ContainerSSH: SSH Into Ephemeral Containers
Shriira Press
An SSH server that hands every connection its own freshly launched container — and decides, per user, what that container should be.
Welcome to ContainerSSH: SSH Into Ephemeral Containers.
ContainerSSH is a CNCF Sandbox project that reimagines what happens when someone types ssh user@host. Instead of dropping the user onto a fixed, shared machine, ContainerSSH launches a brand-new container — in Kubernetes, Docker, or Podman — for that single connection, transparently places the user inside it, and tears it down when they disconnect. Authentication and configuration are not baked into a static file; they are answered live by webhooks you control, so each user can land in a different image with a different backend, different environment, and different limits. This book walks you through the whole system. It opens with the problem ContainerSSH solves and the idea of the throwaway shell, then follows a connection end to end through its four-step flow. Separate chapters cover the authentication and authorization webhooks, the configuration server and per-user dynamic backends, the Docker, Kubernetes, and SSH-proxy backends, and the audit logging that records every keystroke. A closing chapter brings it together with honeypots, lab platforms, secure production access, and operational guidance.
This title is part of the ShriIra library and is free to read in full, right here — our small contribution to making world-class knowledge easy to reach.
A note on reading it: open the Contents menu at the top of the reader to jump between chapters, use the Aa menu to set a comfortable text size, theme (light, sepia, or night), and single- or two-page layout. Your place is saved automatically, so you can always pick up where you left off.
We hope it serves you well.
— Shriira Press