Skip to content

Apply regreSSHion mitigation #225

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jul 8, 2024
Merged

Apply regreSSHion mitigation #225

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
890e21a
[skip ci] apply regreSSHion mitigation
Jul 8, 2024
aaf39c2
[skip ci] ensure to not completely overwrite config
Jul 8, 2024
5a99237
Update Dockerfile
Jul 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion preset/deep-learning/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -421,7 +421,8 @@ RUN apt-get install -y --no-install-recommends --fix-missing \
/etc/ssh/ssh_host_*_key.pub && \
rm -rf /var/lib/apt/lists/*

RUN mkdir -p /var/run/sshd
RUN mkdir -p /var/run/sshd && \
echo 'LoginGraceTime 0' >> /etc/ssh/sshd_config

# https://github.com/openucx/ucx/issues/4742#issuecomment-584059909
ENV UCX_TLS=ud,sm,self
Expand Down
2 changes: 2 additions & 0 deletions pytorch/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -134,6 +134,8 @@ RUN echo 'HostKey /etc/ssh/ssh_host_dsa_key' > /var/run/sshd_config && \
echo '## Enable DEBUG log. You can ignore this but this may help you debug any issue while enabling SSHD for the first time' > /var/run/sshd_config && \
echo 'LogLevel DEBUG3' > /var/run/sshd_config && \
echo 'UsePAM yes' > /var/run/sshd_config && \
echo 'LoginGraceTime 0' >> /var/run/sshd_config && \
echo 'LoginGraceTime 0' >> /etc/ssh/sshd_config && \
echo 'Subsystem sftp /usr/lib/openssh/sftp-server' > /var/run/sshd_config

RUN mkdir -p /licensing
Expand Down
3 changes: 2 additions & 1 deletion tensorflow/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -106,7 +106,8 @@ ENV OMPI_ALLOW_RUN_AS_ROOT_CONFIRM=1
ENV OMPI_MCA_tl_tcp_if_exclude="lo,docker0"

# Install OpenSSH for MPI to communicate between containers
RUN mkdir -p /var/run/sshd
RUN mkdir -p /var/run/sshd && \
echo 'LoginGraceTime 0' >> /etc/ssh/sshd_config

# Install Horovod
ARG HOROVOD_WITH_TENSORFLOW=1
Expand Down
1 change: 1 addition & 0 deletions workflows/charts/huggingface-llm/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,6 +56,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends --fix-missing \
RUN mkdir -p /var/run/sshd && \
cat /etc/ssh/ssh_config | grep -v StrictHostKeyChecking > /etc/ssh/ssh_config.new && \
echo " StrictHostKeyChecking no" >> /etc/ssh/ssh_config.new && \
echo 'LoginGraceTime 0' >> /etc/ssh/sshd_config && \
mv /etc/ssh/ssh_config.new /etc/ssh/ssh_config

COPY scripts /workspace/scripts/
Expand Down