Do not run ssh within containers

Details

http://blog.docker.com/2014/06/why-you-dont-need-to-run-sshd-in-docker/

Solution

Uninstall SSH server from the container and use nsenter or any other commands such as docker exec or docker attach to interact with the container instance.
docker exec –interactive –tty $INSTANCE_ID sh
OR
docker attach $INSTANCE_ID
Impact-
None.
Default Value-
By default, SSH server is not running inside the container. Only one process per container is allowed.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles