diff options
author | Runxi Yu <me@runxiyu.org> | 2025-02-13 00:31:48 +0800 |
---|---|---|
committer | Runxi Yu <me@runxiyu.org> | 2025-02-13 00:32:01 +0800 |
commit | d87f80d3e14990e5d9fc83990ff04e29affa3a94 (patch) | |
tree | 5df543f16b96388c1dc7c6456c24d8b0d66b9d5d /ssh_utils.go | |
parent | README.md: Add a bit of detail (diff) | |
download | forge-d87f80d3e14990e5d9fc83990ff04e29affa3a94.tar.gz forge-d87f80d3e14990e5d9fc83990ff04e29affa3a94.tar.zst forge-d87f80d3e14990e5d9fc83990ff04e29affa3a94.zip |
*.go: Mass rename files for clarity
Diffstat (limited to 'ssh_utils.go')
-rw-r--r-- | ssh_utils.go | 96 |
1 files changed, 96 insertions, 0 deletions
diff --git a/ssh_utils.go b/ssh_utils.go new file mode 100644 index 0000000..a08e20c --- /dev/null +++ b/ssh_utils.go @@ -0,0 +1,96 @@ +package main + +import ( + "fmt" + "net" + "os" + "os/exec" + + glider_ssh "github.com/gliderlabs/ssh" + "go.lindenii.runxiyu.org/lindenii-common/clog" + go_ssh "golang.org/x/crypto/ssh" +) + +var server_public_key_string string +var server_public_key_fingerprint string +var server_public_key go_ssh.PublicKey + +func serve_ssh() error { + host_key_bytes, err := os.ReadFile(config.SSH.Key) + if err != nil { + return err + } + + host_key, err := go_ssh.ParsePrivateKey(host_key_bytes) + if err != nil { + return err + } + + server_public_key = host_key.PublicKey() + server_public_key_string = string(go_ssh.MarshalAuthorizedKey(server_public_key)) + server_public_key_fingerprint = string(go_ssh.FingerprintSHA256(server_public_key)) + + server := &glider_ssh.Server{ + Handler: func(session glider_ssh.Session) { + client_public_key := session.PublicKey() + var client_public_key_string string + if client_public_key != nil { + client_public_key_string = string(go_ssh.MarshalAuthorizedKey(client_public_key)) + } + _ = client_public_key_string + + cmd := session.Command() + + if len(cmd) < 2 { + fmt.Fprintln(session.Stderr(), "Insufficient arguments") + return + } + + if cmd[0] != "git-upload-pack" { + fmt.Fprintln(session.Stderr(), "Unsupported command") + return + } + + fs_path, err := get_repo_path_from_ssh_path(session.Context(), cmd[1]) + if err != nil { + fmt.Fprintln(session.Stderr(), "Error while getting repo path:", err) + return + } + + proc := exec.CommandContext(session.Context(), cmd[0], fs_path) + proc.Stdin = session + proc.Stdout = session + proc.Stderr = session.Stderr() + + err = proc.Start() + if err != nil { + fmt.Fprintln(session.Stderr(), "Error while starting process:", err) + return + } + err = proc.Wait() + if exit_error, ok := err.(*exec.ExitError); ok { + fmt.Fprintln(session.Stderr(), "Process exited with error", exit_error.ExitCode()) + } else if err != nil { + fmt.Fprintln(session.Stderr(), "Error while waiting for process:", err) + } + }, + PublicKeyHandler: func(ctx glider_ssh.Context, key glider_ssh.PublicKey) bool { return true }, + KeyboardInteractiveHandler: func(ctx glider_ssh.Context, challenge go_ssh.KeyboardInteractiveChallenge) bool { return true }, + } + + server.AddHostKey(host_key) + + listener, err := net.Listen(config.SSH.Net, config.SSH.Addr) + if err != nil { + return err + } + + go func() { + err = server.Serve(listener) + if err != nil { + clog.Fatal(1, "Serving SSH: "+err.Error()) + } + }() + + return nil +} |