This container embeds everything in one container: - knotserver - repoguard - keyfetch - sshd server To supervise knot and sshd servers I decided to use well known s6-overlay. After first launch it execline script will create host keys. knotserver runs under git, sshd under root.