mirror of
https://github.com/SebastianWendel/nixpkgs.git
synced 2024-10-01 17:40:20 +02:00
0d506aa712
On the host, you can run $ socat unix:<path-to-container>/var/lib/login.socket -,echo=0,raw to get a login prompt. So this allows logging in even if the container has no SSH access enabled. You can also do $ socat unix:<path-to-container>/var/lib/root-shell.socket - to get a plain root shell. (This socket is only accessible by root, obviously.) This makes it easy to execute commands in the container, e.g. $ echo reboot | socat unix:<path-to-container>/var/lib/root-shell.socket -
57 lines
1.6 KiB
Nix
57 lines
1.6 KiB
Nix
{ config, pkgs, ... }:
|
||
|
||
{
|
||
|
||
config = {
|
||
|
||
# Provide a login prompt on /var/lib/login.socket. On the host,
|
||
# you can connect to it by running ‘socat
|
||
# unix:<path-to-container>/var/lib/login.socket -,echo=0,raw’.
|
||
systemd.sockets.login =
|
||
{ description = "Login Socket";
|
||
wantedBy = [ "sockets.target" ];
|
||
socketConfig =
|
||
{ ListenStream = "/var/lib/login.socket";
|
||
SocketMode = "0600"; # only root can connect, obviously
|
||
Accept = true;
|
||
};
|
||
};
|
||
|
||
systemd.services."login@" =
|
||
{ description = "Login %i";
|
||
environment.TERM = "linux";
|
||
serviceConfig =
|
||
{ Type = "simple";
|
||
StandardInput = "socket";
|
||
ExecStart = "${pkgs.socat}/bin/socat -t0 - exec:${pkgs.shadow}/bin/login,pty,setsid,setpgid,stderr,ctty";
|
||
TimeoutStopSec = 1; # FIXME
|
||
};
|
||
};
|
||
|
||
# Provide a non-interactive login root shell on
|
||
# /var/lib/root-shell.socket. On the host, you can connect to it
|
||
# by running ‘socat unix:<path-to-container>/var/lib/root-shell.socket -’.
|
||
systemd.sockets.root-shell =
|
||
{ description = "Root Shell Socket";
|
||
wantedBy = [ "sockets.target" ];
|
||
socketConfig =
|
||
{ ListenStream = "/var/lib/root-shell.socket";
|
||
SocketMode = "0666";
|
||
Accept = true;
|
||
};
|
||
};
|
||
|
||
systemd.services."root-shell@" =
|
||
{ description = "Root Shell %i";
|
||
serviceConfig =
|
||
{ Type = "simple";
|
||
StandardInput = "socket";
|
||
ExecStart = "${pkgs.bash}/bin/bash --login";
|
||
TimeoutStopSec = 1; # FIXME
|
||
};
|
||
};
|
||
|
||
};
|
||
|
||
}
|