openssh-server restricted to rsync 🐳 https://hub.docker.com/r/fphammerle/rsync-sshd

Fabian Peter Hammerle 61cfa3bf39 upgrade alpine base image to v3.15.0 including upgrade of openssh-server package to v8.8p1 and rsync package to v3.2.3-r5 (see below)		2 년 전
.github	aeba8a37eb build(deps): bump docker/setup-buildx-action from 1.5.1 to 1.6.0	3 년 전
CHANGELOG.md	9ac477ac89 added makefile to support image building, pushing & tagging	3 년 전
Dockerfile	f983d1a8bb upgrade alpine base image to v3.15.0 including upgrade of openssh-server package to v8.8p1 and rsync package to v3.2.3-r5 (see below)	2 년 전
Makefile	c820e72c7e makefile: fix image name	3 년 전
README.md	a3de54ab7e readme: added required capabilities	4 년 전
docker-compose.yml	b8fe5c6c3d added docker-compose.yml for testing	4 년 전
entrypoint.sh	74b7d04201 replace `passwd -u` to avoid empty passwords	5 년 전
openssh-package-log.url	f983d1a8bb upgrade alpine base image to v3.15.0 including upgrade of openssh-server package to v8.8p1 and rsync package to v3.2.3-r5 (see below)	2 년 전
openssh-release-notes.url	8a2ce05b08 upgrade openssh server package v8.6_p1-r{2->3} (CVE-2021-41617)	3 년 전
rsnapshot.conf.example	1f5a5417ab restrict ssh access via rrsync	5 년 전
rsync-package-log.url	f983d1a8bb upgrade alpine base image to v3.15.0 including upgrade of openssh-server package to v8.8p1 and rsync package to v3.2.3-r5 (see below)	2 년 전
sshd_config	1f5a5417ab restrict ssh access via rrsync	5 년 전

docker: openssh-server restricted to rsync 🐳

repo: https://github.com/fphammerle/docker-rsync-sshd

docker hub: https://hub.docker.com/r/fphammerle/rsync-sshd

SSH clients are restricted to rsync --server commands via rrsync.

rrsync prefixes /data to all paths (e.g., rsync ... host:/src /backup downloads /data/src).

example 1

$ docker run --name=rsync-sshd -p 2022:22 -e USERS=alice,bob -v rsync-data:/data:ro fphammerle/rsync-sshd
$ docker cp alice-keys rsync-sshd:/home/alice/.ssh/authorized_keys
$ docker cp bob-keys rsync-sshd:/home/bob/.ssh/authorized_keys

example 2

$ docker run --name rsync-sshd \
    --publish 2022:22 --env USERS=alice,bob \
    --volume accessible-data:/data:ro \
    --volume host-keys:/etc/ssh/host_keys \
    --volume alice-ssh-config:/home/alice/.ssh:ro \
    --volume bob-ssh-config:/home/bob/.ssh:ro \
    --init --rm \
    fphammerle/rsync-sshd
$ rsync -av --rsh='ssh -p 2022' alice@localhost:/source /target

required capabilities:

NET_BIND_SERVICE
SETGID
SETUID
SYS_CHROOT

README.md

docker: openssh-server restricted to rsync 🐳

example 1

example 2