mirror of
https://github.com/coder/coder.git
synced 2026-09-24 15:04:27 +08:00
fix(agent/agentssh)!: use configured directory for SFTP connections (#21194)
BREAKING CHANGE: SFTP/SCP now respects the agent's configured directory. If your workspace agent has a custom `dir` configured in Terraform, SFTP and SCP connections will now land there instead of `$HOME`. Previously, only SSH and rsync respected this setting, which caused confusing behavior where `scp file.txt coder:.` and `rsync file.txt coder:.` would put files in different places. If you have scripts that relied on SFTP/SCP always using `$HOME` regardless of agent configuration, you may need to use explicit paths instead.
This commit is contained in:
+70
-35
@@ -994,42 +994,77 @@ func TestAgent_UnixRemoteForwarding(t *testing.T) {
|
||||
|
||||
func TestAgent_SFTP(t *testing.T) {
|
||||
t.Parallel()
|
||||
ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong)
|
||||
defer cancel()
|
||||
u, err := user.Current()
|
||||
require.NoError(t, err, "get current user")
|
||||
home := u.HomeDir
|
||||
if runtime.GOOS == "windows" {
|
||||
home = "/" + strings.ReplaceAll(home, "\\", "/")
|
||||
}
|
||||
//nolint:dogsled
|
||||
conn, agentClient, _, _, _ := setupAgent(t, agentsdk.Manifest{}, 0)
|
||||
sshClient, err := conn.SSHClient(ctx)
|
||||
require.NoError(t, err)
|
||||
defer sshClient.Close()
|
||||
client, err := sftp.NewClient(sshClient)
|
||||
require.NoError(t, err)
|
||||
defer client.Close()
|
||||
wd, err := client.Getwd()
|
||||
require.NoError(t, err, "get working directory")
|
||||
require.Equal(t, home, wd, "working directory should be home user home")
|
||||
tempFile := filepath.Join(t.TempDir(), "sftp")
|
||||
// SFTP only accepts unix-y paths.
|
||||
remoteFile := filepath.ToSlash(tempFile)
|
||||
if !path.IsAbs(remoteFile) {
|
||||
// On Windows, e.g. "/C:/Users/...".
|
||||
remoteFile = path.Join("/", remoteFile)
|
||||
}
|
||||
file, err := client.Create(remoteFile)
|
||||
require.NoError(t, err)
|
||||
err = file.Close()
|
||||
require.NoError(t, err)
|
||||
_, err = os.Stat(tempFile)
|
||||
require.NoError(t, err)
|
||||
|
||||
// Close the client to trigger disconnect event.
|
||||
_ = client.Close()
|
||||
assertConnectionReport(t, agentClient, proto.Connection_SSH, 0, "")
|
||||
t.Run("DefaultWorkingDirectory", func(t *testing.T) {
|
||||
t.Parallel()
|
||||
ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong)
|
||||
defer cancel()
|
||||
u, err := user.Current()
|
||||
require.NoError(t, err, "get current user")
|
||||
home := u.HomeDir
|
||||
if runtime.GOOS == "windows" {
|
||||
home = "/" + strings.ReplaceAll(home, "\\", "/")
|
||||
}
|
||||
//nolint:dogsled
|
||||
conn, agentClient, _, _, _ := setupAgent(t, agentsdk.Manifest{}, 0)
|
||||
sshClient, err := conn.SSHClient(ctx)
|
||||
require.NoError(t, err)
|
||||
defer sshClient.Close()
|
||||
client, err := sftp.NewClient(sshClient)
|
||||
require.NoError(t, err)
|
||||
defer client.Close()
|
||||
wd, err := client.Getwd()
|
||||
require.NoError(t, err, "get working directory")
|
||||
require.Equal(t, home, wd, "working directory should be user home")
|
||||
tempFile := filepath.Join(t.TempDir(), "sftp")
|
||||
// SFTP only accepts unix-y paths.
|
||||
remoteFile := filepath.ToSlash(tempFile)
|
||||
if !path.IsAbs(remoteFile) {
|
||||
// On Windows, e.g. "/C:/Users/...".
|
||||
remoteFile = path.Join("/", remoteFile)
|
||||
}
|
||||
file, err := client.Create(remoteFile)
|
||||
require.NoError(t, err)
|
||||
err = file.Close()
|
||||
require.NoError(t, err)
|
||||
_, err = os.Stat(tempFile)
|
||||
require.NoError(t, err)
|
||||
|
||||
// Close the client to trigger disconnect event.
|
||||
_ = client.Close()
|
||||
assertConnectionReport(t, agentClient, proto.Connection_SSH, 0, "")
|
||||
})
|
||||
|
||||
t.Run("CustomWorkingDirectory", func(t *testing.T) {
|
||||
t.Parallel()
|
||||
ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong)
|
||||
defer cancel()
|
||||
|
||||
// Create a custom directory for the agent to use.
|
||||
customDir := t.TempDir()
|
||||
expectedDir := customDir
|
||||
if runtime.GOOS == "windows" {
|
||||
expectedDir = "/" + strings.ReplaceAll(customDir, "\\", "/")
|
||||
}
|
||||
|
||||
//nolint:dogsled
|
||||
conn, agentClient, _, _, _ := setupAgent(t, agentsdk.Manifest{
|
||||
Directory: customDir,
|
||||
}, 0)
|
||||
sshClient, err := conn.SSHClient(ctx)
|
||||
require.NoError(t, err)
|
||||
defer sshClient.Close()
|
||||
client, err := sftp.NewClient(sshClient)
|
||||
require.NoError(t, err)
|
||||
defer client.Close()
|
||||
wd, err := client.Getwd()
|
||||
require.NoError(t, err, "get working directory")
|
||||
require.Equal(t, expectedDir, wd, "working directory should be custom directory")
|
||||
|
||||
// Close the client to trigger disconnect event.
|
||||
_ = client.Close()
|
||||
assertConnectionReport(t, agentClient, proto.Connection_SSH, 0, "")
|
||||
})
|
||||
}
|
||||
|
||||
func TestAgent_SCP(t *testing.T) {
|
||||
|
||||
@@ -829,13 +829,19 @@ func (s *Server) sftpHandler(logger slog.Logger, session ssh.Session) error {
|
||||
session.DisablePTYEmulation()
|
||||
|
||||
var opts []sftp.ServerOption
|
||||
// Change current working directory to the users home
|
||||
// directory so that SFTP connections land there.
|
||||
homedir, err := userHomeDir()
|
||||
if err != nil {
|
||||
logger.Warn(ctx, "get sftp working directory failed, unable to get home dir", slog.Error(err))
|
||||
} else {
|
||||
opts = append(opts, sftp.WithServerWorkingDirectory(homedir))
|
||||
// Change current working directory to the configured
|
||||
// directory (or home directory if not set) so that SFTP
|
||||
// connections land there.
|
||||
dir := s.config.WorkingDirectory()
|
||||
if dir == "" {
|
||||
var err error
|
||||
dir, err = userHomeDir()
|
||||
if err != nil {
|
||||
logger.Warn(ctx, "get sftp working directory failed, unable to get home dir", slog.Error(err))
|
||||
}
|
||||
}
|
||||
if dir != "" {
|
||||
opts = append(opts, sftp.WithServerWorkingDirectory(dir))
|
||||
}
|
||||
|
||||
server, err := sftp.NewServer(session, opts...)
|
||||
|
||||
Reference in New Issue
Block a user