k8s-mgmt-pod/k8s-mgmt-pod (sha256:f958982c0dc95bcf16a3882f257aa18e7e67d676991da047118a797c3b96a44b)

Published 2026-06-23 13:08:44 +00:00 by michael in michael/k8s-mgmt-pod

Pull the image from the command line:

docker pull git.alcatrash.net/michael/k8s-mgmt-pod/k8s-mgmt-pod@sha256:f958982c0dc95bcf16a3882f257aa18e7e67d676991da047118a797c3b96a44b

Digest

sha256:f958982c0dc95bcf16a3882f257aa18e7e67d676991da047118a797c3b96a44b

For more information on the Container registry, see the documentation.

Kubernetes management container with lfk and SSH access

# debian.sh --arch 'amd64' out/ 'bookworm' '@1781049600'

ARG LFK_VERSION=0.14.9

ARG KUBECTL_VERSION=1.31.0

ARG HELM_VERSION=3.16.2

ARG K9S_VERSION=0.40.10

ARG WEBSSH2_VERSION=5.0.1

ENV DEBIAN_FRONTEND=noninteractive WEB_SSH_PORT=3000 WEBSSH2_LISTEN_PORT=3001 WEBSSH2_SSH_HOST=127.0.0.1 WEBSSH2_SSH_PORT=22 WEBSSH2_HEADER_TEXT=k8s-mgmt-pod WEBSSH2_SSH_HOSTKEY_ENABLED=false

COPY /usr/local /usr/local # buildkit

COPY /opt/webssh2 /opt/webssh2 # buildkit

RUN |5 LFK_VERSION=0.14.9 KUBECTL_VERSION=1.31.0 HELM_VERSION=3.16.2 K9S_VERSION=0.40.10 WEBSSH2_VERSION=5.0.1 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends bash-completion ca-certificates curl tar nginx-light netcat-openbsd openssh-client openssh-server openssl sudo tini && rm -rf /var/lib/apt/lists/* && mkdir -p /var/run/sshd /var/lib/k8s-mgmt-pod /etc/ssh/sshd_config.d && useradd --create-home --shell /bin/bash admin && useradd --create-home --shell /bin/bash user && printf 'admin ALL=(ALL) NOPASSWD:ALL\n' > /etc/sudoers.d/90-admin-nopasswd && chmod 0440 /etc/sudoers.d/90-admin-nopasswd && curl -fsSLo "/tmp/lfk_${LFK_VERSION}_linux_amd64.deb" "https://github.com/janosmiko/lfk/releases/download/v${LFK_VERSION}/lfk_${LFK_VERSION}_linux_amd64.deb" && curl -fsSLo /tmp/lfk.checksums "https://github.com/janosmiko/lfk/releases/download/v${LFK_VERSION}/checksums.txt" && cd /tmp && grep " lfk_${LFK_VERSION}_linux_amd64.deb$" /tmp/lfk.checksums | sha256sum -c - && dpkg -i "/tmp/lfk_${LFK_VERSION}_linux_amd64.deb" && rm -f "/tmp/lfk_${LFK_VERSION}_linux_amd64.deb" /tmp/lfk.checksums && curl -fsSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && curl -fsSLo /tmp/kubectl.sha256 "https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256" && echo "$(cat /tmp/kubectl.sha256) /usr/local/bin/kubectl" | sha256sum -c - && chmod 0755 /usr/local/bin/kubectl && curl -fsSLo "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" "https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz" && curl -fsSLo "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum" "https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum" && echo "$(awk '{print $1}' /tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum) /tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" | sha256sum -c - && tar -xzf "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" -C /tmp && install -m 0755 /tmp/linux-amd64/helm /usr/local/bin/helm && curl -fsSLo "/tmp/k9s_Linux_amd64.tar.gz" "https://github.com/derailed/k9s/releases/download/v${K9S_VERSION}/k9s_Linux_amd64.tar.gz" && tar -xzf "/tmp/k9s_Linux_amd64.tar.gz" -C /tmp && install -m 0755 /tmp/k9s /usr/local/bin/k9s && mkdir -p /etc/bash_completion.d && kubectl completion bash > /etc/bash_completion.d/kubectl && helm completion bash > /etc/bash_completion.d/helm && chmod 0644 /etc/bash_completion.d/kubectl /etc/bash_completion.d/helm && rm -f /tmp/kubectl.sha256 && rm -rf /tmp/linux-amd64 && rm -f "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz" "/tmp/helm-v${HELM_VERSION}-linux-amd64.tar.gz.sha256sum" /tmp/k9s /tmp/README.md /tmp/LICENSE /tmp/k9s_Linux_amd64.tar.gz && rm -f /etc/ssh/ssh_host_* # buildkit

COPY docker/sshd/10-lfk-base.conf /etc/ssh/sshd_config.d/10-lfk-base.conf # buildkit

COPY docker/nginx/webssh.conf /etc/nginx/conf.d/webssh.conf # buildkit

COPY docker/profile/20-k8s-tools-completion.sh /etc/profile.d/20-k8s-tools-completion.sh # buildkit

COPY docker/motd /etc/motd # buildkit

COPY entrypoint.sh /usr/local/bin/entrypoint.sh # buildkit

RUN |5 LFK_VERSION=0.14.9 KUBECTL_VERSION=1.31.0 HELM_VERSION=3.16.2 K9S_VERSION=0.40.10 WEBSSH2_VERSION=5.0.1 /bin/sh -c chmod 0755 /usr/local/bin/entrypoint.sh && chmod 0644 /etc/profile.d/20-k8s-tools-completion.sh # buildkit

EXPOSE [22/tcp 3000/tcp]

HEALTHCHECK {Test:[CMD-SHELL nc -z 127.0.0.1 22 || exit 1] Interval:30s Timeout:5s StartPeriod:15s StartInterval:0s Retries:3}

ENTRYPOINT ["/usr/bin/tini" "--" "/usr/local/bin/entrypoint.sh"]

Key	Value
org.opencontainers.image.created	2026-06-23T13:06:41Z
org.opencontainers.image.description	Kubernetes management container with lfk and SSH access
org.opencontainers.image.revision	4dbcde381f77c0aa5431abe5d0b4b8c2b5b7b54a
org.opencontainers.image.source	https://git.alcatrash.net/michael/k8s-mgmt-pod
org.opencontainers.image.title	k8s-mgmt-pod
org.opencontainers.image.url	https://git.alcatrash.net/michael/k8s-mgmt-pod
org.opencontainers.image.version	20260623-4dbcde3