jasonwitty
5637dea10b
- CI now builds the image locally on the (arm64) runner and runs scripts/verify-image-socktop-flags.sh before pushing: every --flag the restricted/session shells pass must be documented by the socktop binary actually installed in the image. Catches the 0.3.9 failure class (cached apt layer shipping a pre-flag socktop) at build time. - Manifest adds CHOWN/DAC_OVERRIDE/FOWNER alongside SETUID/SETGID: with ALL dropped, uid 0 has no implicit file privilege and prepare_demo_home crash-looped on the demo-owned 700 home dir. Sessions still run with zero capabilities via setpriv. - Agent liveness probe uses /proc instead of kill -0: without CAP_KILL even root gets EPERM signalling the socktop-user agent, so the old check false-alarmed in the pod logs. - 0.3.11 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
43 lines
1.2 KiB
TOML
43 lines
1.2 KiB
TOML
[package]
|
|
name = "webterm"
|
|
description = "socktop xterm.js - based webterminal"
|
|
repository = "https://gt.wittyoneoff.com/jason/socktop-webterm"
|
|
documentation = "https://docs.rs/webterm"
|
|
readme = "README.md"
|
|
categories = ["web-programming", "web-programming::websocket", "web-programming::http-server", "command-line-utilities"]
|
|
keywords = ["terminal", "xterm", "websocket", "terminus", "console"]
|
|
version = "0.3.11"
|
|
authors = ["fabian.freyer@physik.tu-berlin.de","jasonpwitty+socktop@proton.me"]
|
|
edition = "2021"
|
|
license = "BSD-3-Clause"
|
|
|
|
[dependencies]
|
|
actix-files = "0.6"
|
|
actix-web = "4.9"
|
|
actix-web-actors = "4.3"
|
|
actix = "0.13"
|
|
actix-rt = "2.10"
|
|
futures = "0.3"
|
|
handlebars = "6.3"
|
|
serde = { version = "1.0", features = ["derive"] }
|
|
serde_json = "1.0"
|
|
clap = { version = "4.5", features = ["derive"] }
|
|
tokio = { version = "1.42", features = ["full"] }
|
|
tokio-util = { version = "0.7", features = ["codec"] }
|
|
portable-pty = "0.8"
|
|
bytes = "1.9"
|
|
log = "0.4"
|
|
env_logger = "0.11"
|
|
libc = "0.2"
|
|
pop-telemetry = { git = "https://github.com/jasonwitty/pop-cli", branch = "main" }
|
|
dirs = "5.0"
|
|
regex = "1.10"
|
|
|
|
[lib]
|
|
name = "webterm"
|
|
path = "src/lib.rs"
|
|
|
|
[[bin]]
|
|
name = "webterm-server"
|
|
path = "src/server.rs"
|