aherman
/
the-bastion
mirror of https://github.com/ovh/the-bastion
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 1ca53eceb3
         feat(osh): parse proxyjump options correctly jon4hz 2025-10-07 21:02:44 +0200
  • db50580a6e
         feat: implement proxy jump for egress connections jon4hz 2025-09-26 17:36:52 +0200
  • c7d903f3aa fix: when using -P, ensure we go through JIT MFA Stéphane Lesimple 2026-05-29 11:22:23 +0000
  • 0e752c8ae4
         fix: when using -P, ensure we go through JIT MFA Stéphane Lesimple 2026-05-29 11:22:23 +0000
  • 77f92e7160 fix: allow password authentication for egress if configured Friedrich Weber 2026-05-27 17:37:47 +0200
  • a9343cfea1 connect: interactive mode: also accept /usr/bin/perl as parent Friedrich Weber 2026-03-27 11:15:35 +0100
  • 27a3b16c8d
         enh: faster version of fix-group-gid.sh on servers with thousands of groups Stéphane Lesimple 2026-03-30 12:23:41 +0000
  • eba8188b8c connect: interactive mode: also accept /usr/bin/perl as parent Friedrich Weber 2026-03-27 11:15:35 +0100
  • a728c2f760 fix: opensuse: tests: no longer rely on sysV scripts Stéphane Lesimple 2026-03-09 11:12:11 +0000
  • 36850d6a05 fix: early check for port validity to avoid warnings later on Stéphane Lesimple 2026-03-09 10:36:04 +0000
  • 2637281424 fix: missing syslog-ng config for bastion-scripts jon4hz 2026-02-06 11:49:54 +0100
  • b1bd2571ea
         fix: opensuse: tests: no longer rely on sysV scripts Stéphane Lesimple 2026-03-09 11:12:11 +0000
  • 0117c647de
         fix: early check for port validity to avoid warnings later on Stéphane Lesimple 2026-03-09 10:36:04 +0000
  • 3545b17616
         fix: missing syslog-ng config for bastion-scripts jon4hz 2026-02-06 11:49:54 +0100
  • 306d1304e7 chore: add relnotes for v3.23.01 v3.23.01 Stéphane Lesimple 2026-01-30 09:32:32 +0000
  • 3fc057e0c0
         chore: add relnotes for v3.23.01 Stéphane Lesimple 2026-01-30 09:32:32 +0000
  • 01c896ba63 release v3.23.01 Stéphane Lesimple 2026-01-29 15:23:30 +0000
  • 11cbf63be8 chore: deprecate the use of -f and -l in selfListIngressKeys Stéphane Lesimple 2026-01-29 15:21:28 +0000
  • c85b21ad82
         release v3.23.01 Stéphane Lesimple 2026-01-29 15:23:30 +0000
  • 305426c8e6
         chore: deprecate the use of -f and -l in selfListIngressKeys Stéphane Lesimple 2026-01-29 15:21:28 +0000
  • 2b75792318 feat: accept -l as user option jon4hz 2026-01-28 09:23:29 +0100
  • b0868c1f29 enh: better interaction between systemd units and /home encryption Stéphane Lesimple 2026-01-02 14:29:07 +0000
  • 8653d98ac5
         enh: better interaction between systemd units and /home encryption Stéphane Lesimple 2026-01-02 14:29:07 +0000
  • 44488e8300 fix: add accountGidMin to avoid stealing an account's GID Stephane Lesimple 2026-01-26 10:17:59 +0100
  • 552b5f0cb3
         feat: accept -l as user option jon4hz 2026-01-28 09:23:29 +0100
  • 8a73639f3d fix: add accountGidMin to avoid stealing an account's GID Stephane Lesimple 2026-01-26 10:17:59 +0100
  • 7b3240e47a Fix missing `-regex` following @cdbd6c7 from #550 Mathieu MD 2026-01-12 09:37:14 +0100
  • a6c52a84bd
         Fix missing `-regex` following @cdbd6c7 from #550 Mathieu MD 2026-01-12 09:37:14 +0100
  • 7275605565
         release v3.23.00 (#605) v3.23.00 Stéphane Lesimple 2025-12-22 14:23:01 +0100
  • a499337edc
         Update doc/release-notes/v3.23.00.md Stéphane Lesimple 2025-12-22 12:04:41 +0100
  • d03625b5c5
         release v3.23.00 Stéphane Lesimple 2025-12-22 10:10:24 +0000
  • 41bcbe3cd0
         fix: stop banner service, not restart (#603) Jonah 2025-12-18 22:03:20 +0100
  • 7457f3db0d
         feat: add admin script apply-ingress-keys-from-globally.pl (#604) Stéphane Lesimple 2025-12-18 17:59:52 +0100
  • aade9787f0
         feat: add admin script apply-ingress-keys-from-globally.pl Stéphane Lesimple 2025-12-18 15:16:15 +0000
  • 06a3ba856d
         fix: stop banner service, not restart jon4hz 2025-12-16 19:16:05 +0100
  • 98336fdafe
         feat: httpproxy: add support for more HTTP methods (#601) Stéphane Lesimple 2025-12-16 14:02:45 +0100
  • 53507b6a3e
         feat: httpproxy: add support for more HTTP methods Stéphane Lesimple 2025-11-05 10:22:53 +0000
  • 38d883c654
         scp: more robust parsing for remote users with special chars (#600) Stéphane Lesimple 2025-12-15 19:16:18 +0100
  • aa14c0e14f
         enh: allow colon in remote user names (#602) Stéphane Lesimple 2025-12-15 18:12:07 +0100
  • 7ff1a4352a
         enh: allow colon in remote user names Stéphane Lesimple 2025-11-27 16:16:39 +0100
  • 2ceab97ef9
         docs(dev,setup): fix the pre-commit example and script helper (#599) François Magimel 2025-12-15 17:32:54 +0100
  • 1232ba993e
         scp: more robust parsing for remote users with special chars Stéphane Lesimple 2025-12-15 16:27:50 +0000
  • 63c74d539e
         docs(dev,setup): update the script helper François Magimel 2025-12-11 10:01:04 +0000
  • c84f2c4df2
         docs(dev,setup): fix the pre-commit example François Magimel 2025-12-11 09:57:37 +0000
  • bd9ba6fc4d
         fix: return accountInfo if grace period is set (#594) Jonah 2025-12-10 11:59:03 +0100
  • d558552c55
         fix: hide mfa info msg in quiet mode (#598) toutoen 2025-12-10 11:58:35 +0100
  • 0d4aebe755 fix: hide mfa info msg in quiet mode Antoine Guerrée 2025-12-08 11:08:27 +0100
  • 9cb87d3d89
         feat(portforwarding): allow portforwarding on master instances only jon4hz 2025-12-04 16:30:56 +0100
  • fa73b11e45
         fix(portforwarding): correctly cleanup unused local ports jon4hz 2025-12-04 14:52:45 +0100
  • 120fbd0b0d
         feat(portforwarding): enforce account and group limits jon4hz 2025-12-04 13:42:19 +0100
  • 6cd3b2aeed
         fix(portforwarding): undefined var when managing group port forwards jon4hz 2025-12-04 13:41:40 +0100
  • f438a0aeaa
         fix(portforwarding): no ControlMaster for portforwarding sessions jon4hz 2025-11-26 19:05:28 +0100
  • 471b55f463
         chore(portforwarding): update description jon4hz 2025-11-26 19:03:45 +0100
  • a1e6dea372
         fix(portforwarding): prevent local ports from being assigned if its unsafe jon4hz 2025-11-19 20:39:13 +0100
  • 936af2ede0
         feat(portforwarding): improve machine_display to show local port jon4hz 2025-11-19 20:37:34 +0100
  • 89a68a13c4
         feat(portforwarding): reload sshd after config change and ha support jon4hz 2025-11-17 22:31:26 +0100
  • a5e085eecc
         fix(portforwarding): use correct target jon4hz 2025-11-17 21:29:14 +0100
  • a23226543e
         feat(portforwarding): check if feature is enabled jon4hz 2025-11-17 14:30:36 +0100
  • 946e70adbb
         chore(portforwarding): adjust default portforwarding local port range jon4hz 2025-11-17 11:25:20 +0100
  • dc672945b1
         feat(portforwarding): doublecheck if local port is in use jon4hz 2025-11-16 11:53:45 +0100
  • 33054c268e
         feat(portforwarding): generate sshd config for portforwarding jon4hz 2025-11-16 11:27:15 +0100
  • 6c11d3655d
         fix(portforwarding): make acl more restrictive jon4hz 2025-11-14 13:56:03 +0100
  • 5a7eee8dc1
         fix(portforwarding): improve acl check jon4hz 2025-11-14 13:46:48 +0100
  • 6764f49af0
         fix(portforwarding): make sure portforwarding lock can be used by any user jon4hz 2025-11-14 13:31:58 +0100
  • 0751909027
         fix(portforwarding): aquire portallocation lock only if remotePort is defined jon4hz 2025-11-13 20:22:21 +0100
  • 980d000325
         fix(portforwarding): handle deletion correctly jon4hz 2025-11-13 19:41:53 +0100
  • ba48fa8c90
         feat(portforwarding): implement all commands, access checks, logging and ssh flag parsing jon4hz 2025-11-13 19:14:18 +0100
  • 77346ef819
         feat(portforwarding): acl and random local port allocation jon4hz 2025-11-11 23:02:27 +0100
  • 03e435f07a
         chore: regenerate docs jon4hz 2025-12-04 11:58:29 +0100
  • 66aa63883b
         chore: perl tidy jon4hz 2025-12-04 11:36:52 +0100
  • 9b8baf1607
         fix: return booleans as 1 and 0 in the api jon4hz 2025-12-02 19:34:22 +0100
  • ed01b3321b
         chore: fix perlcritic warnings jon4hz 2025-12-04 11:27:10 +0100
  • 9742d85826
         fix: return booleans as 1 and 0 in the api (#6) Jonah 2025-12-02 20:15:45 +0100
  • d713c224b1
         fix: return accountInfo if grace period is set (#5) Jonah 2025-12-02 11:27:05 +0100
  • aaea138ab5
         fix: return accountInfo if grace period is set jon4hz 2025-12-01 19:03:47 +0100
  • 8238ccedf6
         ci: publish to ghcr jon4hz 2025-11-27 21:20:30 +0100
  • 2a60b3e68c
         feat: implement proxy jump for egress connections (#3) Jonah 2025-11-18 15:50:51 +0100
  • 107a6592a1
         feat: add try-personal-keys policy for groups (#2) Jonah 2025-11-18 15:49:44 +0100
  • bdc360b421
         fix: debian 13 uses lastlog2 (#590) Jonah 2025-11-05 17:07:13 +0100
  • 9161911d3f
         fix: handle lastlog for ubuntu correctly Jonah 2025-11-05 13:18:51 +0100
  • b6e7dfd1cc
         feat: add try-personal-keys policy for groups Signed-off-by: Jonah Zürcher <jonah.zuercher@adfinis.com> jon4hz 2025-10-01 14:12:50 +0200
  • a1d6121714
         fix: also make sure libpam-lastlog2 is installed jon4hz 2025-09-23 21:46:33 +0200
  • fae4c9286c
         fix: debian 13 uses lastlog2 jon4hz 2025-09-23 13:08:14 +0200
  • d4b3ddc29e
         chore: run tidy and perlcritic jon4hz 2025-09-22 23:53:58 +0200
  • b1e4b25642
         feat: allow validation of PIV certificate against a CA jon4hz 2025-09-19 13:59:41 +0200
  • fd14ddf5ed docs: add link to ansible role jon4hz 2025-09-16 16:51:02 +0200
  • 7951d7b087
         enh: clush: keep hosts order and no longer dedupe them clush Stéphane Lesimple 2025-02-21 13:29:04 +0000
  • 9daf0007e1 feat: switch banner if node is sealed jon4hz 2025-09-16 16:44:28 +0200
  • 8143966cb7
         feat: switch banner if node is sealed jon4hz 2025-09-16 16:44:28 +0200
  • f8694351e8 chore: bump version number to v3.22.00 v3.22.00 Stéphane Lesimple 2025-09-17 12:09:48 +0000
  • 2c71d4ec80 release v3.22.00 Stéphane Lesimple 2025-09-17 10:01:06 +0000
  • f97994bba5
         chore: bump version number to v3.22.00 Stéphane Lesimple 2025-09-17 12:09:48 +0000
  • deb23a02fc
         release v3.22.00 Stéphane Lesimple 2025-09-17 10:01:06 +0000
  • c1817bc887 enh: tests: add tests for sign files issue Stéphane Lesimple 2025-09-15 14:45:41 +0000
  • 9bc85ec3f4 fix: sign files when encrypting Stoiko Ivanov 2025-06-24 14:58:42 +0200
  • 4b33796877
         docs: add link to ansible role jon4hz 2025-09-16 16:51:02 +0200
  • c8b86b718a fix: httpproxy: duplicate X-Bastion-Local-Status headers in some cases Stéphane Lesimple 2025-09-11 14:52:51 +0000
  • c1f0789aee feat: httpproxy: craft the Host header on the egress request (#564) Stéphane Lesimple 2025-09-11 13:53:41 +0000
  • bea7d64146 fix: docker sandbox: restore ACLs on start Stéphane Lesimple 2025-09-11 07:54:14 +0000
  • 3b1ea8eeef
         fix: httpproxy: duplicate X-Bastion-Local-Status headers in some cases Stéphane Lesimple 2025-09-11 14:52:51 +0000