zenermerps/docker-borgserver
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

* New base-image: debian:buster-slim

Browse source 
* Smaller Image Footprint (169MB -> 116MB)
* Remove support for the hmac-ripemd160 MAC (OpenSSH 7.9p1)
This commit is contained in:
nold 2018-11-12 15:04:21 +01:00
parent 5e5031e828
commit ae2f6c90ef
2 changed files with 11 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
Dockerfile
View file

@ -2,7 +2,7 @@
# Dockerfile to build borgbackup server images # Dockerfile to build borgbackup server images
# Based on Debian # Based on Debian
############################################################ ############################################################
FROM debian:latest FROM debian:buster-slim
# Volume for SSH-Keys # Volume for SSH-Keys
VOLUME /sshkeys VOLUME /sshkeys
@ -12,12 +12,15 @@ VOLUME /backup
ENV DEBIAN_FRONTEND noninteractive ENV DEBIAN_FRONTEND noninteractive
RUN apt-get update && apt-get -y --no-install-recommends install borgbackup openssh-server && apt-get clean RUN apt-get update && apt-get -y --no-install-recommends install \
RUN useradd -s /bin/bash -m borg ; \ borgbackup openssh-server && apt-get clean && \
mkdir /home/borg/.ssh && chmod 700 /home/borg/.ssh && chown borg: /home/borg/.ssh ; \ useradd -s /bin/bash -m borg && \
mkdir /run/sshd mkdir /home/borg/.ssh && \
RUN rm -f /etc/ssh/ssh_host*key* ; \ chmod 700 /home/borg/.ssh && \
rm -rf /var/lib/apt/lists/* /var/tmp/* /tmp/* chown borg: /home/borg/.ssh && \
mkdir /run/sshd && \
rm -f /etc/ssh/ssh_host*key* && \
rm -rf /var/lib/apt/lists/* /var/tmp/* /tmp/*
COPY ./data/run.sh /run.sh COPY ./data/run.sh /run.sh
COPY ./data/sshd_config /etc/ssh/sshd_config COPY ./data/sshd_config /etc/ssh/sshd_config

3
data/sshd_config
View file

@ -17,7 +17,7 @@ LogLevel INFO
#LogLevel DEBUG #LogLevel DEBUG
Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160 MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1
@ -29,6 +29,5 @@ AllowTcpForwarding no
X11Forwarding no X11Forwarding no
PermitTTY no PermitTTY no
PrintMotd no PrintMotd no
UsePrivilegeSeparation sandbox
PermitTunnel no PermitTunnel no
Subsystem sftp /bin/false Subsystem sftp /bin/false