blax-software/docker-bastion

Commit Graph

Author	SHA1	Message	Date
Fabian @ Blax Software	a9e02398eb	I README: bind mounts under ./docker-data/, no named volumes Named volumes get wiped by 'docker compose down -v' — that command is in too many people's muscle memory for ssh host keys to live behind it. Bind-mount /etc/ssh/keys to ./docker-data/bastion-*/keys instead, matching the laravel-workkit §6 convention.	2026-05-28 10:56:37 +02:00
Fabian @ Blax Software	86b8966130	A initial docker-bastion image Minimal SSH bastion (alpine + openssh-server + docker-cli) that authenticates by key and runs exactly one preconfigured command (FORCE_COMMAND) per session. authorized_keys can be merged from both a host-mounted source and a repo-mounted source. Host keys persist via /etc/ssh/keys volume; docker socket group membership is aligned at boot.	2026-05-28 10:50:06 +02:00

Author

SHA1

Message

Date

Fabian @ Blax Software

a9e02398eb

I README: bind mounts under ./docker-data/, no named volumes

Named volumes get wiped by 'docker compose down -v' — that command
is in too many people's muscle memory for ssh host keys to live
behind it. Bind-mount /etc/ssh/keys to ./docker-data/bastion-*/keys
instead, matching the laravel-workkit §6 convention.

2026-05-28 10:56:37 +02:00

Fabian @ Blax Software

86b8966130

A initial docker-bastion image

Minimal SSH bastion (alpine + openssh-server + docker-cli) that
authenticates by key and runs exactly one preconfigured command
(FORCE_COMMAND) per session. authorized_keys can be merged from
both a host-mounted source and a repo-mounted source. Host keys
persist via /etc/ssh/keys volume; docker socket group membership
is aligned at boot.

2026-05-28 10:50:06 +02:00

2 Commits All Branches Search

2 Commits

All Branches