{"id":13499375,"url":"https://github.com/gliderlabs/sshfront","last_synced_at":"2025-04-06T09:09:39.112Z","repository":{"id":17586022,"uuid":"20389553","full_name":"gliderlabs/sshfront","owner":"gliderlabs","description":"Programmable SSH frontend","archived":false,"fork":false,"pushed_at":"2023-12-15T20:43:47.000Z","size":42,"stargazers_count":311,"open_issues_count":4,"forks_count":29,"subscribers_count":13,"default_branch":"master","last_synced_at":"2025-03-30T08:08:27.638Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/gliderlabs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2014-06-02T00:30:20.000Z","updated_at":"2025-03-18T19:48:36.000Z","dependencies_parsed_at":"2024-01-25T16:10:43.198Z","dependency_job_id":null,"html_url":"https://github.com/gliderlabs/sshfront","commit_stats":null,"previous_names":["progrium/execd"],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gliderlabs%2Fsshfront","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gliderlabs%2Fsshfront/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gliderlabs%2Fsshfront/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gliderlabs%2Fsshfront/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/gliderlabs","download_url":"https://codeload.github.com/gliderlabs/sshfront/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247457803,"owners_count":20941906,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-31T22:00:32.584Z","updated_at":"2025-04-06T09:09:39.090Z","avatar_url":"https://github.com/gliderlabs.png","language":"Go","readme":"# sshfront\n\n[![CircleCI](https://img.shields.io/circleci/project/gliderlabs/sshfront/release.svg)](https://circleci.com/gh/gliderlabs/sshfront)\n[![IRC Channel](https://img.shields.io/badge/irc-%23gliderlabs-blue.svg)](https://kiwiirc.com/client/irc.freenode.net/#gliderlabs)\n\nA lightweight SSH server frontend where authentication and connections\nare controlled with command handlers / shell scripts.\n\n## Using sshfront\n\n\n    Usage: ./sshfront [options] \u003chandler\u003e\n    \n      -a=\"\": authentication hook. empty=allow all\n      -d=false: debug mode\n      -e=false: pass environment to handler\n      -h=\"0.0.0.0\": ip to listen on\n      -k=\"~/.ssh/id_rsa\": private host key path\n      -p=\"22\": port to listen on\n\n\n#### handler $command...\n\n`$command...` command line arguments specified to run by the SSH client\n\nThe handler is a command that's used to handle all SSH connections.\nOutput, stderr, and the exit code is returned to the client.\nIf the client provides stdin, that's passed to the handler.\n\nIf the authentication hook was specified, any output is parsed as environment variables and added to the handler environment.\n`$USER` is always the SSH user used to connect and `$SSH_ORIGINAL_COMMAND` is the command specified from the client if not interactive.\n\n#### auth-hook $user $key\n\n * `$user` argument is the name of the user being used to attempt the connection\n * `$key` argument is the public key data being provided for authentication\n\nThe auth hook is a command used for authenticating incoming SSH connections.\nIf it returns with exit status 0, the connection will be allowed, otherwise it will be denied.\nThe output of auth hook must be empty, or key-value pairs in the form `KEY=value` separated by newlines, which will be added to the environment of connection handler.\n\nThe auth hook is optional, but if not specified then all connections are allowed.\nIt is a good idea to always specify an auth hook.\n\n\nSee example/authcheck auth hook that checks that the pub key is authorized. Usage:\n\n    sshfront -a example/authcheck\n\n\n## Examples\n\n**Many of these bypass authentication and may allow remote execution, *do not* run this in production.**\n\nEcho server:\n\n    server$ sshfront $(which echo)\n    client$ ssh $SERVER \"hello world\"\n    hello world\n\nEcho host's environment to clients:\n\n    server$ sshfront -e $(env)\n    client$ ssh $SERVER\n    USER=root\n    HOME=/root\n    LANG=en_US.UTF-8\n    ...\n\nBash server:\n\n    server$ sshfront $(which bash)\n    client$ ssh $SERVER\n    bash-4.3$ echo \"this is a bash instance running on the server\"\n    this is a bash instance running on the server\n\n\nSSH forwarding:\n\n    server$ sshfront example/sshforward\n    client$ ssh alice@$SERVER\n    Forward ssh alice@another.server...\n    Welcome to another.server\n\n\n## Sponsors\n\nThis project was made possible thanks to [Deis](http://deis.io) and [DigitalOcean](http://digitalocean.com).\n\n## License\n\nMIT\n\u003cimg src=\"https://ga-beacon.appspot.com/UA-58928488-2/sshfront/readme?pixel\" /\u003e\n","funding_links":[],"categories":["Apps"],"sub_categories":["Servers"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgliderlabs%2Fsshfront","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgliderlabs%2Fsshfront","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgliderlabs%2Fsshfront/lists"}