forked from
tangled.org/knot-docker
Community maintained Docker config for the knot server
set no password over random hex
+4
-2
+4
-2
Dockerfile
+4
-2
Dockerfile
···
26
26
copy rootfs .
27
27
run chmod 755 /etc
28
28
run chmod -R 755 /etc/s6-overlay
29
-
run apk add --no-cache shadow s6-overlay execline openssl openssh git curl bash
29
+
run apk add --no-cache shadow s6-overlay execline openssh git curl bash
30
30
run groupadd -g $GID -f git
31
31
run useradd -u $UID -g $GID -d /home/git git
32
-
run openssl rand -hex 16 | passwd --stdin git
32
+
# setting the password to `*` disables password-based access without locking the
33
+
# account out of ssh: <https://unix.stackexchange.com/a/193131>
34
+
run usermod --password '*' git
33
35
run mkdir -p /home/git/repositories && chown -R git:git /home/git
34
36
copy --from=builder /usr/bin/knot /usr/bin
35
37
run mkdir /app && chown -R git:git /app