mirror of
https://github.com/henrygd/beszel.git
synced 2025-12-17 02:36:17 +01:00
d170e7a00d
- merges agent.Run with agent.NewAgent - separates StartServer method - bumps go version to 1.24 - add tests
98 lines
2.2 KiB
Go
98 lines
2.2 KiB
Go
package agent
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"log/slog"
|
|
"net"
|
|
"os"
|
|
"strings"
|
|
|
|
sshServer "github.com/gliderlabs/ssh"
|
|
"golang.org/x/crypto/ssh"
|
|
)
|
|
|
|
type ServerConfig struct {
|
|
Addr string
|
|
Network string
|
|
Keys []ssh.PublicKey
|
|
}
|
|
|
|
func (a *Agent) StartServer(cfg ServerConfig) error {
|
|
sshServer.Handle(a.handleSession)
|
|
|
|
slog.Info("Starting SSH server", "addr", cfg.Addr, "network", cfg.Network)
|
|
|
|
switch cfg.Network {
|
|
case "unix":
|
|
// remove existing socket file if it exists
|
|
if err := os.Remove(cfg.Addr); err != nil && !os.IsNotExist(err) {
|
|
return err
|
|
}
|
|
default:
|
|
// prefix with : if only port was provided
|
|
if !strings.Contains(cfg.Addr, ":") {
|
|
cfg.Addr = ":" + cfg.Addr
|
|
}
|
|
}
|
|
|
|
// Listen on the address
|
|
ln, err := net.Listen(cfg.Network, cfg.Addr)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer ln.Close()
|
|
|
|
// Start server on the listener
|
|
err = sshServer.Serve(ln, nil, sshServer.NoPty(),
|
|
sshServer.PublicKeyAuth(func(ctx sshServer.Context, key sshServer.PublicKey) bool {
|
|
for _, pubKey := range cfg.Keys {
|
|
if sshServer.KeysEqual(key, pubKey) {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}),
|
|
)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (a *Agent) handleSession(s sshServer.Session) {
|
|
// slog.Debug("connection", "remoteaddr", s.RemoteAddr(), "user", s.User())
|
|
stats := a.gatherStats()
|
|
if err := json.NewEncoder(s).Encode(stats); err != nil {
|
|
slog.Error("Error encoding stats", "err", err, "stats", stats)
|
|
s.Exit(1)
|
|
}
|
|
s.Exit(0)
|
|
}
|
|
|
|
// ParseKeys parses a string containing SSH public keys in authorized_keys format.
|
|
// It returns a slice of ssh.PublicKey and an error if any key fails to parse.
|
|
func ParseKeys(input string) ([]ssh.PublicKey, error) {
|
|
var parsedKeys []ssh.PublicKey
|
|
|
|
for line := range strings.Lines(input) {
|
|
line = strings.TrimSpace(line)
|
|
|
|
// Skip empty lines or comments
|
|
if len(line) == 0 || strings.HasPrefix(line, "#") {
|
|
continue
|
|
}
|
|
|
|
// Parse the key
|
|
parsedKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(line))
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to parse key: %s, error: %w", line, err)
|
|
}
|
|
|
|
// Append the parsed key to the list
|
|
parsedKeys = append(parsedKeys, parsedKey)
|
|
}
|
|
|
|
return parsedKeys, nil
|
|
}
|