Up to now we use several linux users:
We want to put the system users into docker cont
Judging by the comments, you might be looking for a solution like dockersh. dockersh
is used as a login shell, and lets you place every user that logins to your instance into an isolated container.
This probably won't let you use sftp
though.
Note that dockersh
includes security warnings in their README, which you'll certainly want to review:
WARNING: Whilst this project tries to make users inside containers have lowered privileges and drops capabilities to limit users ability to escalate their privilege level, it is not certain to be completely secure. Notably when Docker adds user namespace support, this can be used to further lock down privileges.