add db/Docker to create sysadmin and set up ssh access

Author: amandayclee

db/Dockerfile

@@ -0,0 +1,35 @@
+# https://docs.docker.com/engine/reference/builder/
+
+# https://hub.docker.com/_/mariadb
+FROM mariadb
+
+# Resynchronize the package index files from their sources
+RUN apt-get update
+
+# Install packages for ssh
+RUN apt-get install -y \
+    openssh-client \
+    openssh-server
+
+# Clean up packages: Saves space by removing unnecessary package files and lists
+RUN apt-get clean
+RUN rm -rf /var/lib/apt/lists/*
+
+# Create sysadmin user and add to sudoers
+RUN useradd -m -s /bin/bash sysadmin && \
+    echo "sysadmin:sysadmin" | chpasswd && \
+    usermod -aG sudo sysadmin
+
+# Ensure SSH directory exists with correct permissions
+RUN mkdir -p /home/sysadmin/.ssh && \
+    chown sysadmin:sysadmin /home/sysadmin/.ssh && \
+    chmod 700 /home/sysadmin/.ssh
+
+# Create privilege separation directory for SSH
+RUN mkdir -p /run/sshd
+
+# Expose SSH port
+EXPOSE 22
+
+# Start SSH service
+CMD ["/usr/sbin/sshd", "-D"]

docker-compose.yml

@@ -68,16 +68,24 @@ services:
 
   db-dev:
     container_name: db-dev
+    build:
+      context: .
+      dockerfile: db/Dockerfile
     environment:
       MYSQL_DATABASE: wordpress
       MYSQL_ROOT_PASSWORD: root
       MYSQL_USER: root
-    image: mariadb
     networks:
       - dev-backend
     restart: on-failure
+    ports:
+      - "3306:3306"
+      - "22003:22"
     volumes:
       - db-data:/var/lib/mysql
+      - ./sysadmin-ssh-keys/rsa_sysadmin:/home/sysadmin/.ssh/id_rsa:ro
+      - ./sysadmin-ssh-keys/rsa_sysadmin.pub:/home/sysadmin/.ssh/id_rsa.pub:ro
+      - ./sysadmin-ssh-keys/rsa_sysadmin.pub:/home/sysadmin/.ssh/authorized_keys:ro
 
 volumes:
   db-data: