SSH service for a single binary #1

New issue

Open

opened 2026-09-04 20:06:45 +02:00 by kayprish · 2 comments

kayprish commented

2026-09-04 20:06:45 +02:00

Owner

brk mentions there is a certain go library, which allows you to package a binary and serve it over ssh, in a way such that a user is sandboxed and can't access anything else in the OS environment.
needs more research, in progress.
this part will probably be written in go, although I am not completely clear on why we can't simply have a completely limited unix user whose login program is precisely our program.

brk mentions there is a certain go library, which allows you to package a binary and serve it over ssh, in a way such that a user is sandboxed and can't access anything else in the OS environment. needs more research, in progress. this part will probably be written in go, *although* I am not completely clear on why we can't simply have a completely limited unix user whose login program is precisely our program.

kayprish added the

enhancement

label

2026-09-04 20:06:45 +02:00

kayprish self-assigned this

2026-09-04 20:06:45 +02:00

brk commented

2026-09-04 22:38:41 +02:00

Owner

https://github.com/charmbracelet/wish

this is the library

https://github.com/charmbracelet/wish this is the library

brk commented

2026-09-04 22:39:09 +02:00

Owner

this part will probably be written in go, although I am not completely clear on why we can't simply have a completely limited unix user whose login program is precisely our program.

think of your CV cibb

> this part will probably be written in go, although I am not completely clear on why we can't simply have a completely limited unix user whose login program is precisely our program. think of your CV cibb

kayprish added the

priority

high

label

2026-09-14 15:49:47 +02:00