https://github.com/metal-stack/metal-console

Metal Console is responsible to create a secure access to the serial console of a metal machine
https://github.com/metal-stack/metal-console

Last synced: 6 months ago
JSON representation

Metal Console is responsible to create a secure access to the serial console of a metal machine

• Host: GitHub
• URL: https://github.com/metal-stack/metal-console
• Owner: metal-stack
• License: agpl-3.0
• Created: 2020-02-17T06:07:49.000Z (almost 6 years ago)
• Default Branch: master
• Last Pushed: 2025-06-04T10:48:01.000Z (7 months ago)
• Last Synced: 2025-06-04T17:56:05.083Z (7 months ago)
• Language: Go
• Homepage:
• Size: 313 KB
• Stars: 6
• Watchers: 7
• Forks: 0
• Open Issues: 6
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Codeowners: CODEOWNERS

Awesome Lists containing this project

README

          
# metal-console

`metal-console` provides access to the serial console of metal machines.

This is achieved by acting as a bridge between ssh and the console protocol of the concrete machine.

It will support either libvirt based console access, which is used in the development environment.

On real hardware ipmi based lanplus sol (Serial Over LAN) will be used.

To access the console execute:

```bash

ssh -i  @

```

The metal-console will then lookup the given username as machine uuid on metal-api, request which console protocol to use.

If the machine uuid is a valid machine, it will then use the provided private key to authenticate against the ssh public key stored in the metal-api for this machine. If access is granted, the user will have access to the console.

`metal-console` figures out in which partition the machine is located and then opens a tls socket connection to `metal-bmc` running on the management server in this partition. `metal-bmc` checks if the tls client certificate matches. If this is the case, it looks up the machine ipmi details from `metal-api` and starts a ipmi sol session to the machine.

## TODO

- If a second console access starts to same machine, kill existing one