centos6 google authenticator sshd

Dockerfile

FROM centos:centos6

RUN yum update -y
RUN yum install -y epel-release
RUN sed -i 's/\#baseurl/baseurl/g' /etc/yum.repos.d/epel.repo
RUN sed -i 's/mirrorlist/\#mirrorlist/g' /etc/yum.repos.d/epel.repo

# setup sshd and pam
RUN yum install -y openssh-server google-authenticator
RUN sed -i 's/ChallengeResponseAuthentication no/ChallengeResponseAuthentication yes/g' /etc/ssh/sshd_config
RUN sed -i 's/auth       include      password-auth/auth\t   required     pam_google_authenticator.so/g' /etc/pam.d/sshd
RUN echo 'root:root' | chpasswd
RUN mkdir /var/run/sshd
RUN useradd -m -s /bin/bash guest && \
    echo 'guest:password' | chpasswd

## Suppress error message 'Could not load host key: ...'
RUN /usr/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -C '' -N ''
RUN /usr/bin/ssh-keygen -t rsa -f /etc/ssh/ssh_host_dsa_key -C '' -N ''
EXPOSE 22

[root@dd2bb0e7f6d0 /]$ service sshd start
[root@dd2bb0e7f6d0 /]$ su guest
[guest@dd2bb0e7f6d0 /]$ google-authenticator