Method HandleTailscaleSSHConn

tailcat_ssh.go:46–64

HandleTailscaleSSHConn handles an incoming TCP connection as an SSH session. Authentication is not required — the WireGuard tunnel provides identity. The connection is served using the gliderlabs/ssh library with a single ed25519 host key generated on first use in ~/.config/tailcat/ssh/. Two modes

(c net.Conn)

// via the user's shell with "-c"; otherwise an interactive login shell is
// started with a PTY.
func (s *Server) HandleTailscaleSSHConn(c net.Conn) {
	keys, err := getHostKeys()
	if err != nil {
		s.lb.logf("SSH host keys: %v", err)
		c.Close()
		return
	}
	srv := &ssh.Server{
		Handler:             sessionHandler,
		NoClientAuthHandler: func(ctx ssh.Context) error { return nil },
		ChannelHandlers:     map[string]ssh.ChannelHandler{"session": ssh.DefaultSessionHandler},
		RequestHandlers:     map[string]ssh.RequestHandler{},
		SubsystemHandlers:   map[string]ssh.SubsystemHandler{},
	}
	for _, k := range keys {
		srv.AddHostKey(k)
	}
	srv.HandleConn(c)
}

// sessionHandler handles a single SSH session (shell or exec).
func sessionHandler(sess ssh.Session) {