chenjl/canal
1
0
Fork 0
mirror of https://github.com/alibaba/canal.git synced 2026-11-04 00:30:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

fixed dockerfile security

Browse Source
This commit is contained in:
jianghang.loujh
2026-04-02 14:44:03 +08:00
parent 69a06dba09
commit 09382c6b91
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docker/base/amd64/Dockerfile
View File

@@ -23,7 +23,6 @@ RUN \
RUN \ RUN \
/usr/bin/ln -fs /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \ /usr/bin/ln -fs /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
echo 'root:Hello1234' | chpasswd && \
groupadd -r admin && useradd -g admin admin && \ groupadd -r admin && useradd -g admin admin && \
yum install -y man && \ yum install -y man && \
yum install -y dstat && \ yum install -y dstat && \
@@ -39,6 +38,8 @@ RUN \
ssh-keygen -q -N "" -t rsa -f /etc/ssh/ssh_host_rsa_key && \ ssh-keygen -q -N "" -t rsa -f /etc/ssh/ssh_host_rsa_key && \
sed -ri 's/session required pam_loginuid.so/#session required pam_loginuid.so/g' /etc/pam.d/sshd && \ sed -ri 's/session required pam_loginuid.so/#session required pam_loginuid.so/g' /etc/pam.d/sshd && \
sed -i -e 's/^#Port 22$/Port 2222/' /etc/ssh/sshd_config && \ sed -i -e 's/^#Port 22$/Port 2222/' /etc/ssh/sshd_config && \
sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config && \
sed -i 's/^#\?PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config && \
mkdir -p /root/.ssh && chown root.root /root && chmod 700 /root/.ssh && \ mkdir -p /root/.ssh && chown root.root /root && chmod 700 /root/.ssh && \
yum install -y cronie && \ yum install -y cronie && \
sed -i '/session required pam_loginuid.so/d' /etc/pam.d/crond && \ sed -i '/session required pam_loginuid.so/d' /etc/pam.d/crond && \

3
docker/base/arm64/Dockerfile
View File

@@ -23,7 +23,6 @@ RUN \
RUN \ RUN \
/usr/bin/ln -fs /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \ /usr/bin/ln -fs /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
echo 'root:Hello1234' | chpasswd && \
groupadd -r admin && useradd -g admin admin && \ groupadd -r admin && useradd -g admin admin && \
yum install -y man && \ yum install -y man && \
yum install -y dstat && \ yum install -y dstat && \
@@ -39,6 +38,8 @@ RUN \
ssh-keygen -q -N "" -t rsa -f /etc/ssh/ssh_host_rsa_key && \ ssh-keygen -q -N "" -t rsa -f /etc/ssh/ssh_host_rsa_key && \
sed -ri 's/session required pam_loginuid.so/#session required pam_loginuid.so/g' /etc/pam.d/sshd && \ sed -ri 's/session required pam_loginuid.so/#session required pam_loginuid.so/g' /etc/pam.d/sshd && \
sed -i -e 's/^#Port 22$/Port 2222/' /etc/ssh/sshd_config && \ sed -i -e 's/^#Port 22$/Port 2222/' /etc/ssh/sshd_config && \
sed -i 's/^#\?PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config && \
sed -i 's/^#\?PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config && \
mkdir -p /root/.ssh && chown root.root /root && chmod 700 /root/.ssh && \ mkdir -p /root/.ssh && chown root.root /root && chmod 700 /root/.ssh && \
yum install -y cronie && \ yum install -y cronie && \
sed -i '/session required pam_loginuid.so/d' /etc/pam.d/crond && \ sed -i '/session required pam_loginuid.so/d' /etc/pam.d/crond && \