Comment on SSH through Tailscale sidecar container?
thegreekgeek@midwest.social 2 months agoOpe sorry, right now I just have the serve config doing a redirect of port 22, however when I try to SSH in I get rejected by tailscale ACL. Says there’s no user named git.
If I followed the steps for the vanilla docker setup I’d add a git user to the host and softlink the host authorized_keys file to the gogs container’s version, as well as add a shim script to forward the command into the container using the docker exec command, but I’d rather not do that by mucking about in the sidecar if there’s a better way. The tailscale universal docker mod for linuxserver.io says they have ssh access for their containers but as far as I can tell it just pops in the --ssh flag in tailscale up.
just_another_person@lemmy.world 2 months ago
If it’s reaponding about the git user, then it’s an auth failure. That’s about all I could tell you without some logs.
thegreekgeek@midwest.social 2 months ago
Yeah and I figured that was the case. I’m just trying to figure out the best practice for my use case would be as I’d rather not have to build a new container. Also I’ve included the vvverbose output of the SSH attempt below.
just_another_person@lemmy.world 2 months ago
You’ve got a lot of errors in there, and it’s hard to tell which may be the culprit. I’m going to guess your keys can’t be read. I’d go back through the setup steps and make sure your PUBLIC key is setup properly for the git user.
thegreekgeek@midwest.social 2 months ago
Well that’s the thing, there’s no git user. I’m trying to directly ssh into the gogs container through the tailscale sidecar container via the tailnet, so I’m not going through the host machine. I’m just trying to see if there’s a way I can do it that’s a bit less fiddly than having to rebuild the container with the right user and whatnot.