k8s-mgmt-pod/k8s-mgmt-pod (sha256:a05f1c23a7e383cc7a0b92ba17ad77ad3ce4ec8b5ba736d13db13f1908bc4258)

Published 2026-06-29 07:15:10 +00:00 by michael in michael/k8s-mgmt-pod

Pull the image from the command line:

docker pull git.alcatrash.net/michael/k8s-mgmt-pod/k8s-mgmt-pod@sha256:a05f1c23a7e383cc7a0b92ba17ad77ad3ce4ec8b5ba736d13db13f1908bc4258

Digest

sha256:a05f1c23a7e383cc7a0b92ba17ad77ad3ce4ec8b5ba736d13db13f1908bc4258

For more information on the Container registry, see the documentation.

Kubernetes management container with lfk and SSH access

# debian.sh --arch 'amd64' out/ 'trixie' '@1782172800'

ARG LFK_VERSION=0.14.15

ARG KUBECTL_VERSION=1.36.2

ARG HELM_VERSION=3.21.2

ARG K9S_VERSION=0.51.0

ARG OIDC_LOGIN_VERSION=1.34.0

ENV DEBIAN_FRONTEND=noninteractive WEB_SSH_PORT=3000 WEBSSH2_LISTEN_PORT=3001 WEBSSH2_SSH_HOST=127.0.0.1 WEBSSH2_SSH_PORT=2222 SSH_PORT=2222 WEBSSH2_HEADER_TEXT=k8s-mgmt-pod WEBSSH2_SSH_HOSTKEY_ENABLED=false

COPY /usr/local /usr/local # buildkit

COPY /opt/webssh2 /opt/webssh2 # buildkit

RUN |5 LFK_VERSION=0.14.15 KUBECTL_VERSION=1.36.2 HELM_VERSION=3.21.2 K9S_VERSION=0.51.0 OIDC_LOGIN_VERSION=1.34.0 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends bash-completion ca-certificates curl unzip tar nginx-light netcat-openbsd openssh-client openssh-server openssl sudo tini && rm -rf /var/lib/apt/lists/* && mkdir -p /var/run/sshd /var/lib/k8s-mgmt-pod /etc/ssh/sshd_config.d && useradd --create-home --shell /bin/bash admin && useradd --create-home --shell /bin/bash user && printf 'admin ALL=(ALL) NOPASSWD:ALL\n' > /etc/sudoers.d/90-admin-nopasswd && chmod 0440 /etc/sudoers.d/90-admin-nopasswd && curl -fsSLo "/tmp/lfk_${LFK_VERSION}_linux_amd64.deb" "https://github.com/janosmiko/lfk/releases/download/v${LFK_VERSION}/lfk_${LFK_VERSION}_linux_amd64.deb" && curl -fsSLo /tmp/lfk.checksums "https://github.com/janosmiko/lfk/releases/download/v${LFK_VERSION}/checksums.txt" && cd /tmp && grep " lfk_${LFK_VERSION}_linux_amd64.deb$" /tmp/lfk.checksums | sha256sum -c - && dpkg -i "/tmp/lfk_${LFK_VERSION}_linux_amd64.deb" && rm -f "/tmp/lfk_${LFK_VERSION}_linux_amd64.deb" /tmp/lfk.checksums && curl -fsSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && curl -fsSLo /tmp/kubectl.sha256 "https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256" && echo "$(cat /tmp/kubectl.sha256) /usr/local/bin/kubectl" | sha256sum -c - && chmod 0755 /usr/local/bin/kubectl && curl -fsSLo "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" "https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz" && curl -fsSLo "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum" "https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum" && echo "$(awk '{print $1}' /tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum) /tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" | sha256sum -c - && tar -xzf "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" -C /tmp && install -m 0755 /tmp/linux-amd64/helm /usr/local/bin/helm && curl -fsSLo "/tmp/k9s_Linux_amd64.tar.gz" "https://github.com/derailed/k9s/releases/download/v${K9S_VERSION}/k9s_Linux_amd64.tar.gz" && tar -xzf "/tmp/k9s_Linux_amd64.tar.gz" -C /tmp && install -m 0755 /tmp/k9s /usr/local/bin/k9s && curl -fsSLo "/tmp/kubelogin_linux_amd64.zip" "https://github.com/int128/kubelogin/releases/download/v${OIDC_LOGIN_VERSION}/kubelogin_linux_amd64.zip" && curl -fsSLo "/tmp/kubelogin_linux_amd64.zip.sha256" "https://github.com/int128/kubelogin/releases/download/v${OIDC_LOGIN_VERSION}/kubelogin_linux_amd64.zip.sha256" && sed 's#\*kubelogin_linux_amd64.zip$#*/tmp/kubelogin_linux_amd64.zip#' /tmp/kubelogin_linux_amd64.zip.sha256 | sha256sum -c - && unzip -p /tmp/kubelogin_linux_amd64.zip kubelogin > /usr/local/bin/kubectl-oidc_login && chmod 0755 /usr/local/bin/kubectl-oidc_login && mkdir -p /etc/bash_completion.d && kubectl completion bash > /etc/bash_completion.d/kubectl && helm completion bash > /etc/bash_completion.d/helm && chmod 0644 /etc/bash_completion.d/kubectl /etc/bash_completion.d/helm && rm -f /tmp/kubectl.sha256 && rm -rf /tmp/linux-amd64 && rm -f "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum" /tmp/k9s /tmp/README.md /tmp/LICENSE /tmp/kubelogin_linux_amd64.zip /tmp/kubelogin_linux_amd64.zip.sha256 /tmp/k9s_Linux_amd64.tar.gz && rm -f /etc/ssh/ssh_host_* && apt-get clean # buildkit

COPY docker/sshd/10-lfk-base.conf /etc/ssh/sshd_config.d/10-lfk-base.conf # buildkit

COPY docker/nginx/webssh.conf /etc/nginx/conf.d/webssh.conf # buildkit

COPY docker/profile/20-k8s-tools-completion.sh /etc/profile.d/20-k8s-tools-completion.sh # buildkit

COPY docker/motd /etc/motd # buildkit

COPY entrypoint.sh /usr/local/bin/entrypoint.sh # buildkit

RUN |5 LFK_VERSION=0.14.15 KUBECTL_VERSION=1.36.2 HELM_VERSION=3.21.2 K9S_VERSION=0.51.0 OIDC_LOGIN_VERSION=1.34.0 /bin/sh -c chmod 0755 /usr/local/bin/entrypoint.sh && chmod 0644 /etc/profile.d/20-k8s-tools-completion.sh # buildkit

EXPOSE [2222/tcp 3000/tcp]

HEALTHCHECK {Test:[CMD-SHELL nc -z 127.0.0.1 "${SSH_PORT:-2222}" || exit 1] Interval:30s Timeout:5s StartPeriod:15s StartInterval:0s Retries:3}

ENTRYPOINT ["/usr/bin/tini" "--" "/usr/local/bin/entrypoint.sh"]

Key	Value
org.opencontainers.image.created	2026-06-29T07:14:36Z
org.opencontainers.image.description	Kubernetes management container with lfk and SSH access
org.opencontainers.image.revision	b6f7d1e1b7a6256d2668ab902f4bac33b3549200
org.opencontainers.image.source	https://git.alcatrash.net/michael/k8s-mgmt-pod
org.opencontainers.image.title	k8s-mgmt-pod
org.opencontainers.image.url	https://git.alcatrash.net/michael/k8s-mgmt-pod
org.opencontainers.image.version	20260629-b6f7d1e