tailscale/tailcfg
Percy Wegmann 7d83056a1b ssh/tailssh: fix SSH on busybox systems
This involved the following:

1. Pass the su command path as first of args in call to unix.Exec to make sure that busybox sees the correct program name.
   Busybox is a single executable userspace that implements various core userspace commands in a single binary. You'll
   see it used via symlinking, so that for example /bin/su symlinks to /bin/busybox. Busybox knows that you're trying
   to execute /bin/su because argv[0] is '/bin/su'. When we called unix.Exec, we weren't including the program name for
   argv[0], which caused busybox to fail with 'applet not found', meaning that it didn't know which command it was
   supposed to run.
2. Tell su to whitelist the SSH_AUTH_SOCK environment variable in order to support ssh agent forwarding.
3. Run integration tests on alpine, which uses busybox.
4. Increment CurrentCapabilityVersion to allow turning on SSH V2 behavior from control.

Fixes #12849

Signed-off-by: Percy Wegmann <percy@tailscale.com>
2024-08-21 11:44:41 -05:00
..
c2ntypes.go posture: add network hardware addresses to posture identity 2024-07-10 18:28:30 +01:00
derpmap.go all: make more tests pass/skip in airplane mode 2024-05-06 09:19:53 -07:00
proto_port_range.go tailcfg: implement text encoding for ProtoPortRange 2023-10-11 23:59:42 -07:00
proto_port_range_test.go tailcfg: implement text encoding for ProtoPortRange 2023-10-11 23:59:42 -07:00
tailcfg.go ssh/tailssh: fix SSH on busybox systems 2024-08-21 11:44:41 -05:00
tailcfg_clone.go cmd/cloner, cmd/viewer, util/codegen: add support for generic types and interfaces 2024-07-11 16:38:53 -05:00
tailcfg_test.go kube,tailcfg: store parsed recorder tags in a separate field (#12429) 2024-06-11 22:50:57 +01:00
tailcfg_view.go cmd/viewer,type/views: add MapSlice for maps of slices 2024-06-15 22:24:29 -07:00
tka.go tailcfg: add RPC structs for /tka/affected-sigs 2023-02-21 21:58:38 +00:00