trashpanda001 / docker-alpine-sshd Goto Github PK

09:51:02 | ~ ❯ ssh root@localhost -p 2222 -o StrictHostKeyChecking=no -CD 1080
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:RSYTCdsrMjSufFwAtqtYRooKVig/UocrbEVwCq+8N0U.
Please contact your system administrator.
Add correct host key in /Users/tt/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in /Users/tt/.ssh/known_hosts:5
Password authentication is disabled to avoid man-in-the-middle attacks.
Keyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.
Port forwarding is disabled to avoid man-in-the-middle attacks.
Welcome to Alpine!

The Alpine Wiki contains a large amount of how-to guides and general
information about administrating Alpine systems.
See <http://wiki.alpinelinux.org>.

You can setup the system with the command: setup-alpine

You may change this message by editing /etc/motd.

debug1: permanently_set_uid: 0/0
812c378adb41:~#

sed -i s/#PermitRootLogin.*/PermitRootLogin\ yes/ /etc/ssh/sshd_config
sed -i s/#GatewayPorts.*/GatewayPorts\ yes/ /etc/ssh/sshd_config
sed -i s/#AllowTcpForwarding.*/AllowTcpForwarding\ yes/ /etc/ssh/sshd_config
sed -i s/#PermitTunnel.*/PermitTunnel\ yes/ /etc/ssh/sshd_config
sed -i s/#X11Forwarding.*/X11Forwarding\ yes/ /etc/ssh/sshd_config

812c378adb41:~# grep yes /etc/ssh/sshd_config
PermitRootLogin yes
#StrictModes yes
#PubkeyAuthentication yes
# Change to yes if you don't trust ~/.ssh/known_hosts for
#IgnoreRhosts yes
#PasswordAuthentication yes
#ChallengeResponseAuthentication yes
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#GSSAPICleanupCredentials yes
# Set this to 'yes' to enable PAM authentication, account processing,
#AllowAgentForwarding yes
AllowTcpForwarding yes
GatewayPorts yes
X11Forwarding yes
#X11UseLocalhost yes
#PermitTTY yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
PermitTunnel yes
#TcpRcvBufPoll yes