# Pritunl zero bastion host **URL:** \ **Category:** Pritunl Zero\ **Tags:** pritunl-zero\ **Created:** [January 29, 2026, 4:49pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699 "2026-01-29T16:49:34Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![vinzBravo](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/v/58f4c7/32.png) [@vinzBravo](https://forum.pritunl.com/u/vinzBravo)\ **Post date:** [January 29, 2026, 4:49pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/1 "2026-01-29T16:49:34Z")
Hello We have issue to connect to server that are not using the 22 port . On this kind of server we got this error : `channel 0: open failed: administratively prohibited: open failed stdio forwarding failed` all other server running on 22 are connectable. Actually the bastion host docker and run this config : `Match User bastion` `AllowAgentForwarding no` `AllowTcpForwarding yes` `PermitOpen *:22` `GatewayPorts no` `X11Forwarding no` `PermitTunnel no` `ForceCommand echo ‘Pritunl Zero Bastion Host’` `TrustedUserCAKeys /ssh/trusted` `AuthorizedPrincipalsFile /ssh/principals` `Match all` I presume we can not target a server that is not listening on port 22 ? because of the value : `PermitOpen *:22` If yes, is there a way to modify it ? ---
**Author:** ![vinzBravo](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/v/58f4c7/32.png) [@vinzBravo](https://forum.pritunl.com/u/vinzBravo)\ **Post date:** [January 30, 2026, 9:49am UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/2 "2026-01-30T09:49:18Z")
I try the change on the docker image and its work i modify to `PermitOpen *:22 *:22222` and its work Any better method than modify the container ? Also , how the container is started ? (if i want to modify the image path) ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [January 30, 2026, 2:17pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/3 "2026-01-30T14:17:05Z")
The image can be changed by running the command below. ```bash sudo pritunl-zero set system bastion_docker_image '"docker.io/pritunl/pritunl-bastion"' ``` ---
**Author:** ![vinzBravo](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/v/58f4c7/32.png) [@vinzBravo](https://forum.pritunl.com/u/vinzBravo)\ **Post date:** [January 30, 2026, 2:24pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/4 "2026-01-30T14:24:59Z")
Ok thanks its what we are looking for 👍 ---
**Author:** ![vinzBravo](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/v/58f4c7/32.png) [@vinzBravo](https://forum.pritunl.com/u/vinzBravo)\ **Post date:** [January 30, 2026, 2:36pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/5 "2026-01-30T14:36:54Z")
For my knowledge @zach where this settings is set ? in mongo ? ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [January 30, 2026, 4:07pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/6 "2026-01-30T16:07:56Z")
That command can be run on the server and it will update the database with the option. ---
**Author:** ![vinzBravo](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/v/58f4c7/32.png) [@vinzBravo](https://forum.pritunl.com/u/vinzBravo)\ **Post date:** [January 30, 2026, 6:07pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/7 "2026-01-30T18:07:10Z")
Ok so it will reflect on all bastion servers ? ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [January 31, 2026, 5:14am UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/8 "2026-01-31T05:14:15Z")
Yes that is stored in the database and will update all Pritunl Zero hosts. ---
**Author:** ![vinzBravo](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/v/58f4c7/32.png) [@vinzBravo](https://forum.pritunl.com/u/vinzBravo)\ **Post date:** [February 9, 2026, 9:38am UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/9 "2026-02-09T09:38:24Z")
Hello @zach I change the image name by the command. Its look working but i get this in the log now : **arg:** [“pull”,“pritunl-bastion-v1.0”] **cmd:** “docker” **output:** “Using default tag: latest\nError response from daemon: pull access denied for pritunl-bastion-v1.0, repository does not exist or may require ‘docker login’\n” sync: Failed to init bastion host On stack trace : utils: Failed to exec ‘docker’ exit status 1 ORIGINAL STACK TRACE: /go/src/github.com/pritunl/pritunl-zero/utils/proc.go:338 +0xbe73b8 /go/src/github.com/pritunl/pritunl-zero/sync/bastion.go:28 +0x162dd66 /go/src/github.com/pritunl/pritunl-zero/sync/bastion.go:129 +0x162f058 runtime.goexit /usr/local/go/src/runtime/asm\_amd64.s:1693 +0x486420 ---
**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\ **Post date:** [February 9, 2026, 4:59pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/10 "2026-02-09T16:59:35Z")
Run `sudo docker pull pritunl-bastion-v1.0` and verify the image is available to the root user. ---
**Author:** ![vinzBravo](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/v/58f4c7/32.png) [@vinzBravo](https://forum.pritunl.com/u/vinzBravo)\ **Post date:** [February 9, 2026, 11:00pm UTC](https://forum.pritunl.com/t/pritunl-zero-bastion-host/3699/11 "2026-02-09T23:00:18Z")
> [@zach](#): > > sudo docker pull pritunl-bastion-v1.0 Its fine now. Thanks for the help