Fix SSH template: add sudo, root user for runCmd, and ssh-keygen at start time

Tested and verified working:
- Template builds successfully
- SSH connection works with websocat proxy
- Password authentication with user:sandbox credentials

Author: beran-t

docs/sandbox/ssh-access.mdx

@@ -81,14 +81,15 @@ You can either build a [custom template](/docs/template/examples/ssh-ready) or s
 ```bash
 # Install SSH server and websocat
 sudo apt-get update && sudo apt-get install -y openssh-server curl
-sudo mkdir -p /run/sshd
 sudo curl -fsSL -o /usr/local/bin/websocat https://github.com/vi/websocat/releases/latest/download/websocat.x86_64-unknown-linux-musl
 sudo chmod a+x /usr/local/bin/websocat
 
 # Set a password for the user
 echo "user:sandbox" | sudo chpasswd
 
-# Start SSH and the WebSocket proxy
+# Generate host keys, start SSH daemon and WebSocket proxy
+sudo mkdir -p /run/sshd
+sudo ssh-keygen -A
 sudo /usr/sbin/sshd
 websocat -b --exit-on-eof ws-l:0.0.0.0:8081 tcp:127.0.0.1:22
 ```

docs/template/examples/ssh-ready.mdx

@@ -13,20 +13,18 @@ import { Template, waitForPort } from 'e2b'
 
 export const template = Template()
   .fromUbuntuImage('22.04')
-  // Install SSH server and websocat for WebSocket proxying
-  .aptInstall(['openssh-server', 'curl'])
+  // Install SSH server, curl for downloading websocat, and sudo for start command
+  .aptInstall(['openssh-server', 'curl', 'sudo'])
+  // Configure SSH and download websocat (requires root)
   .runCmd([
     'curl -fsSL -o /usr/local/bin/websocat https://github.com/vi/websocat/releases/latest/download/websocat.x86_64-unknown-linux-musl',
     'chmod a+x /usr/local/bin/websocat',
-  ])
-  // Configure SSH with password authentication
-  .runCmd([
-    'mkdir -p /run/sshd',
     "sed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config",
     'echo "user:sandbox" | chpasswd',
-  ])
+    'echo "user ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers',
+  ], { user: 'root' })
   // Start SSH daemon and WebSocket proxy on port 8081
-  .setStartCmd('/usr/sbin/sshd && websocat -b --exit-on-eof ws-l:0.0.0.0:8081 tcp:127.0.0.1:22', waitForPort(8081))
+  .setStartCmd('sudo mkdir -p /run/sshd && sudo ssh-keygen -A && sudo /usr/sbin/sshd && websocat -b --exit-on-eof ws-l:0.0.0.0:8081 tcp:127.0.0.1:22', waitForPort(8081))
 ```
 
 ```python Python
@@ -36,20 +34,18 @@ from e2b import Template, wait_for_port
 template = (
     Template()
     .from_ubuntu_image("22.04")
-    # Install SSH server and websocat for WebSocket proxying
-    .apt_install(["openssh-server", "curl"])
+    # Install SSH server, curl for downloading websocat, and sudo for start command
+    .apt_install(["openssh-server", "curl", "sudo"])
+    # Configure SSH and download websocat (requires root)
     .run_cmd([
         "curl -fsSL -o /usr/local/bin/websocat https://github.com/vi/websocat/releases/latest/download/websocat.x86_64-unknown-linux-musl",
         "chmod a+x /usr/local/bin/websocat",
-    ])
-    # Configure SSH with password authentication
-    .run_cmd([
-        "mkdir -p /run/sshd",
         "sed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config",
         'echo "user:sandbox" | chpasswd',
-    ])
+        'echo "user ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers',
+    ], user="root")
     # Start SSH daemon and WebSocket proxy on port 8081
-    .set_start_cmd("/usr/sbin/sshd && websocat -b --exit-on-eof ws-l:0.0.0.0:8081 tcp:127.0.0.1:22", wait_for_port(8081))
+    .set_start_cmd("sudo mkdir -p /run/sshd && sudo ssh-keygen -A && sudo /usr/sbin/sshd && websocat -b --exit-on-eof ws-l:0.0.0.0:8081 tcp:127.0.0.1:22", wait_for_port(8081))
 )
 ```