minimum2scp/baseimage

minimum2scp/baseimage 镜像说明

镜像概述和主要用途

该镜像基于 https://github.com/minimum2scp/dockerfiles/tree/master/debian 构建，默认运行 /opt/init-wrapper/sbin/init 初始化脚本，集成sysvinit初始化系统及多个基础守护进程，适用于需要同时运行SSH服务、日志管理和定时任务的Docker环境，可作为基础镜像构建依赖这些服务的应用。

核心功能和特性

• 初始化流程：默认执行 /opt/init-wrapper/sbin/init，依次运行 /opt/init-wrapper/pre-init.d 目录下的脚本，替换 sysvinit-core 包提供的 /sbin/init，启动 sshd、rsyslogd、cron 守护进程，最后通过 /etc/rc.local 运行 /opt/init-wrapper/post-init.d 目录下的脚本。
• 本地化支持：支持 ja_JP.UTF-8 locale（默认locale为C）。
• 时区设置：默认时区为 Asia/Tokyo。
• 系统工具：预装 etckeeper，用于跟踪 /etc 目录的变更。

使用场景和适用范围

• 需要在Docker容器中运行SSH服务以进行远程管理的场景。
• 需同时运行日志收集（rsyslogd）和定时任务（cron）的应用环境。
• 作为基础镜像构建需要多后台服务支持的应用容器。

使用方法和配置说明

启动容器

使用以下命令启动容器，映射SSH端口（示例映射到主机2222端口）：

bash
docker run -d -p 2222:22 minimum2scp/baseimage:latest

SSH登录容器

直接通过容器IP登录

bash
ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no debian@<容器IP地址>

通过映射端口登录

bash
ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -p 2222 debian@localhost

登录相关配置

• 可用用户：debian
• 默认密码：debian
  • 修改密码：设置环境变量 USER_PASSWORD（详见 /opt/init-wrapper/pre-init.d/04-chpass-and-sshkey）
  • 设置SSH公钥：设置环境变量 USER_SSH_KEY_URI，将公钥写入 ~/.ssh/authorized_keys（详见同上脚本）
• 用户权限：debian 可无密码使用 sudo 命令
• 用户ID信息：uid=2000(debian) gid=2000(debian) groups=2000(debian),4(adm),27(sudo)

进程列表

容器运行时的典型进程结构如下：

UID        PID  PPID  C STIME TTY      STAT   TIME CMD
root         1     0  0 01:52 ?        Ss     0:00 init [2]
root        37     1  0 01:52 ?        Ssl    0:00 /usr/sbin/rsyslogd
root        62     1  0 01:52 ?        Ss     0:00 /usr/sbin/cron
root        73     1  0 01:52 ?        Ss     0:00 /usr/sbin/sshd
root        80    73  0 01:52 ?        Ss     0:00  \_ sshd: debian [priv]
debian      82    80  0 01:52 ?        S      0:00      \_ sshd: debian@pts/0
debian      83    82  0 01:52 pts/0    Ss     0:00          \_ -bash
debian      89    83  0 01:52 pts/0    R+     0:00              \_ ps -ef fww

开放端口

• TCP/22：sshd服务端口

预装软件包

容器预装以下主要软件包（完整列表见下方）：

• 系统工具：apt、coreutils、dpkg、sysvinit-core
• 网络服务：openssh-server、rsyslog、cron
• 开发工具：git、curl、vim-tiny
• 其他工具：etckeeper、sudo、zsh

完整预装软件包列表：

ii   adduser                 3.118                           all    add and remove users and groups
ii   apt                     2.0.0                           amd64  commandline package manager
ii   base-files              11                              amd64  Debian base system miscellaneous files
ii   base-passwd             3.5.47                          amd64  Debian base system master password and group files
ii   bash                    5.0-6                           amd64  GNU Bourne Again SHell
ii   bsdmainutils            11.1.2+b1                       amd64  collection of more utilities from FreeBSD
ii   bsdutils                1:2.34-0.1                      amd64  basic utilities from 4.4BSD-Lite
ii   ca-certificates         20190110                        all    Common CA certificates
ii   coreutils               8.30-3+b1                       amd64  GNU core utilities
ii   cron                    3.0pl1-136                      amd64  process scheduling daemon
ii   curl                    7.68.0-1                        amd64  command line tool for transferring data with URL syntax
ii   dash                    0.5.10.2-6                      amd64  POSIX-compliant shell
ii   debconf                 1.5.73                          all    Debian configuration management system
ii   debian-archive-keyring  2019.1                          all    GnuPG archive keys of the Debian archive
ii   debianutils             4.9.1                           amd64  Miscellaneous utilities specific to Debian
ii   diffutils               1:3.7-3                         amd64  File comparison utilities
ii   dpkg                    1.19.7                          amd64  Debian package management system
ii   e2fsprogs               1.45.5-2                        amd64  ext2/ext3/ext4 file system utilities
ii   etckeeper               1.18.12-1.1                     all    store /etc in git, mercurial, bzr or darcs
ii   fdisk                   2.34-0.1                        amd64  collection of partitioning utilities
ii   findutils               4.7.0-1                         amd64  utilities for finding files--find, xargs
ii   gcc-10-base             10-20200312-2                   amd64  GCC, the GNU Compiler Collection (base package)
ii   gcc-9-base              9.3.0-5                         amd64  GCC, the GNU Compiler Collection (base package)
ii   git                     1:2.26.0~rc2-1                  amd64  fast, scalable, distributed revision control system
ii   git-man                 1:2.26.0~rc2-1                  all    fast, scalable, distributed revision control system (manual pages)
ii   gpgv                    2.2.19-3                        amd64  GNU privacy guard - signature verification tool
ii   grep                    3.4-1                           amd64  GNU grep, egrep and fgrep
ii   groff-base              1.22.4-4                        amd64  GNU troff text-formatting system (base system components)
ii   gzip                    1.10-2                          amd64  GNU compression utilities
ii   hostname                3.23                            amd64  utility to set/show the host name or domain name
ii   inetutils-ping          2:1.9.4-11                      amd64  ICMP echo tool
ii   init-system-helpers     1.57                            all    helper tools for all init systems
ii   initscripts             2.96-3                          all    scripts for initializing and shutting down the system
ii   insserv                 1.21.0-1                        amd64  boot sequence organizer using LSB init.d script dependency information
ii   iproute2                5.5.0-1                         amd64  networking and traffic control tools
ii   libacl1                 2.2.53-6                        amd64  access control list - shared library
ii   libapt-pkg6.0           2.0.0                           amd64  package management runtime library
ii   libattr1                1:2.4.48-5                      amd64  extended attribute handling - shared library
ii   libaudit-common         1:2.8.5-2                       all    Dynamic library for security auditing - common files
ii   libaudit1               1:2.8.5-2+b1                    amd64  Dynamic library for security auditing
ii   libblkid1               2.34-0.1                        amd64  block device ID library
ii   libbrotli1              1.0.7-6                         amd64  library implementing brotli encoder and decoder (shared libraries)
ii   libbsd0                 0.10.0-1                        amd64  utility functions from BSD systems - shared library
ii   libbz2-1.0              1.0.8-2                         amd64  high-quality block-sorting file compressor library - runtime
ii   libc-bin                2.30-2                          amd64  GNU C Library: Binaries
ii   libc-l10n               2.30-2                          all    GNU C Library: localization files
ii   libc6                   2.30-2                          amd64  GNU C Library: Shared libraries
ii   libcap-ng0              0.7.9-2.1+b2                    amd64  An alternate POSIX capabilities library
ii   libcap2                 1:2.32-1                        amd64  POSIX 1003.1e capabilities (library)
ii   libcap2-bin             1:2.32-1                        amd64  POSIX 1003.1e capabilities (utilities)
ii   libcbor0                0.5.0+dfsg-2                    amd64  library for parsing and generating CBOR (RFC 7049)
ii   libcom-err2             1.45.5-2                        amd64  common error description library
ii   libcrypt1               1:4.4.15-1                      amd64  libcrypt shared library
ii   libcurl3-gnutls         7.68.0-1                        amd64  easy-to-use client-side URL transfer library (GnuTLS flavour)
ii   libcurl4                7.68.0-1                        amd64  easy-to-use client-side URL transfer library (OpenSSL flavour)
ii   libdb5.3                5.3.28+dfsg1-0.6                amd64  Berkeley v5.3 Database Libraries [runtime]
ii   libdebconfclient0       0.251                           amd64  Debian Configuration Management System (C-implementation library)
ii   libedit2                3.1-20191231-1                  amd64  BSD editline and history libraries
ii   libelf1                 0.176-1.1                       amd64  library to read and write ELF files
ii   liberror-perl           0.***-1                       all    Perl module for error/exception handling in an OO-ish way
ii   libestr0                0.1.10-2.1+b1                   amd64  Helper functions for handling strings (lib)
ii   libexpat1               2.2.9-1                         amd64  XML parsing C library - runtime library
ii   libext2fs2              1.45.5-2                        amd64  ext2/ext3/ext4 file system libraries
ii   libfastjson4            0.99.8-2                        amd64  fast json library for C
ii   libfdisk1               2.34-0.1                        amd64  fdisk partitioning library
ii   libffi7                 3.3-3                           amd64  Foreign Function Interface library runtime
ii   libfido2-1              1.3.1-1                         amd64  library for generating and verifying FIDO 2.0 objects
ii   libgcc-s1               10-20200312-2                   amd64  GCC support library
ii   libgcrypt20             1.8.5-5                         amd64  LGPL *** library - runtime library
ii   libgdbm-compat4         1.18.1-5                        amd64  GNU dbm database routines (legacy support runtime version) 
ii   libgdbm6                1.18.1-5                        amd64  GNU dbm database routines (runtime version) 
ii   libgmp10                2:6.2.0+dfsg-4                  amd64  Multiprecision arithmetic library
ii   libgnutls30             3.6.12-2                        amd64  GNU TLS library - main runtime library
ii   libgpg-error0           1.37-1                          amd64  GnuPG development runtime library
ii   libgssapi-krb5-2        1.17-6                          amd64  MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
ii   libhogweed5             3.5.1+really3.5.1-2             amd64  low level ***graphic library (public-key ***s)
ii   libidn11                1.33-2.2                        amd64  GNU Libidn library, implementation of IETF IDN specifications
ii   libidn2-0               2.3.0-1                         amd64  Internationalized domain names (IDNA2008/TR46) library
ii   libk5***3            1.17-6                          amd64  MIT Kerberos runtime libraries - *** Library
ii   libkeyutils1            1.6.1-2                         amd64  Linux Key Management Utilities (library)
ii   libkrb5-3               1.17-6                          amd64  MIT Kerberos runtime libraries
ii   libkrb5support0         1.17-6                          amd64  MIT Kerberos runtime libraries - Support library
ii   libldap-2.4-2           2.4.49+dfsg-2                   amd64  OpenLDAP libraries
ii   libldap-common          2.4.49+dfsg-2                   all    OpenLDAP common files for libraries
ii   liblognorm5             2.0.5-1.1                       amd64  log normalizing library
ii   liblz4-1                1.9.2-2                         amd64  Fast LZ compression algorithm library - runtime
ii   liblzma5                5.2.4-1+b1                      amd64  XZ-format compression library
ii   libmnl0                 1.0.4-2+b1                      amd64  minimalistic Netlink communication library
ii   libmount1               2.34-0.1                        amd64  device mounting library
ii   libncurses6             6.2-1                           amd64  shared libraries for terminal handling
ii   libncursesw6            6.2-1                           amd64  shared libraries for terminal handling (wide character support)
ii   libnettle7              3.5.1+really3.5.1-2             amd64  low level ***graphic library (symmetric and one-way ***s)
ii   libnewt0.52             0.52.21-4                       amd64  Not Erik's Windowing Toolkit - text mode windowing with slang
ii   libnghttp2-14           1.40.0-1                        amd64  library implementing HTTP/2 protocol (shared library)
ii   libp11-kit0             0.23.20-1                       amd64  library for loading and coordinating access to PKCS#11 modules - runtime
ii   libpam-modules          1.3.1-5                         amd64  Pluggable Authentication