一、构建SSHD镜像
创建目录,编写Dockerfile文件
[root@docker opt]# mkdir sshd
[root@docker opt]# cd sshd/
[root@docker sshd]# vim Dockerfile
FROM centos:7
MAINTAINER The Centos Project <sshd-centos>
RUN yum -y update
RUN yum -y install openssh* net-tools lsof telnet passwd
RUN echo '123456' | passwd --stdin root
RUN sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
RUN ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
RUN sed -i '/^session\s\+required\s\+pam_loginuid.so/s/^/#/' /etc/pam.d/sshd
RUN mkdir -p /root/.ssh && chown root.root /root && chmod 700 /root/.ssh
EXPOSE 22
CMD ["/usr/sbin/sshd","-D"]
生成镜像
[root@docker sshd]# docker build -t sshd:new .
启动容器,随机端口号
[root@docker sshd]# docker run -d -P sshd:new
[root@docker sshd]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7c684db2b2ab sshd:new "/usr/sbin/sshd -D" 16 seconds ago Up 15 seconds 0.0.0.0:32769->22/tcp eager_taussig
登录测试
[root@docker sshd]# ssh localhost -p 32769
[root@7c684db2b2ab ~]# ls
anaconda-ks.cfg
二、构建systemctl镜像
创建目录,编写Dockerfile文件
[root@docker opt]# mkdir systemctl
[root@docker opt]# cd systemctl/
[root@docker systemctl]# vim Dockerfile
FROM sshd:new
ENV container docker
RUN (cd /lib/systemd/system/sysinit.target.wants/;for i in *;do [ $i == \
systemd-tmpfiles-setup.service] || rm -f $i;done); \
rm -f /lib/systemd/system/multi-user.target.wants/*; \
rm -f /etc/systemd/system/*.wants/*; \
rm -f /lib/systemd/system/local-fs.target.wants/*; \
rm -f /lib/systemd/system/sockets.target.wants/*udev*; \
rm -f /lib/systemd/system/sockets.target.wants/*initctl*; \
rm -f /lib/systemd/system/basic.target.wants/*; \
rm -f /lib/systemd/system/anaconda.target.wants/*;
VOLUME ["/sys/fs/cgroup"]
CMD ["/usr/sbin/init"]
生成镜像
[root@docker systemctl]# docker build -t systemd:new
创建容器
[root@docker systemctl]# docker run --privileged -ti -v /sys/fs/cgroup:/sys/fs/
cgroup:ro systemd:new /sbin/init &
[1] 22513
[root@docker systemctl]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
ca53a9fe6ae8 systemd:new "/sbin/init" 10 seconds ago Up 8 seconds 22/tcp mystifying_meitner
进入容器进行测试
[root@docker systemctl]# docker exec -it ca53a9fe6ae8 /bin/bash
[r