Connecting to distroless docker container via SSH

[apiening]

I can connect with the SSH feature integrated into teleport to my nodes, where the teleport package is installed (mostly .deb) just fine.

On a VyOS node where I cannot install software on the system itself, I ran the teleport-distroless container. It connects to my cluster, but when I try to connect to the SSH Server via teleport, I get the message Failed to launch: fork/exec /sbin/nologin: no such file or directory. and the shell disconnects.

I added the capability sys-admin to the container and made it run with uid and gid = 0, but the error remains the same.

I wonder if it is even possible to connect to a node running the teleport-distroless container, since it is still running in an isolated manner.

[stevenGravy]

Hi @apiening , it is not intended to provide SSH service. You may want to consider an app service that can connect to other TCP or web apps via Teleport app service within that environment. Otherwise as the getting started shows. you can use another image that allows for shells like Ubuntu.

Please see https://github.com/GoogleContainerTools/distroless explaining the architecture decisions behind distroless.

[apiening]

Thank you @stevenGravy, this makes absolut sense.