1

2

3

4

5

6

7

8

9

10

hr:centos7 hr$ docker pull centos:7

下载完后，查看本地资源库：

hr:centos7 hr$ docker images

REPOSITORY      TAG         IMAGE ID      CREATED       VIRTUAL SIZE

  centos        7          ce20c473cd8a    7 weeks ago     172.3 MB

运行容器

hr:centos7 hr$ docker run -i -t centos:7 /bin/bash

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

[root@b5926410fe60 /]# yum install passwd openssl openssh-server -y

启动sshd:

# /usr/sbin/sshd -D

这时报以下错误：

[root@ b5926410fe60 /]# /usr/sbin/sshd

Could not load host key: /etc/ssh/ssh_host_rsa_key

Could not load host key: /etc/ssh/ssh_host_ecdsa_key

Could not load host key: /etc/ssh/ssh_host_ed25519_key

执行以下命令解决：

[root@b5926410fe60 /]# ssh-keygen -q -t rsa -b 2048 -f /etc/ssh/ssh_host_rsa_key -N '' 

[root@b5926410fe60 /]# ssh-keygen -q -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ''

[root@b5926410fe60 /]# ssh-keygen -t dsa -f /etc/ssh/ssh_host_ed25519_key -N ''

然后，修改 /etc/ssh/sshd_config 配置信息：

UsePAM yes 改为 UsePAM no

UsePrivilegeSeparation sandbox 改为 UsePrivilegeSeparation no

[root@b5926410fe60 /]# sed -i "s/#UsePrivilegeSeparation.*/UsePrivilegeSeparation no/g" /etc/ssh/sshd_config

[root@b5926410fe60 /]# sed -i "s/UsePAM.*/UsePAM no/g" /etc/ssh/sshd_config

修改完后，重新启动sshd

[root@b5926410fe60 /]# /usr/sbin/sshd -D

1

2

3

4

5

6

7

[root@b5926410fe60 /]# ip addr ls eth0

84: eth0@if85: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP

  link/ether 02:42:ac:11:00:02 brd ff:ff:ff:ff:ff:ff

  inet 172.17.0.2/16 scope global eth0

    valid_lft forever preferred_lft forever

  inet6 fe80::42:acff:fe11:2/64 scope link

    valid_lft forever preferred_lft forever

1

2

3

4

5

hr:centos7 hr$ docker ps -all

CONTAINER ID IMAGE    COMMAND    CREATED       STATUS          PORTS   NAMES

b5926410fe60 centos:7  "/bin/bash" 4 minutes ago    Exited (0) 4 seconds ago      centos7ssh

hr:centos7 hr$ docker commit b5926410fe60 herong/centos7-ssh

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

--先删除之前的容器

hr:centos7 hr$ docker ps -all

CONTAINER ID    IMAGE   COMMAND       CREATED       STATUS           PORTS        NAMES

4122f818a741    herong/centos7-ssh:latest  "/usr/sbin/sshd"  13 seconds ago   Exited (0) 13 seconds ago            happy_mclean

hr:centos7 hr$ docker rm -f 4122f818a741

--基于新镜像运行容器

hr:centos7 hr$ docker run -d -p 10022:22 herong/centos7-ssh:latest /usr/sbin/sshd -D

--查看映射端口是否成功

hr:centos7 hr$ docker ps -all

CONTAINER ID    IMAGE   COMMAND        CREATED       STATUS       PORTS          NAMES

4966d35fe0a3    herong/centos7-ssh:latest  "/usr/sbin/sshd -D"  3 seconds ago    Up 3 seconds    0.0.0.0:10022->22/tcp  compassionate_kowalevski

hr:centos7 hr$ docker port 4966d35fe0a3

22/tcp -> 0.0.0.0:10022

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

w 如果宿主机是非linux操作系统，则需要通过docker-machine ip连到容器

-- 查看docker-machine Ip地址

hr:centos7 hr$ docker-machine ip default

192.168.99.100

--通过docker-machine ip 连接到容器，输入之前设置的密码即可登录成功

hr:centos7 hr$ ssh [email protected] -p 10022

The authenticity of host '[192.168.99.100]:10022 ([192.168.99.100]:10022)' can't be established.

ECDSA key fingerprint is SHA256:d3JNckcTVv1ASJlwv+IT/bJwlzMC4U1T/PmsKYIHMhQ.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added '[192.168.99.100]:10022' (ECDSA) to the list of known hosts.

[email protected]'s password:

[root@4966d35fe0a3 ~]# pwd

/root

w 如果宿主机是linux操作系统，则通过第4步查看到的ip地址连接

hr:centos7 hr$ ssh [email protected] -p 10022