Skip to content

refactor: ssh proxy command + win service least privilege#20

Merged
rustonbsd merged 6 commits intomainfrom
proxy-command-refactor-win-service
Oct 23, 2025
Merged

refactor: ssh proxy command + win service least privilege#20
rustonbsd merged 6 commits intomainfrom
proxy-command-refactor-win-service

Conversation

@rustonbsd
Copy link
Owner

@rustonbsd rustonbsd commented Oct 14, 2025

  • run window service as "NT Service\iroh-ssh"
  • add fs permissions
  • add firewall rules
  • refactor to use proxy command internally ( no difference for end user )
  • implement all ssh params and pass them through
  • change cli output to add new params @rustonbsd
  • adjust READMEs (@rjmalagon could you maybe take this on?)
  • test on all platforms (updated to iroh 0.93.2, this might break backwards compatibility but iroh is flaky at the 0.90 release we used last) @rustonbsd @rjmalagon

This is the big refactor, i wanted to move everything forward by one generation with this PR. We now have all ssh commands and use windows service correctly (least privilege). For windows setups there should only be one more potentially breaking update and that is when iroh releases its 1.0.0 sometime in the next couple of months.

Big TODOs for the future:

  • Linux least privilege service adjustment
  • Macos service implementation + least privilege

PR TODOs:
@rjmalagon I want to make sure we nail the "all ssh params" and "windows service" implementations! Could you do some testing on your end and let me know if everything looks good to you? Github actions should create a windows build that you can test with. I create a pre release and link it here in a comment for testing.

@rustonbsd rustonbsd mentioned this pull request Oct 14, 2025
11 tasks
@rustonbsd
Copy link
Owner Author

@rustonbsd rustonbsd merged commit 2455bec into main Oct 23, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant