ContainerSSH Configuration

[KRI3G]

• Configure test backend: docker in gateway

• Create config.yaml for containerssh instance in gateway, outlining OIDC auth

• Create ssh host keys for containerssh instance in gateway

• Create Containerfile for containerssh instance, mounting config, ssh keys, and specifying (docker test in gateway) backend

• Set host-level CPU and memory limits for containers

• Disable SSH password logins (OIDC only)

• Test sample container launch using static config

[KRI3G]

Make sure to build the student container image before running the main containerssh image

[KRI3G]

enabling the podman.socket from a non gui user might require this sudo machinectl shell [someuser]@ to pass some env variables. Might come in useful if a dedicated containerssh user is created for use in the host