Shell host

[m@…]

I want to ssh @devhack.net and get a shell with an account.

zack and cleeb very interested

I want to be able to wall other user accounts.

rootless podman would be cool too.

From ​https://matrix.to/#/#infra:devhack.net/$IpBIgre1Xx83W_B9zw30OekngVOIz25JiKWajoP_QW0:

The website says members get access to a shellhost which we don't have. I think I'm going to make that a goal in the coming week

it will require:

A VM, probably?
Joined to the domain so users can log in with their accounts
Some place to store user homedirs
quotas

Seeing as we're already forwarding port 22 to some other host on the network, and I don't particularly like the idea of making everyone use an alternate port for SSH, I wonder if this is an opportunity to set up an apache guacamole-type "front door" to the network

btw @Zack relating to shellhost I was once upon a time attempting this on aleph but didn't really get anywhere, blocked on auth. everything here sounds good though
especially with debian w/ rootless podman installed you can have some *fancy* shellhosts

21 Aug 2024 07:36 PM
I just have a lil bit of inspiration for fuckery on a shellhost like public_html dirs or uhhh socket-routable file-specified subdomains a-la ​https://git.exozy.me/exozyme/exozyme/wiki/Website-hosting
@zack:praxis.gay|
21 Aug 2024 07:37 PM
a public_html directory for hosting your own website would be cool. I was sorta planning to make that a possibility by hosting folks' homedirs over NFS on some central server

I’m really interested in the public_html as well as giving everyone a shell - it might not be as usual but would anyone else be interested in doing it as dynamic kubernetes pods? ​https://containerssh.io/v0.5/
you ssh into ssh.devhack.net, your container spawns with your own customized image (or sane defaults for new people), and you have mounts for local scratch and nfs and public_html
I wonder if you could mount those as like /dev/hack/public_html
@zack:praxis.gay|
21 Aug 2024 08:32 PM
I think it would be easier to just mount their entire homedir over the network

the only thing I don’t like about it is that you can’t keep stuff running while you disconnect
21 Aug 2024 08:32 PM
that way on non-containerssh hosts like random VMs you can still have your homedir
21 Aug 2024 08:32 PM
sure that’s fine
@m:devhack.net|
21 Aug 2024 08:32 PM
part of my interests of a shellhost is to provide a pretty vanilla environment where people can potentially see others logged in / have the option to interact with others that are logged in (edited)

[ellie]

at least from my perspective we're blocked on somewhere to put home dirs, hopefully NAS soon?

[pandlantis@…]

Replying to cleeb@…:

at least from my perspective we're blocked on somewhere to put home dirs, hopefully NAS soon?

Made a need NAS ticket and assigned to me. https://bugs.devhack.net/ticket/414

Can we say that the NAS ticket is a Blocker task for this issue or just a Major task?