Skip to content

Q: Is it possible to configure exclusive single-user access to containers? #21

Description

@smktpd

Hello.
Is it possible to configure exclusive single-user access to containers?
Suppose I'd like to invite users to work in their personal containers. Just to avoid possible confusion, let's call such users 'guests'.

  1. A guest shouldn't be able to ssh to the host, they should be able to ssh only into the container.
  2. I'd like each container have an owner and let them and only them be able to auth into the container. So each container is owned by only 1 guest (but a guest may own multiple containers).
  3. Each container's image is identical, they have some built-in generic user, whose name is the same in each container. Guests log-in as that user.
  4. Each guest has their own ssh key.

So, basically, I need a mapping of ssh-keys. which should be tied to specific containers.

It is acceptable to make guests remember which port to connect to in order to get into specific container, but I'd rather let them rely on your system where a guest can specify instance-name right in the ssh connection string.

Does ssh2incus allow such a scenario of use?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions