538481c33c
* update to ssh V9.8.P1 to fix CVE-2024-6387 * update to ssh V9.8.P1 to fix CVE-2024-6387
44 lines
1.4 KiB
Docker
44 lines
1.4 KiB
Docker
FROM docker.io/golang:1.22-bookworm as builder
|
|
|
|
ARG VER=devel
|
|
ARG BUILDTAGS=""
|
|
ARG EXTERNAL="0"
|
|
|
|
ENV CGO_ENABLED=0
|
|
|
|
RUN mkdir -p /sshpiperd/plugins
|
|
WORKDIR /src
|
|
RUN --mount=target=/src,type=bind,source=. --mount=type=cache,target=/root/.cache/go-build if [ "$EXTERNAL" = "1" ]; then cp sshpiperd /sshpiperd; else go build -o /sshpiperd -ldflags "-X main.mainver=$VER" ./cmd/... ; fi
|
|
RUN --mount=target=/src,type=bind,source=. --mount=type=cache,target=/root/.cache/go-build if [ "$EXTERNAL" = "1" ]; then cp -r plugins /sshpiperd ; else go build -o /sshpiperd/plugins -tags "$BUILDTAGS" ./plugin/...; fi
|
|
ADD entrypoint.sh /sshpiperd
|
|
|
|
FROM builder as testrunner
|
|
RUN apt update && apt install -y autoconf automake libssl-dev libz-dev
|
|
|
|
RUN cd /tmp && \
|
|
curl -fsSL https://github.com/openssh/openssh-portable/archive/refs/tags/V_9_8_P1.tar.gz | tar xz && \
|
|
cd openssh-portable-V_9_8_P1 && \
|
|
autoreconf && \
|
|
./configure && \
|
|
make ssh && \
|
|
cp ssh /usr/bin/ssh-9.8.1p1
|
|
|
|
FROM docker.io/busybox
|
|
# LABEL maintainer="Boshi Lian<farmer1992@gmail.com>"
|
|
|
|
RUN mkdir /etc/ssh/
|
|
|
|
# Add user nobody with id 1
|
|
ARG USERID=1000
|
|
ARG GROUPID=1000
|
|
RUN addgroup -g $GROUPID -S sshpiperd && adduser -u $USERID -S sshpiperd -G sshpiperd
|
|
|
|
# Add execution rwx to user 1
|
|
RUN chown -R $USERID:$GROUPID /etc/ssh/
|
|
|
|
USER $USERID:$GROUPID
|
|
|
|
COPY --from=builder --chown=$USERID /sshpiperd/ /sshpiperd
|
|
EXPOSE 2222
|
|
|
|
ENTRYPOINT ["/sshpiperd/entrypoint.sh"]
|