You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ssh/tailssh
Percy Wegmann 7d83056a1b ssh/tailssh: fix SSH on busybox systems
This involved the following:

1. Pass the su command path as first of args in call to unix.Exec to make sure that busybox sees the correct program name.
   Busybox is a single executable userspace that implements various core userspace commands in a single binary. You'll
   see it used via symlinking, so that for example /bin/su symlinks to /bin/busybox. Busybox knows that you're trying
   to execute /bin/su because argv[0] is '/bin/su'. When we called unix.Exec, we weren't including the program name for
   argv[0], which caused busybox to fail with 'applet not found', meaning that it didn't know which command it was
   supposed to run.
2. Tell su to whitelist the SSH_AUTH_SOCK environment variable in order to support ssh agent forwarding.
3. Run integration tests on alpine, which uses busybox.
4. Increment CurrentCapabilityVersion to allow turning on SSH V2 behavior from control.

Fixes #12849

Signed-off-by: Percy Wegmann <percy@tailscale.com>
3 months ago
..
testcontainers ssh/tailssh: fix SSH on busybox systems 3 months ago
incubator.go ssh/tailssh: fix SSH on busybox systems 3 months ago
incubator_linux.go ssh/tailssh: fall back to using su when no TTY available on Linux 6 months ago
privs_test.go ssh/tailssh: fall back to using su when no TTY available on Linux 6 months ago
tailssh.go cmd/k8s-operator,k8s-operator/sessionrecording,sessionrecording,ssh/tailssh: refactor session recording functionality (#12945) 3 months ago
tailssh_integration_test.go ssh/tailssh: fix SSH on busybox systems 3 months ago
tailssh_test.go cmd/k8s-operator,k8s-operator/sessionrecording,sessionrecording,ssh/tailssh: refactor session recording functionality (#12945) 3 months ago
user.go ssh/tailssh: try fetching group IDs for user with the 'id' command 7 months ago