ZacharyZcR
0214a81e5d
* fix(i18n): complete Chinese onboarding and navigation labels * fix(i18n): translate remaining Chinese core and plugin interfaces * fix(i18n): translate host editor tab overflow controls * fix(i18n): use consistent Chinese fleet terminology * fix(i18n): localize hardcoded controls and plugin views * fix(i18n): translate built-in homepage widget catalog * test(homepage): follow translated timezone placeholder * fix(i18n): translate plugin-provided homepage widgets * fix(i18n): localize feature settings section titles
OPKSSH
Connect to hosts with short-lived SSH certificates from OpenPubkey SSH, after signing in with your identity provider.
Features
- Adds the OPKSSH login type to the host editor.
- Signs you in with your identity provider in the browser and gets a short-lived SSH certificate from OpenPubkey SSH.
- Keeps the certificate for 24 hours.
Setup
The config file lives at <DATA_DIR>/plugins/opkssh/config.yml and uses the OPKSSH config format. A template is written there the first time someone signs in without one. Installs upgraded from 2.8 have their old <DATA_DIR>/.opk/config.yml copied here.
redirect_uris in that file is the local listener OPKSSH opens on the Termix server. It must be localhost or left out. Register the public callback shown in the admin settings with your identity provider instead.
Binary
The plugin runs one pinned release of opkssh and checks its SHA-256. It looks for the binary in this order:
OPKSSH_BUNDLED_DIR/<asset>, which defaults to<cwd>/opkssh-bundled. The Docker image ships it at/app/opkssh-bundled, so offline installs never download it.<DATA_DIR>/plugins/opkssh/bin/<asset>, a copy downloaded earlier.- A download from the GitHub release.
A copy with the wrong checksum is ignored. Set OPKSSH_VERSION to use another release, and OPKSSH_SHA256 to its checksum.
Settings
Admin
- Redirect URI: register
<base URL>/plugin-api/opkssh/callbackwith your identity provider. - Use the old redirect URI: keep sending the 2.8 URI
<base URL>/host/opkssh-callback. Upgraded installs keep this on until you turn it off.
Development
npm run build # build into dist/
npm run test # run this plugin's tests
npm run typecheck # type-check this plugin