jgiannuzzi / docker-gitolite Goto Github PK

This command gives me an error.

docker run --rm -e SSH_KEY="$(cat ~/.ssh/id_rsa.pub)" -e SSH_KEY_NAME="$(whoami)" -v gitolite-sshkeys:/etc/ssh/keys -v gitolite-git:/var/lib/git jgiannuzzi/gitolite true

standard_init_linux.go:211: exec user process caused "exec format error"

When running trivy on this gitolite dockerhub image:

% docker run --rm -v /var/run/docker.sock:/var/run/docker.sock -v trivy-cache:/root/.cache/ aquasec/trivy i jgiannuzzi/gitolite
2021-07-30T21:31:51.732Z	INFO	Detected OS: alpine
2021-07-30T21:31:51.732Z	INFO	Detecting Alpine vulnerabilities...
2021-07-30T21:31:51.733Z	INFO	Number of language-specific files: 0
2021-07-30T21:31:51.733Z	WARN	This OS version is no longer supported by the distribution: alpine 3.10.1

[...]

It appears the base image alpine version (3.10) is not supported anymore by alpine (since 2021-05-01).

It would be safer to use a fresher alpine base image.

As far as I can tell {experiments, but no pointers to gitolite
documentation}, gitolite setup command overrides whatever
/var/lib/git/.gitolite.rc file was there, as such following
Dockerfile

FROM jgiannuzzi/gitolite
COPY gitolite.rc /var/lib/git/.gitolite.rc

does not work as intended. Could you please add option to provide
custom .gitolite.rc?

Using image 0fd0cb87b4cd, when I start the container I get the following errors in the logs and the container immediately exits:

/etc/ssh/sshd_config line 65: Unsupported option KerberosAuthentication
/etc/ssh/sshd_config line 71: Unsupported option GSSAPIAuthentication

I'm having a hard time debugging it. I've been running this thing for a while now with no issues, but it has been months since I've last pulled down an image. Anyone know what might be happening?

Hey there, thanks for building this. What's the for loop for? Why not just use the strongest elliptic curve encryption available?

If someone is using podman to run this image, don't forget to add the exec option when mounting the gitolite-git volume like this:

podman run -d --privileged --name gitolite -p 2200:22 -v gitolite-sshkeys:/etc/ssh/keys -v gitolite-git:/var/lib/git:exec jgiannuzzi/gitolite

Without this, all hooks will not work.

I have been trying to run this container from a docker-compose.yml file without success. It feels like I am close! But ultimately I get denied access over SSH.

Here is the file:

version: "3"
services:
  gitolite:
    image: jgiannuzzi/gitolite
    container_name: gitolite
    ports:
      - "22:22"
    environment:
      - SSH_KEY="$KEY"
      - SSH_KEY_NAME="$NAME"
    volumes:
      - gitolite-sshkeys:/etc/ssh/keys
      - gitolite-git:/var/lib/git
volumes:
  gitolite-sshkeys:
  gitolite-git:

$KEY and $NAME are replaced with the bash script:

KEY=$(cat ~/.ssh/id_rsa.pub) NAME=$(whoami) envsubst <docker-compose.ymt >docker-compose.yml

I am then denied access with the following error:

adam$ git clone git@localhost:gitolite-admin
Cloning into 'gitolite-admin'...
The authenticity of host 'localhost (::1)' can't be established.
ECDSA key fingerprint is SHA256:............
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'localhost' (ECDSA) to the list of known hosts.
git@localhost: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

Any ideas? Thanks!

i'm trying to debug an SSH authentication issue. How can I get server-side logs?