用commit方式构建具有sshd服务的centos镜像-低调大师

用commit方式构建具有sshd服务的centos镜像

2017-11-07 546

1.从远程仓库中pull centos镜像

docker pull centos

2.查询镜像docker images

[root@HA2 kehj]# docker images

REPOSITORY TAG IMAGE ID CREATED SIZE

nginx-docker v1 20c4d11561d3 11 hours ago 451.1 MB

docker.io/nginx latest f895b3fb9e30 2 weeks ago 108.5 MB

docker.io/centos latest 3fa822599e10 3 weeks ago 203.5 MB

docker.io/ubuntu latest 747cb2d60bbe 11 weeks ago 122 MB

3.启动centos容器 docker run -i -t centos /bin/bash

[root@HA2 kehj]# docker run -i -t centos /bin/bash

[root@f2595a1c0aae /]#

4.安装sshd服务

[root@f2595a1c0aae /]# yum install passwd openssl openssh-server -y

Loaded plugins: fastestmirror, ovl

base | 3.6 kB 00:00:00

extras | 3.4 kB 00:00:00

updates | 3.4 kB 00:00:00

(1/4): extras/7/x86_64/primary_db | 145 kB 00:00:01

(2/4): base/7/x86_64/group_gz | 156 kB 00:00:01

(3/4): updates/7/x86_64/primary_db | 4.6 MB 00:00:15

(4/4): base/7/x86_64/primary_db | 5.7 MB 00:00:23

Determining fastest mirrors

* base: mirrors.163.com

* extras: mirrors.163.com

* updates: mirrors.163.com

Package passwd-0.79-4.el7.x86_64 already installed and latest version

Resolving Dependencies

--> Running transaction check

---> Package openssh-server.x86_64 0:7.4p1-13.el7_4 will be installed

--> Processing Dependency: openssh = 7.4p1-13.el7_4 for package: openssh-server-7.4p1-13.el7_4.x86_64

--> Processing Dependency: fipscheck-lib(x86-64) >= 1.3.0 for package: openssh-server-7.4p1-13.el7_4.x86_64

--> Processing Dependency: libwrap.so.0()(64bit) for package: openssh-server-7.4p1-13.el7_4.x86_64

--> Processing Dependency: libfipscheck.so.1()(64bit) for package: openssh-server-7.4p1-13.el7_4.x86_64

---> Package openssl.x86_64 1:1.0.2k-8.el7 will be installed

--> Processing Dependency: make for package: 1:openssl-1.0.2k-8.el7.x86_64

--> Running transaction check

---> Package fipscheck-lib.x86_64 0:1.4.1-6.el7 will be installed

--> Processing Dependency: /usr/bin/fipscheck for package: fipscheck-lib-1.4.1-6.el7.x86_64

---> Package make.x86_64 1:3.82-23.el7 will be installed

---> Package openssh.x86_64 0:7.4p1-13.el7_4 will be installed

---> Package tcp_wrappers-libs.x86_64 0:7.6-77.el7 will be installed

--> Running transaction check

---> Package fipscheck.x86_64 0:1.4.1-6.el7 will be installed

--> Finished Dependency Resolution

Dependencies Resolved

====================================================================================================================

Package Arch Version Repository Size

====================================================================================================================

Installing:

openssh-server x86_64 7.4p1-13.el7_4 updates 458 k

openssl x86_64 1:1.0.2k-8.el7 base 492 k

Installing for dependencies:

fipscheck x86_64 1.4.1-6.el7 base 21 k

fipscheck-lib x86_64 1.4.1-6.el7 base 11 k

make x86_64 1:3.82-23.el7 base 420 k

openssh x86_64 7.4p1-13.el7_4 updates 509 k

tcp_wrappers-libs x86_64 7.6-77.el7 base 66 k

Transaction Summary

====================================================================================================================

Install 2 Packages (+5 Dependent packages)

Total download size: 1.9 M

Installed size: 4.9 M

Downloading packages:

warning: /var/cache/yum/x86_64/7/base/packages/fipscheck-lib-1.4.1-6.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY

Public key for fipscheck-lib-1.4.1-6.el7.x86_64.rpm is not installed

(1/7): fipscheck-lib-1.4.1-6.el7.x86_64.rpm | 11 kB 00:00:00

(2/7): fipscheck-1.4.1-6.el7.x86_64.rpm | 21 kB 00:00:00

Public key for openssh-7.4p1-13.el7_4.x86_64.rpm is not installed ] 206 kB/s | 681 kB 00:00:06 ETA

(3/7): openssh-7.4p1-13.el7_4.x86_64.rpm | 509 kB 00:00:01

(4/7): tcp_wrappers-libs-7.6-77.el7.x86_64.rpm | 66 kB 00:00:01

(5/7): openssl-1.0.2k-8.el7.x86_64.rpm | 492 kB 00:00:02

(6/7): openssh-server-7.4p1-13.el7_4.x86_64.rpm | 458 kB 00:00:03

(7/7): make-3.82-23.el7.x86_64.rpm | 420 kB 00:00:04

--------------------------------------------------------------------------------------------------------------------

Total 403 kB/s | 1.9 MB 00:00:04

Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

Importing GPG key 0xF4A80EB5:

Userid : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>"

Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5

Package : centos-release-7-4.1708.el7.centos.x86_64 (@CentOS)

From : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

Running transaction check

Running transaction test

Transaction test succeeded

Running transaction

Installing : fipscheck-1.4.1-6.el7.x86_64 1/7

Installing : fipscheck-lib-1.4.1-6.el7.x86_64 2/7

Installing : openssh-7.4p1-13.el7_4.x86_64 3/7

Installing : 1:make-3.82-23.el7.x86_64 4/7

Installing : tcp_wrappers-libs-7.6-77.el7.x86_64 5/7

Installing : openssh-server-7.4p1-13.el7_4.x86_64 6/7

Installing : 1:openssl-1.0.2k-8.el7.x86_64 7/7

Verifying : fipscheck-lib-1.4.1-6.el7.x86_64 1/7

Verifying : 1:openssl-1.0.2k-8.el7.x86_64 2/7

Verifying : tcp_wrappers-libs-7.6-77.el7.x86_64 3/7

Verifying : fipscheck-1.4.1-6.el7.x86_64 4/7

Verifying : openssh-7.4p1-13.el7_4.x86_64 5/7

Verifying : openssh-server-7.4p1-13.el7_4.x86_64 6/7

Verifying : 1:make-3.82-23.el7.x86_64

Installed:

openssh-server.x86_64 0:7.4p1-13.el7_4 openssl

Dependency Installed:

fipscheck.x86_64 0:1.4.1-6.el7 fipscheck-lib.x86_64 0:1.4.1-6.el7 make.x86_64 1:3.82-23.el7

Complete!

5.执行 /usr/sbin/sshd -D,报错：

[root@f2595a1c0aae /]# /usr/sbin/sshd -D

Could not load host key: /etc/ssh/ssh_host_rsa_key

Could not load host key: /etc/ssh/ssh_host_ecdsa_key

Could not load host key: /etc/ssh/ssh_host_ed25519_key

sshd: no hostkeys available -- exiting.

6.执行以下三条命令：

ssh-keygen -q -t rsa -b 2048 -f /etc/ssh/ssh_host_rsa_key -N ''

ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ''

ssh-keygen -t dsa -f /etc/ssh/ssh_host_ed25519_key -N ''

[root@f2595a1c0aae /]# ssh-keygen -q -t rsa -b 2048 -f /etc/ssh/ssh_host_rsa_key -N ''

[root@f2595a1c0aae /]# ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ''

[root@f2595a1c0aae /]# ssh-keygen -t dsa -f /etc/ssh/ssh_host_ed25519_key -N ''

Generating public/private dsa key pair.

Your identification has been saved in /etc/ssh/ssh_host_ed25519_key.

Your public key has been saved in /etc/ssh/ssh_host_ed25519_key.pub.

The key fingerprint is:

SHA256:U9G/RvoqxZtn/9oTzTwba8t8b3P2KoTYQ7nbC9aD7M4 root@f2595a1c0aae

The key's randomart image is:

+---[DSA 1024]----+

| .. |

| .. . |

| .o o |

| S+ + o +.|

| .o=o= o++|

| =*o= *|

| +o.=.*B=|

| .E.o*+X/|

+----[SHA256]-----+

7.vi /etc/ssh/sshd_config 修改配置文件

UsePAM yes 修改为 UsePAM no

UsePrivilegeSeparation sandbox 修改改为 UsePrivilegeSeparation no

8.修改密码passwd root

[root@f2595a1c0aae /]# passwd root

Changing password for user root.

New password:

BAD PASSWORD: The password is shorter than 8 characters

Retype new password:

passwd: all authentication tokens updated successfully.

9.exit退出容器

10.执行提交命令，生成镜像 docker commit -m "add sshd" -a "kehaojian" f2595a1c0aae sshd_centos

[root@HA2 kehj]# docker commit -m "add sshd" -a "kehaojian" f2595a1c0aae sshd_centos

sha256:0ece1cad37782006b4175fb6f7268aac206d8729b6a844eabdd999240e904f9a

11.执行docker images

[root@HA2 kehj]# docker images

REPOSITORY TAG IMAGE ID CREATED SIZE

sshd_centos latest 0ece1cad3778 8 seconds ago 293.3 MB

nginx-docker v1 20c4d11561d3 11 hours ago 451.1 MB

docker.io/nginx latest f895b3fb9e30 2 weeks ago 108.5 MB

docker.io/centos latest 3fa822599e10 3 weeks ago 203.5 MB

docker.io/ubuntu latest 747cb2d60bbe 11 weeks ago 122 MB

12.测试

[kehj@HA2 ~]$ ssh root@localhost -p 10022

The authenticity of host '[localhost]:10022 ([::1]:10022)' can't be established.

ECDSA key fingerprint is SHA256:wFHqfr8EPuT5cUla5cllCBf0HQ5GnTmZruj0LQI8VRg.

ECDSA key fingerprint is MD5:74:6a:da:84:64:35:50:78:c8:9a:38:de:45:f3:71:16.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '[localhost]:10022' (ECDSA) to the list of known hosts.

root@localhost's password:

[root@e14d9841c1e6 ~]#

本文转自gauyanm 51CTO博客，原文链接：http://blog.51cto.com/gauyanm/2055270，如需转载请自行联系原作者

微信关注我们

原文链接：https://yq.aliyun.com/articles/446788

转载内容版权归作者及来源网站所有！

低调大师中文资讯倾力打造互联网数据资讯、行业资源、电子商务、移动互联网、网络营销平台。持续更新报道IT业界、互联网、市场资讯、驱动更新,是最及时权威的产业资讯及硬件资讯报道平台。

Docker部署私有仓库

今天和大家聊聊Docker的私有仓库。前段时间啊在CentOS6.x上玩Docker的私有仓库，由于https认证的原因，一直没有能解决，最后听群上的一朋友说，换成CentOS 7试试，也别说，最后实验成功啦！所以我建议朋友在玩docker的私有仓库的时候，也能现在CentOS7.x系统上玩，确定对整个过程熟悉后，然后换成你熟悉的6.x的系统，这样也是一个循循渐进的过程吧！一、准备 1、地址规划 1 2 Docker私有仓库地址：192.168.0.109 Docker客户端地址：192.168.0.110 2、激活网卡 1 2 3 4 #vim/etc/sysconfig/network-scripts/ifcfg-eno16777728 修改此行 ONBOOT= yes #/etc/init.d/networkrestart 3、关闭本地防火墙并设置开机不自启动 1 2 #systemctlstopfirewalld.service #systemctldisablefirewalld.service 4、关闭本地selinux防火墙 1 2 3 #vi/etc/syscon...

2017-11-08

604

1、swarm 集群模式 imagename 本文转自aaron428 51CTO博客，原文链接http://blog.51cto.com/aaronsa/2062118：，如需转载请自行联系原作者

2017-11-08

568

资源下载

更多资源

优质分享App

近一个月的开发和优化，本站点的第一个app全新上线。该app采用极致压缩，本体才4.36MB。系统里面做了大量数据访问、缓存优化。方便用户在手机上查看文章。后续会推出HarmonyOS的适配版本。

Mario

马里奥是站在游戏界顶峰的超人气多面角色。马里奥靠吃蘑菇成长，特征是大鼻子、头戴帽子、身穿背带裤，还留着胡子。与他的双胞胎兄弟路易基一起，长年担任任天堂的招牌角色。

Nacos

Nacos /nɑ:kəʊs/ 是 Dynamic Naming and Configuration Service 的首字母简称，一个易于构建 AI Agent 应用的动态服务发现、配置管理和AI智能体管理平台。Nacos 致力于帮助您发现、配置和管理微服务及AI智能体应用。Nacos 提供了一组简单易用的特性集，帮助您快速实现动态服务发现、服务配置、服务元数据、流量管理。Nacos 帮助您更敏捷和容易地构建、交付和管理微服务平台。

Rocky Linux

Rocky Linux（中文名：洛基）是由Gregory Kurtzer于2020年12月发起的企业级Linux发行版，作为CentOS稳定版停止维护后与RHEL（Red Hat Enterprise Linux）完全兼容的开源替代方案，由社区拥有并管理，支持x86_64、aarch64等架构。其通过重新编译RHEL源代码提供长期稳定性，采用模块化包装和SELinux安全架构，默认包含GNOME桌面环境及XFS文件系统，支持十年生命周期更新。