Someone else tried to use CI/CD (gitlab,github) with LXD container ?
I’m trying to setup it to deploy my code instead of SFTP.
If I understand I have to “SSH Jump (lxd host)” to container by setup SSH server inside it.
I have doubt about security by multiply SSH server (extending surface attack ?)
[INTERNET] --> [LXD HOST] --> [(ssh?) (no public ip) CONTAINER]
How guys do you deal with LXD+CI/CD ?
Can we consider LXD host like a kind of SSH Bastion for containers ?
What about “lxc exec” for CI/CD instead of SSH ?
It’s so curious we don’t see tutorial about Pipeline with LXD.
I’ve spotted this
- SSH vs lxc exec
- SSH Jump