tudorclincu/jumpbox repository overview

⁠Jumpbox Docker Image

This Docker image provides a lightweight, RHEL-based environment with an OpenSSH server and a non-root user setup. It supports secure password management via Docker secrets with fallback to environment variables. The image is based on Red Hat Universal Base Image (UBI 8) and is subject to Red Hat’s End User License Agreement (EULA).

⁠Features

• Red Hat Universal Base Image (UBI 8) as the base.
• OpenSSH server installed and running.
• Non-root user (user) with passwordless sudo access.
• Secure password management with Docker secrets and fallback to environment variables.

⁠Usage

⁠Run the Docker Container

You can run the container and set passwords via environment variables or Docker secrets.

⁠Using Environment Variables

To set the user password using an environment variable:

docker run --rm -e SSH_PASSWORD=YourSecurePassword -p 220:22 jumpbox:latest

If no password is provided, the default password for root is set to Docker!, and a randomly generated password for the user account will be displayed at startup.

⁠Using Docker Secrets

For secure password management, you can use Docker secrets:

1. Create the secret:

   echo "YourSecurePassword" | docker secret create ssh_password -
   

   Copy

2. Run the container with the secret:

   docker service create --name jumpbox --secret ssh_password -p 220:22 jumpbox:latest
   

   Copy

⁠SSH Access

Once the container is running, you can SSH into it using the user account:

ssh user@localhost -p 220

The user has passwordless sudo access:

sudo <command>

⁠Environment Variables

• SSH_PASSWORD: (Optional) Specifies the root password. Defaults to Docker! if not provided.
• USERNAME: The name of the non-root user. Defaults to user.

⁠Ports

• 22: Exposes the SSH service on port 22. Map this to any host port using Docker's -p option.

⁠Licensing Information

This Docker image is based on Red Hat Universal Base Image (UBI 8), and the use of the base image is governed by Red Hat’s End User License Agreement (EULA). You are free to distribute and use this image, but official Red Hat support is only available with a valid subscription.

⁠Key Licensing Considerations:

• The UBI images are freely distributable and usable, but they are still subject to Red Hat's EULA.
• If you require Red Hat support or access to RHEL-specific packages and updates, a Red Hat subscription is required.
• Modifications to the base image are allowed, but you must follow Red Hat's guidelines, especially regarding trademarks and logos.

For more information, please refer to:

• Red Hat Universal Base Image FAQ⁠
• Red Hat EULA⁠