无法从Docker主机SSH到Docker容器

Question

无法从Docker主机SSH到Docker容器

4

我已经在OpenStack上创建了一个Docker主机，并启动了一个映射端口22到Docker主机端口的容器。请参照此链接：link 但是，我仍无法从Docker主机连接到容器，出现以下错误：

$> ssh -v root@172.17.0.9 -p 32775

OpenSSH_6.6.1, OpenSSL 1.0.1e-fips 11 Feb 2013
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 56: Applying options for *
debug1: Connecting to 172.17.0.9 [172.17.0.9] port 32775.
debug1: connect to address 172.17.0.9 port 32775: Connection refused
ssh: connect to host 172.17.0.9 port 32775: Connection refused

当我在docker run命令中使用-P选项时，默认添加了iptables规则。它的样子如下：

$> iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
DOCKER     all  --  0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type LOCAL

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
DOCKER     all  --  0.0.0.0/0           !127.0.0.0/8          ADDRTYPE match dst-type LOCAL

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  172.17.0.0/16        0.0.0.0/0
MASQUERADE  tcp  --  172.17.0.3           172.17.0.3           tcp dpt:80
MASQUERADE  tcp  --  172.17.0.9           172.17.0.9           tcp dpt:22

Chain DOCKER (2 references)
target     prot opt source               destination
RETURN     all  --  0.0.0.0/0            0.0.0.0/0
DNAT       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:9090 to:172.17.0.3:80
DNAT       tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:32775 to:172.17.0.9:22

容器看起来像：

$> docker ps -a
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS                     PORTS                   NAMES
46111bb52063        sshns               "/usr/sbin/sshd -D"      9 hours ago         Up 3 hours                 0.0.0.0:32776->22/tcp   TestSSHcontainer

我希望只有我自己可以使用ssh。我知道docker exec选项的存在。我尝试了将sshd_config和ssh_config文件中的PermitRootLogin设置为yes，但都没有成功。

bash-4.2# /usr/sbin/sshd -Dd
WARNING: 'UsePAM no' is not supported in Red Hat Enterprise Linux and may cause several problems.
debug1: sshd version OpenSSH_6.6.1, OpenSSL 1.0.1e-fips 11 Feb 2013
debug1: key_parse_private2: missing begin marker
debug1: read PEM private key done: type RSA
debug1: private host key: #0 type 1 RSA
debug1: key_parse_private2: missing begin marker
debug1: read PEM private key done: type ECDSA
debug1: private host key: #1 type 3 ECDSA
debug1: private host key: #2 type 4 ED25519
debug1: rexec_argv[0]='/usr/sbin/sshd'
debug1: rexec_argv[1]='-Dd'
Set /proc/self/oom_score_adj from 0 to -1000
debug1: Bind to port 22 on ::.
Bind to port 22 on :: failed: Address already in use.
debug1: Bind to port 22 on 0.0.0.0.
Bind to port 22 on 0.0.0.0 failed: Address already in use.
Cannot bind any address.

bash-4.2# netstat -anp | grep 22
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -
tcp6       0      0 :::22                   :::*                    LISTEN      -
bash-4.2# ps -eaf | grep ssh
root         1     0  0 19:17 ?        00:00:00 /usr/sbin/sshd -D
root        26    16  0 22:58 ?        00:00:00 grep ssh

还有什么我需要补充的吗？

- Lucky Tyagi

1个回答

网页内容由stack overflow 提供, 点击上面的

可以查看英文原文，
原文链接

- shizhz · Accepted Answer

您正在使用容器的 IP，但是使用容器的 主机端口映射。请尝试以下两种方法之一：ssh -v root@172.17.0.9 或 ssh -v root@localhost -p <port_mapping_on_host>（您的 docker ps -a 显示您的端口映射在主机上为 32776）。