| vexxhost-bot | a62d931 | 2024-06-01 21:13:59 +0200 | [diff] [blame] | 1 | # SPDX-License-Identifier: Apache-2.0 |
| vexxhost-bot | 4a8f091 | 2024-06-28 22:34:23 +0200 | [diff] [blame] | 2 | # Atmosphere-Rebuild-Time: 2024-06-28T12:14:26Z |
| Mohammed Naser | 3769438 | 2024-04-02 21:11:31 -0400 | [diff] [blame] | 3 | |
| Mohammed Naser | aa212e6 | 2025-01-15 16:49:44 -0500 | [diff] [blame] | 4 | ARG REGISTRY |
| Mohammed Naser | 19c6c8a | 2024-04-18 01:47:10 -0400 | [diff] [blame] | 5 | ARG RELEASE |
| 6 | |
| Mohammed Naser | aa212e6 | 2025-01-15 16:49:44 -0500 | [diff] [blame] | 7 | FROM ${REGISTRY}/openstack-runtime:${RELEASE} |
| Mohammed Naser | d28fbaf | 2024-04-08 17:15:00 -0400 | [diff] [blame] | 8 | RUN <<EOF bash -xe |
| 9 | apt-get update -qq |
| 10 | apt-get install -qq -y --no-install-recommends \ |
| vexxhost-bot | da7ae3f | 2025-01-08 02:38:24 -0500 | [diff] [blame] | 11 | iproute2 \ |
| Mohammed Naser | d28fbaf | 2024-04-08 17:15:00 -0400 | [diff] [blame] | 12 | openssh-server \ |
| 13 | openssh-client |
| 14 | EOF |
| 15 | RUN <<EOF bash -xe |
| 16 | chown -R nova: /etc/ssh |
| 17 | mkdir /var/run/sshd |
| 18 | chmod 0755 /var/run/sshd |
| 19 | EOF |
| vexxhost-bot | 410f511 | 2024-06-05 20:52:28 +0200 | [diff] [blame] | 20 | COPY <<EOF /etc/ssh/sshd_config.d/00-hardening.conf |
| 21 | Ciphers aes256-ctr,aes192-ctr |
| 22 | MACs hmac-sha2-512,hmac-sha2-256 |
| 23 | KexAlgorithms diffie-hellman-group-exchange-sha256 |
| 24 | HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521 |
| 25 | MaxAuthTries 3 |
| 26 | EOF |