Authorize an ssh session using your keys on GitHub.

Wenzhuo Liu

Last update: Nov 11, 2022

Related tags

Cryptography hubakc

Overview

GitHub AuthorizedKeysCommand (hubakc)

Heavily inspired by https://github.com/sequencer/gitakc . It allows someone login to the server using their ssh keys on GitHub.

Put config.toml in /etc/hubakc/config.toml, and add user map.
Put the binary in /usr/local/bin/hubakc. Make sure that the owner is root and the permission is 755.
Edit the sshd config as follows:

AuthorizedKeysCommand /usr/local/bin/hubakc
AuthorizedKeysCommandUser nobody

Example

Given the config file config.toml

ttl = 3600
timeout = 15
cache_folder = "/tmp/hubakc"
[user_map]
mgt = "Enter-tainer"

> hubakc mgt
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJgIynaQvTeYZ5iPigLnYRkRThxE04U7ACjuHRkQBAk+
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL2C/osNvVrilQDE3T/tTK9TRQ0+xVSbFU6wN5oIr2Fv
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINKvQJ1fgkAS2yuy+cbl8iYaiw0IR4lkQIJIKgj7liax
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKSkhuW2F4UCnIa4b2m0gUt4A5Bv+UYGsUYEl9VmLJbu

Comments

build(deps): bump serde from 1.0.149 to 1.0.151
Bumps serde from 1.0.149 to 1.0.151.

Release notes

Sourced from serde's releases.

v1.0.151

Update serde::{ser,de}::StdError to re-export core::error::Error when serde is built with feature="std" off and feature="unstable" on (#2344)

v1.0.150

Relax some trait bounds from the Serialize impl of HashMap and BTreeMap (#2334)

Enable Serialize and Deserialize impls of std::sync::atomic types on more platforms (#2337, thanks @badboy)

Commits

44bf363 Release 1.0.151

f261184 Merge pull request #2344 from dtolnay/coreerror

df40f80 Make StdError identical to core::error::Error on feature="unstable"

e7060ba Merge pull request #2342 from atouchet/badges

d98f0ee Update build status badge

4f157a8 Prevent build.rs rerunning unnecessarily on all source changes

d493649 Release 1.0.150

0e947e6 Merge pull request #2338 from serde-rs/atomic

9249dab Deduplicate atomic_impl macro calls

7440e56 Deduplicate atomic_impl macro implementations

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
build(deps): bump serde from 1.0.149 to 1.0.150
Bumps serde from 1.0.149 to 1.0.150.

Release notes

Sourced from serde's releases.

v1.0.150

Relax some trait bounds from the Serialize impl of HashMap and BTreeMap (#2334)

Enable Serialize and Deserialize impls of std::sync::atomic types on more platforms (#2337, thanks @badboy)

Commits

d493649 Release 1.0.150

0e947e6 Merge pull request #2338 from serde-rs/atomic

9249dab Deduplicate atomic_impl macro calls

7440e56 Deduplicate atomic_impl macro implementations

0d79306 Update atomic_impl macros to have same input syntax in all cfgs

37faaf2 Mention target_has_atomic stabilization

650358f Replace obsolete comment about target_has_atomic support

6159ead Invert use_target_has_atomic cfg

692ac99 Format PR 2337 with rustfmt

86161ce Adjust spacing in some macro matchers

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
build(deps): bump serde from 1.0.147 to 1.0.148
Bumps serde from 1.0.147 to 1.0.148.

Release notes

Sourced from serde's releases.

v1.0.148

Support remote derive for generic types that have private fields (#2327)

Commits

7766103 Release 1.0.148

30f7c71 Merge pull request #2331 from dtolnay/remote

50354c2 Improve error message on remote derive duplicate generics

c4f67e6 Add ui test of duplicate generics in remote derive

0daafe4 Merge pull request #2330 from dtolnay/remote

3702191 Fix Into conversion involving generic remote derive with getter

7328b34 Add test of generic remote derive with getter

fabbd2b Merge pull request #2329 from dtolnay/safety

6814f97 Revert Buf::as_str safety change from PR 2319

4ea403c Merge pull request #2328 from dtolnay/remote

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 1
build(deps): bump serde from 1.0.147 to 1.0.149
Bumps serde from 1.0.147 to 1.0.149.

Release notes

Sourced from serde's releases.

v1.0.149

Relax some trait bounds from the Serialize impl of BinaryHeap, BTreeSet, and HashSet (#2333, thanks @jonasbb)

v1.0.148

Support remote derive for generic types that have private fields (#2327)

Commits

0353354 Release 1.0.149

34ae042 Merge pull request #2333 from jonasbb/remove-trait-bounds

cc128fe Remove some Serialize trait bounds

7766103 Release 1.0.148

30f7c71 Merge pull request #2331 from dtolnay/remote

50354c2 Improve error message on remote derive duplicate generics

c4f67e6 Add ui test of duplicate generics in remote derive

0daafe4 Merge pull request #2330 from dtolnay/remote

3702191 Fix Into conversion involving generic remote derive with getter

7328b34 Add test of generic remote derive with getter

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
build(deps): bump serde from 1.0.149 to 1.0.152
Bumps serde from 1.0.149 to 1.0.152.

Release notes

Sourced from serde's releases.

v1.0.152

Documentation improvements

v1.0.151

Update serde::{ser,de}::StdError to re-export core::error::Error when serde is built with feature="std" off and feature="unstable" on (#2344)

v1.0.150

Relax some trait bounds from the Serialize impl of HashMap and BTreeMap (#2334)

Enable Serialize and Deserialize impls of std::sync::atomic types on more platforms (#2337, thanks @badboy)

Commits

ccf9c6f Release 1.0.152

b25d0ea Link to Hjson data format

4f4557f Link to bencode data format

bf400d6 Link to serde_tokenstream data format

4d2e36d Wrap flexbuffers bullet point to 80 columns

df6310e Merge pull request #2347 from dtolnay/docsrs

938ab5d Replace docs.serde.rs links with intra-rustdoc links

ef5a0de Point documentation links to docs.rs instead of docs.serde.rs

5d186c7 Opt out -Zrustdoc-scrape-examples on docs.rs

44bf363 Release 1.0.151

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
build(deps): bump toml from 0.5.9 to 0.5.10
Bumps toml from 0.5.9 to 0.5.10.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0
build(deps): bump anyhow from 1.0.66 to 1.0.68
Bumps anyhow from 1.0.66 to 1.0.68.

Release notes

Sourced from anyhow's releases.

1.0.68

Opt out of -Zrustdoc-scrape-examples on docs.rs for now

1.0.67

Improve the backtrace captured when context() is used on an Option (#280)

Commits

867763b Release 1.0.68

c0a87d0 Opt out -Zrustdoc-scrape-examples on docs.rs

1cc707b Release 1.0.67

613b261 Update build status badge

0f922d7 Disable backtrace CI on Rust 1.50

acecd9b Update ui test suite to nightly-2022-12-15

0bac51f Time out workflows after 45 minutes

60e8800 Fix renamed let_underscore_drop lint

8d1c734 Update ui test suite to nightly-2022-11-16

451651b Update ui test suite to nightly-2022-11-11

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies
opened by dependabot[bot] 0

Releases(v0.1.5)

v0.1.5(Nov 9, 2022)

Source code(tar.gz)
Source code(zip)
hubakc(610.32 KB)
v0.1.4(Nov 8, 2022)

Source code(tar.gz)
Source code(zip)
hubakc(594.32 KB)
v0.1.3(Nov 4, 2022)

Source code(tar.gz)
Source code(zip)
hubakc(610.32 KB)
v0.1.2(Nov 3, 2022)

Source code(tar.gz)
Source code(zip)
hubakc(1.85 MB)
v0.1.1(Nov 3, 2022)

Source code(tar.gz)
Source code(zip)
hubakc(1.83 MB)
v0.1.0(Nov 3, 2022)

Source code(tar.gz)
Source code(zip)
hubakc(7.67 MB)

Owner

Wenzhuo Liu

Pursuing Bachelor's Degree @ HUST | @OI-wiki | previous intern @risingwavelabs & @bytedance

GitHub

use your GitHub SSH keys to authenticate to sshd

aeneid If you squint, GitHub is basically a free, zero-ops IdP that provides SSH public keys. Let's use it to authenticate to OpenSSH! What / How? The

21 Dec 6, 2022

Retrieving SSH and GPS keys from GitHub and GitLab

Dormarch Retrieving SSH and GPS keys from GitHub and GitLab Usage After having installed Dormarch, you can see all the options with dormarch -h. To re

2 Dec 24, 2021

Git FIDO Helper - Sign your Git commits with multiple resident SSH keys

gfh Git FIDO helper, or God Fucking Help me. gfh is a tool for helping you sign your commits in Git with resident SSH keys stored on multiple FIDO dev

16 Nov 30, 2022

Use Touch ID / Secure Enclave for SSH Authentication!

SeKey About SeKey is a SSH Agent that allow users to authenticate to UNIX/Linux SSH servers using the Secure Enclave How it Works? The Secure Enclave

2.3k Jan 5, 2023

In addition to encryption library, pure RUST implementation of SSH-2.0 client protocol

73 Jan 1, 2023

Pure Rust implementation of components of the Secure Shell (SSH) protocol

RustCrypto: SSH Pure Rust implementation of components of the Secure Shell (SSH) protocol. Crates Name crates.io Docs Description ssh—encoding Decoder

27 Dec 27, 2022

A collection of algorithms that can do join between two parties while preserving the privacy of keys on which the join happens

Private-ID Private-ID is a collection of algorithms to match records between two parties, while preserving the privacy of these records. We present tw

169 Dec 5, 2022

Convert private keys to PKCS#8 format in pure Rust

topk8 Convert private keys to PKCS#8 format in pure Rust. The following formats are supported at the moment: PKCS#1 PEM (RSA PRIVATE KEY) SEC1 PEM (EC

1 Dec 10, 2021

A tool to identify related SSL keys, CSRs, and certificates.

⛓ sslchains A tool to identify related SSL keys, CSRs, and certificates. Usage Default Display Mode Run with any number of path arguments to define th

1 Apr 2, 2022

MimiRust - Hacking the Windows operating system to hand us the keys to the kingdom with Rust

160 Dec 29, 2022

Project Masterpass is a deterministic databaseless key management algorithm, aimed to help those who cannot protect their encryption keys in storage

Project Masterpass (working title) Attention! This project is still under heavy development, and SHOULD NOT be used in practice, as the algorithms cou

2 Sep 11, 2022

Ethereum key tool - Lightweight CLI tool to deal with ETH keys written in rust

ekt - Etherum Key Tool ekt is a lightweight tool to generate ethereum keys and addresses. Installation Either clone it and run it with cargo or instal

5 May 8, 2023

Provision your authorized_keys via HTTPS/GitHub/GitLab

Keyps Key Provisioning Service Provision authorized_keys from HTTPS/GitHub/GitLab and automatically keep them up to date. Motivation Problem Provision

6 Apr 27, 2023

Bitcoin Push Notification Service (BPNS) allows you to receive notifications of Bitcoin transactions of your non-custodial wallets on a provider of your choice, all while respecting your privacy

Bitcoin Push Notification Service (BPNS) Description Bitcoin Push Notification Service (BPNS) allows you to receive notifications of Bitcoin transacti

1 May 2, 2022

Koofr Vault is an open-source, client-side encrypted folder for your Koofr cloud storage offering an extra layer of security for your most sensitive files.

Koofr Vault https://vault.koofr.net Koofr Vault is an open-source, client-side encrypted folder for your Koofr cloud storage offering an extra layer o

12 Dec 30, 2022

Authorize an ssh session using your keys on GitHub.

Related tags

Overview

GitHub AuthorizedKeysCommand (hubakc)

Example

Comments

build(deps): bump serde from 1.0.149 to 1.0.151

v1.0.151

v1.0.150

build(deps): bump serde from 1.0.149 to 1.0.150

v1.0.150

build(deps): bump serde from 1.0.147 to 1.0.148

v1.0.148

build(deps): bump serde from 1.0.147 to 1.0.149

v1.0.149

v1.0.148

build(deps): bump serde from 1.0.149 to 1.0.152

v1.0.152

v1.0.151

v1.0.150

build(deps): bump toml from 0.5.9 to 0.5.10

build(deps): bump anyhow from 1.0.66 to 1.0.68

1.0.68

1.0.67

Releases(v0.1.5)

v0.1.5(Nov 9, 2022)

v0.1.4(Nov 8, 2022)

v0.1.3(Nov 4, 2022)

v0.1.2(Nov 3, 2022)

v0.1.1(Nov 3, 2022)

v0.1.0(Nov 3, 2022)

Owner

Wenzhuo Liu

use your GitHub SSH keys to authenticate to sshd

Retrieving SSH and GPS keys from GitHub and GitLab

Git FIDO Helper - Sign your Git commits with multiple resident SSH keys

Use Touch ID / Secure Enclave for SSH Authentication!

In addition to encryption library, pure RUST implementation of SSH-2.0 client protocol

Pure Rust implementation of components of the Secure Shell (SSH) protocol

A collection of algorithms that can do join between two parties while preserving the privacy of keys on which the join happens

Convert private keys to PKCS#8 format in pure Rust

A tool to identify related SSL keys, CSRs, and certificates.

MimiRust - Hacking the Windows operating system to hand us the keys to the kingdom with Rust

Project Masterpass is a deterministic databaseless key management algorithm, aimed to help those who cannot protect their encryption keys in storage

Ethereum key tool - Lightweight CLI tool to deal with ETH keys written in rust

Provision your authorized_keys via HTTPS/GitHub/GitLab

Bitcoin Push Notification Service (BPNS) allows you to receive notifications of Bitcoin transactions of your non-custodial wallets on a provider of your choice, all while respecting your privacy

A github rust workflows template, just want to focus on coding

Template to maintain a rust project running CI/CD with Github Workflows.

deductive verification of Rust code. (semi) automatically prove your code satisfies your specifications!

Employ your built-in wetware pattern recognition and signal processing facilities to understand your network traffic

Koofr Vault is an open-source, client-side encrypted folder for your Koofr cloud storage offering an extra layer of security for your most sensitive files.