00ecc7a0a4
fix(webconsole): harden climc shell command execution against injection ( #25496 )
...
- Run ssh via exec.Command argv instead of "bash -c" string
interpolation, so user-supplied fields can no longer escape into
local shell commands on the webconsole server
- Quote every interpolated value (env, command, args) as a POSIX
shell word, so they stay literal data on the remote shell
- Validate username charset and limit target_ip to climc pod or container
- Add unit tests covering injection payloads
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
Co-authored-by: Claude <noreply@anthropic.com >
2026-09-03 10:52:21 +08:00
wanyaoqi
f5a6465629
fix(webconsole): baremteasl ipmi sol instance_name hide password ( #23533 )
2025-10-16 00:02:42 +08:00
Zexi Li
472c5f8e04
fix(webconsole,apigateway): execute container command by climc ssh way ( #21812 )
2024-12-16 18:49:42 +08:00
Jian Qiu and Qiu Jian
44339376fb
fix: webconsole adb connection string ( #21411 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-10-16 10:22:46 +08:00
Zexi Li
c6b655ab3f
fix(climc,webconsole): use OS_AUTH_TOKEN for cloud shell running inside compose environment ( #20650 )
2024-06-26 12:12:22 +08:00
Jian Qiu and Qiu Jian
c4dfd8e97b
fix: webconsole adb shell choose access ip ( #20583 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2024-06-20 06:27:45 +08:00
Zexi Li
618c1a059a
feat(webconsole,apigateway): display info for container exec ( #20403 )
2024-05-30 15:16:06 +08:00
f3b9f25607
feature: support adb shell ( #20245 )
...
* feature: support adb shell
* fix(build): add kubectl into Dockerfile.kubectl
---------
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
Co-authored-by: Zexi Li <zexi.li@icloud.com >
2024-05-14 20:23:30 +08:00
Zexi Li
644d126932
feat(webconsole): support container exec ( #20206 )
2024-05-08 12:14:30 +08:00
guangwu
23e3e4744d
chore: slice loop replace ( #20204 )
...
Signed-off-by: guoguangwu <guoguangwug@gmail.com >
2024-05-07 18:19:15 +08:00
Zexi Li
0aeaf6370d
fix(webconsole,climc): cloud shell within docker compose environment
2023-08-01 00:26:05 +08:00
ioito
49907b2909
fix(webconsole): websocket ssh
2023-05-09 15:26:36 +08:00
Jian Qiu and Qiu Jian
0c91b88949
fix: webconsole ssh user/pass prompt backspace hanlding ( #15834 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2023-01-29 01:34:57 +08:00
QIU Jian
293afd2e69
fix: remove apiversion param from session
2022-08-25 09:43:50 +08:00
Zexi Li
f27262706a
fix(webconsole): ssh command log with login user ( #14112 )
2022-04-23 19:21:04 +08:00
Zexi Li
52a3e53e79
feat(webconsole): ssh command log
2022-04-22 11:51:33 +08:00
Zexi Li
1b5e9e54bb
fix(webconsole): host ssh use cloudroot user error
2021-11-09 18:34:05 +08:00
Qu Xuan
06dc1c1b87
fix(common): split mcclient modules by service
2021-11-05 19:24:50 +08:00
Qiu Jian
ea6797c606
fix: init cloud shell by apigateway
2021-05-09 01:33:36 +08:00
Yousong Zhou
aa6e45e4d9
webconsole: ssh: add keyboard-interactive as an option
...
For ESXi 6.0
Authentications that can continue: publickey,keyboard-interactive
2020-10-10 14:39:02 +08:00
Yousong Zhou
cce2af5010
webconsole: ssh: each argument on its own line
2020-10-10 14:39:02 +08:00
Qu Xuan
dee1283c0f
fix: 优化webconsole代码&bugfix
2020-07-14 15:07:50 +08:00
Yousong Zhou
1d5d2276d6
webconsole: typo fix accessable -> accessible
2020-03-23 16:35:04 +08:00
Zexi Li
534d10486c
webconsole: fix baremetal ipmitool sol payload active on another session
2019-11-08 11:35:47 +08:00
ioito
3f2aa9c55d
fix: 避免密码登录时使用秘钥认证
2019-09-10 17:21:07 +08:00
Yousong Zhou
7b6e113874
webconsole: 改正文件权限
...
- 密钥不需要执行权限
- 先改权限再写内容
2019-06-12 10:21:17 +00:00
ioito
0d0f9bcb5f
避免频繁连接server
2019-05-28 17:08:19 +08:00
屈轩
3be12645b5
webconsole支持指定端口ssh连接
2019-04-17 13:25:22 +08:00
Zexi
db0e303798
make 'go test ./...' pass
2019-04-15 19:54:46 +08:00
Qiu Jian
004d9b6f95
update copyright headers of all source
2019-03-29 14:47:48 +08:00
Yousong Zhou
8fe4f2ec98
treewide: group imports with goimports
...
./goimports -w -local yunion.io/x/onecloud/ -corp yunion.io/x/ $GOPATH/src/yunion.io/x/onecloud/{cmd,pkg}
2019-03-13 10:46:12 +00:00
屈轩
c9756aa6f0
添加参数，允许不直接登录虚拟机
2019-02-15 10:46:57 +08:00
Zexi Li
36e8bedd08
feature: 查看容器日志支持 --since
2018-12-26 15:46:25 +08:00
邱剑
f60937d42a
Automatic merge from release/2.3.0 -> release/2.4.0
...
* commit '10b6e55453338bc282f7c3979f6d176e5c38c93e':
关机后断开webconsole连接
2018-12-25 15:42:20 +08:00
wanyaoqi
742a67b0f8
client session add context
2018-12-25 13:33:33 +08:00
屈轩
5f9cc3296a
关机后断开webconsole连接
2018-12-24 22:12:55 +08:00
Qiu Jian
965e84ea36
update
2018-12-07 02:57:58 +08:00
屈轩
7caeab976c
忽略known_hosts影响
2018-11-30 16:04:08 +08:00
邱剑
70c2b82557
Automatic merge from release/2.2.0 -> release/2.3.0
...
* commit 'b51cb3a1cf8493cd3085b6268711d4d568d47e15':
忽略known_hosts记录
2018-11-30 15:48:50 +08:00
屈轩
0e68f6d486
冲突解决
2018-11-30 15:33:33 +08:00
屈轩
223c5aeb35
忽略known_hosts记录
2018-11-30 15:23:40 +08:00
屈轩
8e9105d115
使用系统密钥
2018-11-17 12:15:31 +08:00
屈轩
174d132743
替换使用xterm-256color
2018-11-15 20:12:44 +08:00
屈轩
24a6a47ebc
支持ssh秘钥尝试登陆
2018-10-29 23:23:56 +08:00
屈轩
8cd89e90d4
避免ssh登陆失败
2018-10-27 15:39:47 +08:00
屈轩
28d59c5ebd
添加超时处理
2018-09-29 16:50:08 +08:00
屈轩
18f6c065e1
支持ssh webconsole
2018-09-21 15:05:24 +08:00
Zexi Li
1fba463cda
- use sh to connect k8s pod
...
- ensure required binaries exist
2018-09-12 11:00:08 +08:00
Zexi Li
94a5eedae4
webconsole: support baremetal ipmitool sol
2018-09-05 18:14:08 +08:00
Zexi Li
f027ceeff7
vendor added
2018-09-04 19:12:11 +08:00
