OpenSSH Server

## OpenSSH Server **Official Website:** https://www.openssh.com/ **Repository:** https://github.com/lazycatapps/openssh-server.git OpenSSH Server is a sandboxed SSH service container built on the LinuxServer.io image. It lets you provide SSH access without granting control of the entire server: users can only reach the mounted folders and processes inside the container. ### ✨ Key Features - 🔒 **Sandboxed Access**: Users can only access directories and processes mounted inside the container, ensuring isolation - 🔑 **Multiple Authentication Methods**: Supports SSH key authentication (recommended) and password authentication - 🛡️ **Sudo Support**: Optional sudo access that can be passwordless or password protected - 📦 **Flexible Key Management**: Import public keys from inline text, files, directories, or URLs - 🌐 **Persistent Configuration**: Configuration files persist under `/lzcapp/var/openssh-server/config` ### 📖 Usage Instructions 1. **Start Application**: After you install and launch the app, the SSH service starts automatically 2. **Configure Authentication**: - **Key Authentication (Recommended)**: Set `PUBLIC_KEY`, `PUBLIC_KEY_FILE`, `PUBLIC_KEY_DIR`, or `PUBLIC_KEY_URL` in the environment variables - **Password Authentication**: Set `PASSWORD_ACCESS=true` and configure the password through `USER_PASSWORD` 3. **Connect to Server**: Use your SSH client to connect ```bash ssh -p 22 admin@ServerIP # Or connect with a key ssh -i /path/to/key -p 22 admin@ServerIP ``` When you lack direct SSH access to Lazycat but need to troubleshoot over SSH, deploy this component and mount the required directories through the `compose_override` mechanism or build a local app that ships with the necessary `compose_override` settings. For details, see the official guide: https://developer.lazycat.cloud/advanced-compose-override.html ### ⚙️ Environment Variables - `USER_NAME`: SSH username (default: admin) - `USER_PASSWORD`: User password (default: admin) - `PASSWORD_ACCESS`: Whether password login is allowed (default: true) - `PUBLIC_KEY`: Inline SSH public key - `PUBLIC_KEY_FILE`: Path to a public key file - `PUBLIC_KEY_DIR`: Directory that stores public keys - `PUBLIC_KEY_URL`: URL from which to fetch public keys (for example, GitHub) - `SUDO_ACCESS`: Enable sudo privileges (default: false) - `TZ`: Timezone configuration (default: Asia/Shanghai) ### ⚠️ Important Notes - For public-facing services, use SSH key authentication instead of passwords whenever possible - Removing key-related environment variables does not delete existing authorized keys - Configuration files persist under `/lzcapp/var/openssh-server/config`