7af575119d
eliminated the username.
2024-08-06 22:38:59 +02:00
e9744a7c2f
better messages when the user modifies the .authorized_keys file from
...
within the session.
2024-08-06 22:28:34 +02:00
Erik Brakkee
3c803d6125
removed password based access
...
authorized keys can now be modified within the session.
keep last set of keys when no valid keys were found and keys are changed during the session .
2024-08-06 22:03:36 +02:00
7e60e23df1
A lot of work in getting cut and paste from the UI to
...
work properly.
Wrote two web components. One for cut and paste in general, and another for code samples.
2024-08-05 22:51:49 +02:00
02914ae40f
Simple validation of the id and the authorized keys.
2024-08-04 23:31:12 +02:00
46d4467e94
More clean handling of the contextpath.
...
Now using long option names for the options of converge to be consistent with the other components.
2024-08-04 22:17:51 +02:00
1b76add15b
Alternative contextpath is now supported.
...
This will simplify hosting in cases where you have no control over DNS but only over one domain.
2024-08-03 23:10:57 +02:00
b875540d6b
Preparation for alternative context path.
...
The contextpath parameter in converge.go is
temporary and should be removed later. What is needed is autodetectio of the context path for the usage page and passing on the context for rendering.
2024-08-03 22:40:26 +02:00
d3f9c9fd5a
Lots of work on making easier interactive documentation, especially to make working with SSH public keys really easy.
...
Next step is to do more validation in the UI.
Specifically:
* validate authorized keys
* detection of accidental use of a private key
Then, password based access can be disabled.
2024-08-03 21:03:29 +02:00
db44a20d5a
large parts of the usage is now dynamic.
...
Still need to generate instructions for authorized keys. A lot of troubleshooting for the form to cookie persistence.
2024-08-03 18:29:14 +02:00
91e1139881
work in progress:
...
* usage page now has more dynamic part where user
can enter id and publis ssh keys and the server will
generate the appropriate commmands to execute depending on the local and remote shell.
2024-08-03 12:54:32 +02:00
Erik Brakkee
21463a5cad
* session will now expire some time after last user
...
activity and updated documentation.
* downloads will now download again. Because of hx-boost
the downloads where rendered in the browser. Now
disabling hx-boost for the downloads section.
* relative link for sessions page
2024-08-02 20:58:46 +02:00
0d60b70ada
Updated documentation:
...
* remote shell usage for linux, cmd, and powershell
* help of wsproxy.
2024-08-01 20:53:52 +02:00
ff97c1ccd2
Now by default wsproxy uses a specific protocol to establish connections to the server. It does this by adding the ?wsproxy query parameter.
...
The server then sends it the protocol version and the client connection info describing whether an agent was found or not. This improves usability for users.
With the --raw option it bypasses this query parameter and wsproxy then works in the old way as a simple stdio-websocket connector. It then still works with converge server but can also be used for simple websocket troubleshooting.
2024-08-01 20:22:41 +02:00
Erik Brakkee
2e12d0a9fd
Now displaying agent number instead of id.
...
Passing timezone to server side for rendering of time stamps
Configuration of preferred shells.
2024-08-01 19:16:00 +02:00
4c52fb0f12
Rendering status as HTML tables.
2024-07-31 21:12:09 +02:00
885b7790d7
doing the same thing as before but now rendering the
...
status using a template.
2024-07-31 19:52:01 +02:00
Erik Brakkee
f0dd810541
many small changes
...
* removed the Async utility
* now using Ping message to webclient for keep alive instaed of actual content
* added remote shell to AgentInfo
* retry of connections to the agent
* better logging for SynchronizeStreams
2024-07-31 19:30:38 +02:00
01c9cdd60a
usage fix (agent was renamed by intellij to session)
...
Now using embedded timezone database by go so setting the TZ variable will work.
2024-07-30 23:48:52 +02:00
9a3618f06b
Live updates of the sessions.
...
V1 in ascii-art. To be improved.
2024-07-30 21:51:30 +02:00
f382c02b41
restructuring
2024-07-30 19:59:13 +02:00
367043e0c5
When a duplicate id is requested the server now allocates a new unique id so that the session can be handled anyway.
2024-07-30 19:45:25 +02:00
bf5120aa5b
refactoring towards being able to send events from Admin to UI (websocket) without exposing connection info but only metadata.
2024-07-30 19:03:21 +02:00
39cf088a41
basic htmx with server sending content to the client over a websocket is now working. This only worked when text message where being sent so the websocket handling had to be made configurable with a 'text' boolean field.
2024-07-29 23:56:44 +02:00
77cffde408
tabbed interface.
2024-07-29 21:05:14 +02:00
68056b0b77
split up in separate pages.
2024-07-29 20:02:08 +02:00
f5135aecdc
docs page now working again.
2024-07-29 19:49:47 +02:00
92504f4130
Split up the main page into different parts.
2024-07-29 19:16:48 +02:00
a4d5060163
Split up the main page into different parts.
2024-07-29 19:02:50 +02:00
b1f7304eeb
Now rendering the index.html using the Templ library.
...
This is in preparation for:
1. creating a base page
2. using tabs: Home, Using, Downloads, Status
3. htmx
2024-07-28 21:31:17 +02:00
d17ad9bc3e
Added pprof to convergeserver and optionally to
...
the agent if PPROF_PORT is set.
Fixed issue with converge server not cleaning up goroutines because of blocking channel. Made sure to create channels with > 1 size everywhere it can be done. The blocking behavior of a default channel size is mostly in the way.
Known issue: Killing the SSH client will lead to the server side process not being terminated and some goroutines still running in the agent. This would require additional investigation to solve. The remote processes are still being cleaned up ok (at least on linux) when the agent exits.
This should not be an issue at all since the agent is a short-lived process and when running in a containerized environment with containers running on demand the cleanup will definitely work.
2024-07-28 11:48:31 +02:00
7a51e3ac45
Unique ids for clients generated by converge server and made available to the ssh session through a net.Conn extension that passes the ID to the SSH session through the LocalAddr().
2024-07-27 22:37:40 +02:00
5a492f3855
initialization of username, password on client (from server) and initialization of agentinfo on server is now done as soon as the agent registered and not through a side channel.
...
Making use of some simple utilities for GOB to make it easy to send objects over the line.
2024-07-27 20:46:53 +02:00
621bbd8ca6
GOB channel for easily and asynchronously using GOB on a single network connection, also dealing with timeouts and errors in a good way.
...
Protocol version is now checked when the agent connects to the converge server.
Next up: sending connection metadata and username password from server to agent and sending environment information back to the server. This means then that the side channel will only be used for expiry time messages and session type with the client id passed in so the converge server can than correlate the results back to the correct channel.
2024-07-27 11:21:35 +02:00
f82601d07c
Lots of refactoring.
...
Now hijacking the ssh connection setup in the listener to exchange some information before passing the connection on to the SSH server.
Next step is to do the full exchange of required information and to make it easy some simple Read and Write methods with timeouts are needed that use gob.
2024-07-26 22:40:56 +02:00
b7f3de88bb
Updated deployment with username and password settings.
...
index.html template now also uses the configured password.
2024-07-26 21:11:40 +02:00
37bef8814c
user security best practice of having no default passwords.
2024-07-26 20:57:04 +02:00
d02b7eade3
password of converge now configurable through
...
CONVERGE_USERNAME and CONVERGE_PASSWORD environment
variables.
2024-07-26 20:51:05 +02:00
514e57768f
good url validation.
2024-07-26 20:40:01 +02:00
Erik Brakkee
a59011b00c
Some cleanup in the agent code.
...
Now supporting authorized SSH keys in the
.authorized_keys file.
2024-07-25 21:40:51 +02:00
Erik Brakkee
2ed81c3174
communication between agent and server. Removed the flags libray for command-line parsing.
...
Heartbeat mechanism from client to server over the custom connection for sending events to guarantee that the connectoin stays up.
2024-07-25 19:51:11 +02:00
d9f490a2b6
removed read and write dead lines. Appears to be still working.
2024-07-24 22:26:15 +02:00
78819f1ebe
status update now reported to the server. More robustness needed.
2024-07-24 22:03:12 +02:00
459300b0d3
First version with basic communication from agent to server working.
2024-07-24 21:39:14 +02:00
5bd3795534
direct communication channel now setup between agent and converge server
2024-07-24 20:23:33 +02:00
20ce37a1cb
Extraction of communication setup in separate entity with client and related server code close together to make the setup easier to understand.
2024-07-24 20:04:35 +02:00
Erik Brakkee
bdedef12f0
welcome message for users now specific for windows and linux
...
monitoring of hold file changes and messaging to users to provide more
interactivity
2024-07-24 18:46:25 +02:00
1ed49c638e
added fsnotify example, to check bahavior on windows.
2024-07-23 22:55:03 +02:00
be3e6b7c4a
added insecure flag to allow invalid certificates.
2024-07-23 22:27:09 +02:00
0b57a31eaa
command-line argument parsing with error handling for all commands that are referred to on the docs page.
2024-07-23 21:51:48 +02:00
bc12d13c16
converge now uses flags for the command-line parsing.
2024-07-23 21:07:41 +02:00
ff1c13cc98
fileserver now uses go template language.
...
updated docs for windows.
2024-07-23 20:47:51 +02:00
cd477b7b0a
moved fileserver to separate file.
2024-07-23 19:36:35 +02:00
633b79fae4
eliminated unused setWindowSize files.
2024-07-23 19:31:43 +02:00
Erik Brakkee
75ac9a46f3
* fixes for windows
...
* detect kill ssh session
* include sftp session in the count of ssh sessions
* log session type in the agent
2024-07-23 19:26:59 +02:00
b016917bdc
list of shells to try in windows.
2024-07-22 23:57:36 +02:00
3bd0e3f3e1
refactoring to support both windows and linux with totally different Pty code.
2024-07-22 23:05:51 +02:00
Erik Brakkee
1ebee30c8c
cross compilation on windows working.
...
pty.Start() is not supported on windows
2024-07-22 19:34:26 +02:00
982977e796
renamed cidebug module to converge
2024-07-21 23:12:04 +02:00
cd1eb7338d
agent now giving the exact commands to run to use it from the client
...
side.
2024-07-21 23:02:54 +02:00
7e6b4d9272
lots of work to make it actually work.
...
Icluding the server keep alive interval.
Fix where expiry duration was added twice.
2024-07-21 22:36:17 +02:00
12ecb72329
Lots of work on docuemtation. The docs page now shows the correct
...
installation dependent URLs. For now using ServerALiveInterval
to avoid disconnects.
2024-07-21 21:41:53 +02:00
21f50a4005
updated docs for new proxycommand.
2024-07-21 19:00:01 +02:00
0508ce0daf
added proxycomamnd to be used directly by ssh
2024-07-21 18:51:30 +02:00
33e23b69bd
redirect all non-matched urls to the docs.
2024-07-21 15:43:54 +02:00
1307295e20
now with online downloads and docs.
2024-07-21 15:33:31 +02:00
7461167484
now serving files from a downloads directory so that the executables
...
can be downloaded from a ci job
2024-07-21 14:30:01 +02:00
22a3589d1d
simple session management solution with a .hold file and messages to the
...
user with better formatting.
2024-07-21 14:12:53 +02:00
134c72d8d0
basic session management is now implemented.
2024-07-21 12:34:34 +02:00
c25129a9bf
agent now uses a fixed host key using the go embed package.
...
Printing welcome message when user logs in.
2024-07-21 11:22:05 +02:00
8981efd0b5
lots of restructuring.
...
Experimensts with websockets over yamux failed. Now going to use a
second connection to the server from the agent.
2024-07-20 21:55:34 +02:00
98e46ff7cc
moved websocket utils to separate package to allow use by the agent.
2024-07-20 19:37:17 +02:00
c55af94857
generating key automatically on the agent side. Should be done later at the rendez-vous server since there will be many agents running on different servers
2024-07-20 18:40:22 +02:00
e90c3ed57a
easy switching between different service types.
...
Working now with ssh as well.
2024-07-20 14:29:47 +02:00
5055cebb7c
structuring into packages
2024-07-20 14:09:04 +02:00
cfccf04f9d
working server
...
* administration appears coorect
* multiple clients for one agent
* logging of active connections
* simple echo server on the agent.
2024-07-20 13:35:49 +02:00
6c8e0adccf
agent is now setting up ws connection to server.
...
Next: adding multiplexing and listening on a socket.
2024-07-20 10:56:14 +02:00
f3cbd9012a
First agent version, passing in external listener fo ssh so it can be used later with yamux as well.
2024-07-20 10:43:38 +02:00
3b2b9162ba
cleanup now works. Clients and agents can connect and disconnect at will.
2024-07-19 21:48:54 +02:00
8842c37a66
dynamic publicId now working with single connection to agent. Cleanup is not working yet.
2024-07-19 21:13:57 +02:00
e2c2cbd0ef
rendezvous mechanism with fixed id is now working.
2024-07-19 20:29:51 +02:00
f59c8368ea
first rendez vous:
...
1. two websocket clients connecting: one as agent and one as client
2. bidirectional communication between the two
2024-07-19 19:31:34 +02:00
ada8dee0aa
further generalizatio of synchronizing two streams of data.
2024-07-18 21:25:00 +02:00
650b40dfec
now using in wstotcp as well.
2024-07-18 21:18:40 +02:00
188d949d65
moved websocket wrapper to iowrappers package.
2024-07-18 21:14:23 +02:00
46a7588896
generalizing websocket connection to reader/writer.
2024-07-18 20:58:15 +02:00
4eb83d033a
ssh client -> tcptows -> wstotcp -> sshserver works.
2024-07-18 19:48:06 +02:00
cc35288d8a
added makefile for building.
2024-07-18 19:12:09 +02:00
9cbfa812ca
restructuring.
2024-07-18 19:04:33 +02:00
