ''
ssh-keygen -t dsa -f /etc/ssh/ssh_host_ed25519_key -N ''
然後，修改/etc/ssh/sshd_config 配置信息：
UsePAM yes 改為UsePAM no
UsePrivilegeSeparation sandbox 改為UsePrivilegeSeparation no
sed -i "s/#UsePrivilegeSeparation.*/UsePrivilegeSeparation no/g" /etc/ssh/sshd_config
sed -i "s/UsePAM.*/UsePAM no/g" /etc/ssh/sshd_config
systemctl enable sshd
passwd root
aice@openstack:~$ sudo docker ps -all
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
880273353fda registry.cn-hangzhou.aliyuncs.com/repos_zyl/centos:0.0.1 "/bin/bash" 10 minutes ago Exited (127) 5 seconds ago goofy_kirch
aice@openstack:~$ sudo docker commit 880273353fda sf/centos7-ssh
sha256:526e35632f77b2d9200fb26713b6270b0b58e221d1c789e3dc2bc2c5708423a8
aice@openstack:~$
生成新的鏡像
aice@openstack:~$ sudo docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
sf/centos7-ssh latest 526e35632f77 About a minute ago 301MB
刪除在運行的容器
aice@openstack:~$ sudo docker ps -all
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
880273353fda registry.cn-hangzhou.aliyuncs.com/repos_zyl/centos:0.0.1 "/bin/bash" 13 minutes ago Exited (127) 3 minutes ago goofy_kirch
aice@openstack:~$ sudo docker rm -f 880273353fda
880273353fda
aice@openstack:~$
重新啟動tomcat端口為8080 jh-hos端口為20000 ssh端口為10022
aice@openstack:~$ sudo docker run -d -p 10022:22 -d -p 8080:8080 -d -p 20000:20000 sf/centos7-ssh /usr/sbin/sshd -D
04c440e2c872483a14e7cdee1411c51b73e2be2bdbfea5cf4887e09633ae0ed9
#遠程連接成功
MacBook-Pro:lss-lims-web dingbingbing$ ssh [email protected] -p 10022
The authenticity of host '[192.168.3.136]:10022 ([192.168.3.136]:10022)' can't be established.
ECDSA key fingerprint is SHA256:EPo7Cu1FM9GG1plXF2MP9gyQRWORrUJau/MZnuqNt+w.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[192.168.3.136]:10022' (ECDSA) to the list of known hosts.
[email protected]'s password:
[root@04c440e2c872 ~]#
docker創建可以遠程連接的容器