realaravinth/forgejo-federation
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity
forgejo-federation/docker/s6/openssh/setup

28 lines
737 B
Text
Raw Normal View History

Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 02:24:55 +05:30
#!/bin/sh
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-12 21:09:40 +05:30
# Check if host keys are present, else create them
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 02:43:22 +05:30
if ! test -f /data/ssh/ssh_host_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 02:24:55 +05:30
ssh-keygen -q -f /data/ssh/ssh_host_key -N '' -t rsa1
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-12 21:09:40 +05:30
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 02:43:22 +05:30
if ! test -f /data/ssh/ssh_host_rsa_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 02:24:55 +05:30
ssh-keygen -q -f /data/ssh/ssh_host_rsa_key -N '' -t rsa
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-12 21:09:40 +05:30
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 02:43:22 +05:30
if ! test -f /data/ssh/ssh_host_dsa_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 02:24:55 +05:30
ssh-keygen -q -f /data/ssh/ssh_host_dsa_key -N '' -t dsa
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-12 21:09:40 +05:30
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 02:43:22 +05:30
if ! test -f /data/ssh/ssh_host_ecdsa_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 02:24:55 +05:30
ssh-keygen -q -f /data/ssh/ssh_host_ecdsa_key -N '' -t ecdsa
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-12 21:09:40 +05:30
fi
Fix bug introduced in #1759 preventing ssh server to launch - ssh/setup: test directive now check if a file exist in key path instead of a folder - ssh/setup script was hanging waiting for an input about rewriting the key as the test case was returning true, when it should have been false (check if file is a folder instead of a file)
2015-10-13 02:43:22 +05:30
if ! test -f /data/ssh/ssh_host_ed25519_key; then
Docker Container: Init 1 & Initialisation - Now using a setup script before starting the app. The separation of the run script and the setup script will make service initialisation a little bit clearer - Now calling start.sh script as ENTRYPOINT and S6 as CMD. This way when running the container with just a shell script, the start.sh script will be launched before, making debugging easier - Added note about `.dockerignore` ignored during Docker Hub Automated Build
2015-10-03 02:24:55 +05:30
ssh-keygen -q -f /data/ssh/ssh_host_ed25519_key -N '' -t ed25519
fi
Volumed data setup changed to allow #1759 - Volumed subfolder now created up in the ENTRYPOINT script, this way they are created before S6 even starts making VOLUME. - The subfolder will be created during VOLUME creation too as ENTRYPOINT script will be run before /bin/true - SSH Keys will now be created on a single key basis not replying on the existence of /data/ssh folder
2015-10-12 21:09:40 +05:30
# Set correct right to ssh keys
chown -R root:root /data/ssh/*
Add syslog & fix `/data/git` rights & SOCAT_LINK env var - Resolve #1893 - Add syslogd to output sshd log on stdout (via `docker logs`) - Enforce directory rights on `/data/git`, `/data/gogs` & `/data/ssh` - Add `SOCAT_LINK` environment variable to prevent the creation of scout links when they are not needed (see #1815)
2015-11-05 00:49:39 +05:30
chmod 0700 /data/ssh
chmod 0600 /data/ssh/*
Copy permalink