nardeas / ssh-agent Goto Github PK
View Code? Open in Web Editor NEWDocker container for SSH agent forwarding on OSX/Linux
Docker container for SSH agent forwarding on OSX/Linux
Hi
When I try to load a key, it fails with :
standard_init_linux.go:175: exec user process caused "no such file or directory"
I am using Docker Toolbox on Windows 7.
I can confirm I have a valid id_rsa file with LF line endings (as this can be an issue) located in my home/.ssh folder.
It's working, this will be really useful! There is a chmod missing in the Dockerfile though:
COPY entry.sh /entry.sh
RUN chmod +x /entry.sh
Something like this maybe?
FROM nardeas/ssh-agent
FROM foo as intermediate
# do stuff that uses ssh-agent
FROM bar
COPY --from=intermediate /app /app
# do stuff without ssh-agent
I'm sorry if there is an obvious question, I'm a Docker n00b
I am trying to forward the ssh-agent in a non root container but get this error from socat:
2018/07/09 10:28:27 socat[27] E bind(5, {AF=1 "~/.ssh/socket"}, 15): No such file or directory
What I did:
docker run -d --name=ssh-agent nardeas/ssh-agent
docker run --rm --volumes-from=ssh-agent -v ~/.ssh:/.ssh -it nardeas/ssh-agent ssh-add /root/.ssh/id_rsa
docker run --rm -it --name my_container_name --volumes-from=ssh-agent -e SSH_AUTH_SOCK=/.ssh-agent/socket my_container bash
sudo socat UNIX-LISTEN:~/.ssh/socket,fork UNIX-CONNECT:/.ssh-agent/socket
Did I miss anything?
Could we please get this added to dockerhub?
I added this to the docker file of my client images
echo "UserKnownHostsFile /.ssh-agent/known_hosts" >> /etc/ssh/ssh_config && \
K.
Just FYI. Here's how I am using it with docker-compose.
# This is the service I need to have access to the ssh-agent.
# This is a partial service definition. Only includes key items to use ssh-agent.
php:
environment:
SSH_AUTH_SOCK: /.ssh-agent/socket
restart: always
volumes_from:
- ssh-agent
# SSH Agent. This is the complete service definition.
ssh-agent:
build:
context: ./docker/ssh-agent
ports:
- "2244:22"
volumes:
- ~/.ssh:/root/.ssh
run.sh
#!/bin/bash
# Copyright (c) Andreas Urbanski, 2016
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
# OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
# THE SOFTWARE.
# Output colors
underline='\033[4;37m'
purple='\033[0;35m'
bold='\033[1;37m'
green='\033[0;32m'
cyan='\033[0;36m'
red='\033[0;31m'
nc='\033[0m'
# Find image id
image=$(docker images|grep docker-ssh-agent|awk '{print $3}')
# Find agent container id
id=$(docker ps -a|grep ssh-agent|awk '{print $1}')
# Stop command
if [ "$1" == "-s" ] && [ $id ]; then
echo -e "Removing ssh-keys..."
docker run --rm --volumes-from=ssh-agent -it docker-ssh-agent:latest ssh-add -D
echo -e "Stopping ssh-agent container..."
docker rm -f $id
exit
fi
# If container is already running, exit.
if [ $id ]; then
echo -e "A container named 'ssh-agent' is already running."
echo -e "Do you wish to stop it? (y/N): "
read input
if [ "$input" == "y" ]; then
echo -e "Removing SSH keys..."
docker run --rm --volumes-from=ssh-agent -it docker-ssh-agent:latest ssh-add -D
echo -e "Stopping ssh-agent container..."
docker rm -f $id
echo -e "${red}Stopped.${nc}"
fi
exit
fi
echo -e "Building and starting services"
docker-compose up --build -d
echo -e "${green}Your services are now ready to use.${nc}"
Since keys are password protected, I added ssh-add /root/.ssh/id_rsa
as the last line in my .bashrc
file so that this would happen when I enter the php service (docker-compose exec php bash
).
If you don't want to do that, you can just run ssh-add /root/.ssh/id_rsa
to add the keys before using them.
$ ssh [email protected]
or
$ ssh [email protected]
BTW, thanks for doing this project. I am sure this can be cleaned up a little. But, it is working for me. Hopefully this will help others.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.