efrecon / rsshd

Docker container for reverse sshd and keeping connections to remote NATed servers

Dear Reader 📖

• 🗞 I seldom update my blog
• 🛠 I often create or update private OSS projects here, at bitbucket and gitlab
• 💰 I sometimes create or update corporate OSS projects, formerly at Yanzi, HealthIntegrator and Mitigram, now at GpsGate
• 💖 I have a special love for the misunderstood Tcl
• 🐚 Lately I have focused on POSIX shell to better target the embedded and devops spaces
• 🐳 I have a gist that, from a running container, prints out the command-line docker command to create it.
• 🐋 I have a script to rebase a slim Docker image on top of another one without changing its original configuration.
• 🏢 I am always open for opportunities in the beautiful Stockholm, or remote. But I am enjoying my time at GpsGate.

rsshd's Issues

EOL error

When trying to run the container, I got this error message: standard_init_linux.go:190: exec user process caused "exec format error"
According to https://stackoverflow.com/questions/51508150/standard-init-linux-go190-exec-user-process-caused-no-such-file-or-directory this could be a EOL issue.

Please expose more/all ports

Can you expose the ports 1001-65500 in your container?

This because I wanted to publish ports 33000 until 33100 for my container (ports in the range of 10000-10100) are used elsewhere. So I passed this to the container: -p 33300-33400:10000-10100

This works, but it gets very confusing:
I would start with this.

ssh -fN -R 10000:localhost:22 -p 2222 [email protected]

But I need to connect with this:
ssh -p 33300 user@localhost

That's really confusing. And exposing all the ports and just specify a few of them using -p will solve this problem.

I can't authenticate with the password set

Am I doing it wrong?

I am installing it with:

docker run -d --restart=always -p 2222:22 --name rsshd -p 22000-22100:22000-22100 -e PASSWORD=verysecret -v /volume1/docker/rsshd/keys:/etc/ssh/keys -v /volume1/docker/rsshd/clients:/root/.ssh efrecon/rsshd

This is my stdout/stderr capture:

date	stream	content
2018-11-27 20:48:11	stderr	Connection closed by 172.17.0.1 port 41322 [preauth]
2018-11-27 20:48:11	stderr	Failed password for root from 172.17.0.1 port 41322 ssh2
2018-11-27 20:48:10	stderr	Failed password for root from 172.17.0.1 port 41322 ssh2
2018-11-27 20:48:08	stderr	Failed password for root from 172.17.0.1 port 41322 ssh2
2018-11-27 20:48:06	stderr	Connection closed by 172.17.0.1 port 41321 [preauth]
2018-11-27 20:48:05	stderr	Connection closed by 172.17.0.1 port 41316 [preauth]
2018-11-27 20:47:26	stderr	Connection closed by 172.17.0.1 port 41085 [preauth]
2018-11-27 20:47:23	stderr	Failed password for root from 172.17.0.1 port 41085 ssh2
2018-11-27 20:47:21	stderr	Failed password for root from 172.17.0.1 port 41085 ssh2
2018-11-27 20:47:17	stderr	Connection closed by 172.17.0.1 port 41080 [preauth]
2018-11-27 20:47:17	stderr	Connection closed by 172.17.0.1 port 41078 [preauth]
2018-11-27 20:46:52	stderr	Server listening on :: port 22.
2018-11-27 20:46:52	stderr	Server listening on 0.0.0.0 port 22.
2018-11-27 20:46:52	stdout	Password for 'root' changed

Allow to set debug level of sshd

I would like to to specify debug level through a -e DEBUG_LEVEL=<level>

Ideally it would:

• Behave as is now when absent or -e DEBUG_LEVEL=0
• Pass -d to sshd when -e DEBUG_LEVEL=1
• Pass -d -d to sshd when -e DEBUG_LEVEL=2
• Pass -d -d -d to sshd when -e DEBUG_LEVEL>=3

-e SSHD_PARAMS=<extra_commandline_args>
Could be a possibility too!