Dockerfile.ssh

# test image: git-trace binary + sshd exercising the forced-command path
FROM git-trace-dev

RUN apt-get update && apt-get install -y --no-install-recommends \
        openssh-server \
    && rm -rf /var/lib/apt/lists/*

# forge OS account: owns repos, no password (key-only), real shell so
# the generated `command="VAR=.. /path/git-trace shell <id>"` lines work
RUN useradd -m -s /bin/sh git \
    && usermod -p '*' git \
    && mkdir -p /srv/repos /srv/var /run/sshd \
    && chown -R git:git /srv

CMD ["bash"]