Skip to content

Commit

Permalink
adding multiple ssh support to arch flist
Browse files Browse the repository at this point in the history
  • Loading branch information
PeterNashaat committed Jun 27, 2024
1 parent c551ac2 commit 6f2657d
Show file tree
Hide file tree
Showing 3 changed files with 2 additions and 9 deletions.
7 changes: 1 addition & 6 deletions tfgrid3/arch_mycelium/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM archlinux:latest
FROM archlinux:base-20240101.0.204074

Check failure

Code scanning / Trivy

Image user should not be 'root' High

Artifact: tfgrid3/arch_mycelium/Dockerfile
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002

# Update system and install packages
RUN pacman -Syu --noconfirm && \
Expand All @@ -16,11 +16,6 @@ COPY scripts/ufw.sh /usr/local/bin/
# Adding zinit config files
ADD zinit /etc/zinit/

# Install latest mycelium
RUN mycelium_version=$(curl -s https://api.github.com/repos/threefoldtech/mycelium/releases/latest | grep 'tag_name' | cut -d '"' -f 4 ) && \
wget "https://github.com/threefoldtech/mycelium/releases/download/${mycelium_version}/mycelium-x86_64-unknown-linux-musl.tar.gz" && \
tar -xzf mycelium-x86_64-unknown-linux-musl.tar.gz -C /usr/local/bin/

# Cleaning up
RUN pacman -Scc --noconfirm

Expand Down
1 change: 0 additions & 1 deletion tfgrid3/arch_mycelium/zinit/ssh_config.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,5 @@ exec: /bin/sh -eux -c "
chmod 600 /etc/ssh/*;
touch ~/.ssh/authorized_keys;
chmod 600 ~/.ssh/authorized_keys;
echo $SSH_KEY > /root/.ssh/authorized_keys;
echo 'ssh configured'"
oneshot: true
3 changes: 1 addition & 2 deletions tfgrid3/arch_mycelium/zinit/sshd.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
exec: /bin/sh -c " set -x ;
/usr/sbin/sshd;"
exec: /usr/sbin/sshd -D
after:
- ssh_config

0 comments on commit 6f2657d

Please sign in to comment.