kayg/infraternal-v0
Archived
Watch
1
0
Fork
You've already forked infraternal-v0
 0
Code Issues 92 Pull requests Projects Releases Packages Wiki Activity Actions

S2: SSH through remote infraternal agents (19 follow-up) #43

Open
opened 2026-09-25 08:20:29 +00:00 by kayg · 0 comments
kayg commented 2026-09-25 08:20:29 +00:00
Owner
Copy link

From review-19, finding 4 (medium). SSH opens aimed at a remote host return not_found: the target-existence match in crates/server/src/stream.rs (lines 1162–1173) excludes OpenPayload::Ssh, and SSH settings are configured only on the embedded infraternal agent.

Needed:

  • SSH host ownership per infraternal agent;
  • routing authorized SSH opens through the tunnel;
  • delivering SSH settings and host-key trust to the remote runtime;
  • tests through a real sshd.

This depends on step 19 (#40) and step 21 (#39). It is a security surface, so it runs on Sol. It is required before the step 26 S2 verification.

From review-19, finding 4 (medium). SSH opens aimed at a remote host return `not_found`: the target-existence match in `crates/server/src/stream.rs` (lines 1162–1173) excludes `OpenPayload::Ssh`, and SSH settings are configured only on the embedded infraternal agent. Needed: - SSH host ownership per infraternal agent; - routing authorized SSH opens through the tunnel; - delivering SSH settings and host-key trust to the remote runtime; - tests through a real sshd. This depends on step 19 (#40) and step 21 (#39). It is a security surface, so it runs on Sol. It is required before the step 26 S2 verification.
Commenting is not possible because the repository is archived.
No Branch/Tag specified
Branches Tags
main
dev
perf-gates
provider-docker-podman
fix-networkidle
fix-apierror-panics
fix-revoke-panic
wal-race
fix-private-storage
provider-runtime
plugin-design
server-channels
scope-v01
deploy-git-fix
sec-hardening
gates-tiering
sidebar-sync
multi-tab
cli-eof
podman-flake
ssh-reattach
agent-tunnel
process-boundary
shadcn
stream-params
cli-ssh
ssh-product
container-live
flaky-tests
s1-e2e
ssh-test-isolation
cli-stream
research-lxc
container-live-agent
ui-apis
grant-shrink
deploy-o2
ui-redesign
migration-fix
cli
stream
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal-v0#43
No description provided.