alpine-autossh hasn't been tested nor reviewed. Forks and issues are welcome.
alpine-autossh is a small lightweight (8.5MB) image that attempts to provide a secure way to establish an SSH Tunnel without including your keys in the image itself or linking to the host .
Server A is running a VPN with a service on localhost:8080. Server X, Y and Z needs access to the service on server A.
A container (alpine-autossh) makes a persistent SSH connection to Server A, and exposes port 8080 locally.
Servers X, Y and Z can now connect to the container and use it as proxy.
Using alpine-autossh is a 3 step process:
- Create a network
- Starting the container
- Configuring the container.
Create a docker network. We will run alpine-autossh in this network.
$ docker network create mylink
9266804c6b92d3c290438af5928e58e42b53677e47eface589a008a86ea0f65d
$ docker network ls
NETWORK ID NAME DRIVER
......
9266804c6b92 mylink bridge
......
Now, let's use a docker-compose file to start it up.
The command should be in the form user@server followed by any option SSH may accept. In this case, a tunnel.
The network option declares the default network as external, so it expect mylink to exist.
version: '2'
services:
link:
image: ctroncoso/alpine-autossh
container_name: link
restart: always
command: [email protected] -L 0.0.0.0:8080:localhost:8080
environment:
- "AUTOSSH_PORT=0"
expose:
- "8080"
networks:
default:
external:
name: mylinkLet's start it.
$ docker-compose up
Creating alpineautossh_link_1
Attaching to alpineautossh_link_1
link_1 | Please copy key files to container's /payload folder
link_1 | i.e.: docker cp id_rsa this_container:/payload/
link_1 | Please copy key files to container's /payload folder
link_1 | i.e.: docker cp id_rsa this_container:/payload/
The container is now expecting the private key.
Just copy the private key to the payload folder of the container.
docker cp ~/.ssh/id_rsa $(docker-compose ps -q link):/payloadlink_1 | Please copy key files to container's /payload folder
link_1 | i.e.: docker cp id_rsa this_container:/payload/
link_1 | Moving keys...
link_1 | Everything OK. Launching.
link_1 | autossh [email protected] -L 0.0.0.0:8080:localhost:8080 -N
link_1 | 2016/04/23 10:55:02 autossh[1]: short poll time: adjusting net timeouts to 5000
link_1 | 2016/04/23 10:55:02 autossh[1]: starting ssh (count 1)
link_1 | 2016/04/23 10:55:02 autossh[1]: ssh child pid is 17
link_1 | Warning: Permanently added 'vpn.myserver.com,nnn.nnn.nnn.nnn' (RSA) to the list of known hosts.
- Work on README
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent