Block a user
ssh-jumphost (latest)
Published 2026-02-06 23:40:10 +00:00 by etoth
Installation
docker pull git.etoth.dev/etoth/ssh-jumphost:latestsha256:01f0504ffa13d1f69680eb0acf85e2c73cec6a9e89283a439e4e1dae792c801e
Image Layers
| ADD alpine-minirootfs-3.20.9-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| RUN /bin/sh -c apk update && apk add --no-cache openssh fail2ban iptables bash busybox-extras tini rsyslog # buildkit |
| RUN /bin/sh -c adduser -D -s /bin/false bastion # buildkit |
| RUN /bin/sh -c mkdir -p /var/run/sshd /etc/ssh/keys /home/bastion/.ssh && chmod 700 /home/bastion/.ssh && chown -R bastion:bastion /home/bastion # buildkit |
| COPY sshd_config /etc/ssh/sshd_config # buildkit |
| COPY jail.local /etc/fail2ban/jail.local # buildkit |
| RUN /bin/sh -c touch /var/log/auth.log /var/log/fail2ban.log && chmod 644 /var/log/auth.log /var/log/fail2ban.log # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| RUN /bin/sh -c chmod +x /usr/local/bin/docker-entrypoint.sh # buildkit |
| EXPOSE [22/tcp] |
| ENTRYPOINT ["/sbin/tini" "--"] |
| CMD ["/usr/local/bin/docker-entrypoint.sh"] |