blob: 92da5814074fe387b401385da229ed17fe6551a6 [file] [log] [blame]
Mohammed Naser564caa82025-01-18 15:49:44 -05001# SPDX-FileCopyrightText: © 2025 VEXXHOST, Inc.
2# SPDX-License-Identifier: GPL-3.0-or-later
Mohammed Naser30004232025-02-20 16:43:21 -05003# Atmosphere-Rebuild-Time: 2025-02-20T21:42:46Z
Mohammed Naser37694382024-04-02 21:11:31 -04004
Mohammed Naser564caa82025-01-18 15:49:44 -05005FROM openstack-runtime
Mohammed Naserda994232024-04-13 12:34:01 -04006RUN <<EOF bash -xe
7apt-get update -qq
8apt-get install -qq -y --no-install-recommends \
Oleksandr K.e244adc2025-01-06 11:59:52 -08009 iproute2 \
Mohammed Naserda994232024-04-13 12:34:01 -040010 openssh-server \
11 openssh-client
12EOF
13RUN <<EOF bash -xe
14chown -R nova: /etc/ssh
15mkdir /var/run/sshd
16chmod 0755 /var/run/sshd
17EOF
Mohammed Naser0c779092024-06-05 10:35:00 -040018COPY <<EOF /etc/ssh/sshd_config.d/00-hardening.conf
19Ciphers aes256-ctr,aes192-ctr
20MACs hmac-sha2-512,hmac-sha2-256
21KexAlgorithms diffie-hellman-group-exchange-sha256
22HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
23MaxAuthTries 3
24EOF