Compare commits
4 Commits
8427663d71
...
9e92254492
| Author | SHA1 | Date | |
|---|---|---|---|
| 9e92254492 | |||
| 3a5333330c | |||
| da9be91d51 | |||
| 9daa35178f |
@@ -4,10 +4,11 @@ FROM debian:bookworm-slim
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
# Update and install Swiss Army Knife tools
|
||||
RUN apt-get update && apt-get install -y curl wget git jq unzip tar vim nano python3 python3-pip python3-venv build-essential iputils-ping dnsutils net-tools nodejs npm ffmpeg openssh-server sudo && rm -rf /var/lib/apt/lists/*
|
||||
RUN apt-get update && apt-get install -y curl wget git jq unzip tar vim nano python3 python3-pip python3-venv build-essential iputils-ping dnsutils net-tools nodejs npm ffmpeg openssh-server ripgrep ncdu sudo && rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Install yq (binary release for latest version)
|
||||
RUN wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 -O /usr/bin/yq && chmod +x /usr/bin/yq
|
||||
RUN wget https://downloads-openshift-console.apps.lab.apilab.us/amd64/linux/oc.tar -O /tmp/oc.tar && tar -xvf /tmp/oc.tar -C /usr/bin/ && rm /tmp/oc.tar && chmod +x /usr/bin/oc
|
||||
|
||||
# Setup SSH directory & Config for OpenShift (Random UID support)
|
||||
RUN mkdir -p /var/run/sshd && chmod 775 /var/run/sshd
|
||||
@@ -36,4 +37,4 @@ USER claw
|
||||
|
||||
# Start SSH daemon
|
||||
# Fix: StrictModes no handles permissions, but chmod 600 helps sanity.
|
||||
CMD ["/bin/bash", "-c", "mkdir -p /data/ssh && if [ ! -f /data/ssh/ssh_host_rsa_key ]; then echo 'Generating persistent host keys...'; ssh-keygen -f /data/ssh/ssh_host_rsa_key -N '' -t rsa; ssh-keygen -f /data/ssh/ssh_host_ecdsa_key -N '' -t ecdsa; ssh-keygen -f /data/ssh/ssh_host_ed25519_key -N '' -t ed25519; fi && chmod 600 /data/ssh/ssh_host_*_key && /usr/sbin/sshd -D -f /etc/ssh/sshd_config"]
|
||||
CMD ["/bin/bash", "-c", "mkdir -p /data/ssh && if [ ! -f /data/ssh/ssh_host_rsa_key ]; then echo 'Generating persistent host keys...'; ssh-keygen -f /data/ssh/ssh_host_rsa_key -N '' -t rsa; ssh-keygen -f /data/ssh/ssh_host_ecdsa_key -N '' -t ecdsa; ssh-keygen -f /data/ssh/ssh_host_ed25519_key -N '' -t ed25519; fi && chmod 600 /data/ssh/ssh_host_*_key && /usr/sbin/sshd -D -f /etc/ssh/sshd_config"]
|
||||
|
||||
@@ -65,18 +65,21 @@ spec:
|
||||
name: data-volume
|
||||
- mountPath: /home/claw/.ssh
|
||||
name: ssh-working
|
||||
- mountPath: /home/claw/.kube
|
||||
resources:
|
||||
limits:
|
||||
memory: "2Gi"
|
||||
memory: "1Gi"
|
||||
cpu: "1000m"
|
||||
requests:
|
||||
memory: "512Mi"
|
||||
memory: "128Mi"
|
||||
cpu: "250m"
|
||||
securityContext:
|
||||
runAsUser: 1000
|
||||
runAsGroup: 1000
|
||||
fsGroup: 1000
|
||||
allowPrivilegeEscalation: true
|
||||
capabilities:
|
||||
add: ["CAP_AUDIT_WRITE"]
|
||||
volumes:
|
||||
- name: data-volume
|
||||
persistentVolumeClaim:
|
||||
@@ -84,6 +87,8 @@ spec:
|
||||
- name: ssh-keys-secret
|
||||
secret:
|
||||
secretName: clawdbox-ssh-keys
|
||||
defaultMode: 0600
|
||||
- name: kubeconfig-secret
|
||||
secret:
|
||||
secretName: kube
|
||||
- name: ssh-working
|
||||
emptyDir: {}
|
||||
|
||||
Reference in New Issue
Block a user