From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id 2K0aIy7wD2O4FgAAbAwnHQ (envelope-from ) for ; Thu, 01 Sep 2022 01:35:10 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id YFPZIi7wD2N/MQEAauVa8A (envelope-from ) for ; Thu, 01 Sep 2022 01:35:10 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4D3E7E9A7 for ; Thu, 1 Sep 2022 01:35:10 +0200 (CEST) Received: from localhost ([::1]:45234 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oTXEj-0005eI-1v for larch@yhetil.org; Wed, 31 Aug 2022 19:35:09 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:34848) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oTXEd-0005e9-BY for guix-patches@gnu.org; Wed, 31 Aug 2022 19:35:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:50987) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oTXEd-0000OM-2a for guix-patches@gnu.org; Wed, 31 Aug 2022 19:35:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1oTXEc-0008Nr-II for guix-patches@gnu.org; Wed, 31 Aug 2022 19:35:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#39136] [PATCH] gnu: services: Add endlessh. Resent-From: jbranso@dismail.de Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 31 Aug 2022 23:35:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 39136 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: "Ludovic =?UTF-8?Q?Court=C3=A8s?=" Cc: 39136@debbugs.gnu.org Received: via spool by 39136-submit@debbugs.gnu.org id=B39136.166198888832199 (code B ref 39136); Wed, 31 Aug 2022 23:35:02 +0000 Received: (at 39136) by debbugs.gnu.org; 31 Aug 2022 23:34:48 +0000 Received: from localhost ([127.0.0.1]:40736 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oTXEO-0008NH-Et for submit@debbugs.gnu.org; Wed, 31 Aug 2022 19:34:48 -0400 Received: from mx1.dismail.de ([78.46.223.134]:17537) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oTXEL-0008N0-O2 for 39136@debbugs.gnu.org; Wed, 31 Aug 2022 19:34:47 -0400 Received: from mx1.dismail.de (localhost [127.0.0.1]) by mx1.dismail.de (OpenSMTPD) with ESMTP id 924e9f0c; Thu, 1 Sep 2022 01:34:38 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=dismail.de; h= mime-version:date:content-type:content-transfer-encoding:from :message-id:subject:to:cc:in-reply-to:references; s=20190914; bh=pRBogABCYoErypTkDyHzWfRAXnGaIIbkk9CKjgbdUjc=; b=WTC7yOdzc8Ca zXsZje+WkjVorMLQud35y+jxoYJzamgRE5uJJUwUqcczJctWnJpPiw0ShAvekc/V mTCoRH/LkPjOFG6fph00s9LEPIPI7ONK+KZKAlQflDNpnCfZEXXLYD1Wh5EWR0Gg guo4GcFePcs0umHyn92hT++NccXh2quYZtdWtoiQ7JZuydAm+nCWt5dJHMK5icfd 0UEDWVKXacjX6I2IxdTPmAZ/upevgvaQ2EtGzNBhTxsbQNHiux+50MbRTZCQIpfW e4uVo5FIWlOtmMLaVvttgJ1qCWGzWNGMrizNmILc/Bp4cLfZUmKuG7dPpbszojvK E6KS2QtiUw== Received: from smtp1.dismail.de ( [10.240.26.11]) by mx1.dismail.de (OpenSMTPD) with ESMTP id aceae057; Thu, 1 Sep 2022 01:34:37 +0200 (CEST) Received: from smtp1.dismail.de (localhost [127.0.0.1]) by smtp1.dismail.de (OpenSMTPD) with ESMTP id dde0b43b; Thu, 1 Sep 2022 01:34:37 +0200 (CEST) Received: by dismail.de (OpenSMTPD) with ESMTPSA id 7caab8b5 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO); Thu, 1 Sep 2022 01:34:37 +0200 (CEST) MIME-Version: 1.0 Date: Wed, 31 Aug 2022 23:34:36 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: RainLoop/1.16.0a Message-ID: <1c810968a4114879ea1c9c1e7c927d28@dismail.de> In-Reply-To: <87o7w0bsci.fsf_-_@gnu.org> References: <87o7w0bsci.fsf_-_@gnu.org> <20210315162949.17092-1-jbranso@dismail.de> <20210315162949.17092-2-jbranso@dismail.de> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" Reply-to: jbranso@dismail.de X-ACL-Warn: , jbranso--- via Guix-patches From: jbranso--- via Guix-patches via X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1661988910; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=pRBogABCYoErypTkDyHzWfRAXnGaIIbkk9CKjgbdUjc=; b=mG1VWh36bT5aViPCSE4YJThdBWXm2Y3p1lg/DB9YHmIpypuXElEH3BHJEgEiwuy7wCDgsa eSaCRVrYbwWwHyeMFPIGfsiQHQru2hztlMsjN7PD29aVZZ1qLUHRcMQ7fwRhowemD1KBXD oMWsJQ2CSWLO5ESa6XOCEyisWR3RPortoKEW97yh5vWjqVyx4UGKLHWXTMMU3dGchizHY4 PoL7Bx8bF3r3OWeP36q1cmSmo1L87GOpoqQNogh7NlqURdsKtClEWhEZsgTsKhxVcWBS7n /2mr8gqZlwwLKrFhXLEWQaau2gLAPOanK4RmYCfyS88gJ/lheClkm4LxuWkbZg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1661988910; a=rsa-sha256; cv=none; b=FM77xAwU98SLZxE0+W4zrNOF5u8XaCGPPZGaUa0ckxmWjv+kXBZ1hPfeSNGUajQKWblJ19 s9rTKtn3EBafJKIaSxxXqTomLblbecQKycWNsm3fP0fVMIOMDJAkY4BLPGoHcQNEV/RzHW 2JROMz89LhrtKfRkOTcBdTBEwKMcw5cW7r91OBR4bCv25EFxFvD5R6rzkduzjJCqhLyQHR JBnu9oDASvxkeg+TOsfN0Ve5kmGcsjZVrTT/Ru7JKGUPitIjhh/+GyER79ful4aoI9qF1H k9/zp6USLaSitlcy2JqwgaCocTd5RC7+8RaGO+Q7Xwfc3QU7xuWPN6uw9G2QMw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=dismail.de header.s=20190914 header.b=WTC7yOdz; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -1.88 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=dismail.de header.s=20190914 header.b=WTC7yOdz; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 4D3E7E9A7 X-Spam-Score: -1.88 X-Migadu-Scanner: scn1.migadu.com X-TUID: SBS4OL/LQ3oP August 31, 2022 6:49 AM, "Ludovic Court=C3=A8s" wrote: > Hi Joshua, >=20 >=20Joshua Branson skribis: >=20 >>=20doc: endlessh service documentation. >>=20 >>=20* doc/guix.texi (Networking Services): New endlessh-service-type sec= tion. >>=20 >>=20services: containerized endlessh >>=20 >>=20* gnu/services/ssh.scm (endlessh-config->conf): make-forkexec-contru= ctor -> >> make-forkexec-constructor/container. and attempted to enable logging t= o syslog. >> (define-record-type* ) >> move default values of endlessh configuration to separate line. >> Add copyright line for Nicolo. >=20 >=20Could you merge both patch #1 and patch #2? Usually doc is added in t= he > same commit as the thing being documented. >=20 >>=20+@cindex Endlessh >> +@deffn {Scheme Variable} endlessh-service-type >> +This is the type for the @uref{https://github.com/skeeto/endlessh, >> +Endlessh} program that delays ssh clients for days at a time by >=20 >=20Nitpick: s/ssh/SSH/. >=20 >>=20+@emph{very slowly} sending a random and endless SSH banner. The sma= rt >> +hacker will put endlessh running on port 22, and let crackers get stu= ck >=20 >=20Maybe =E2=80=9CThe smart hacker will put=E2=80=9D -> =E2=80=9CYou wou= ld typically run=E2=80=9D >=20 >>=20+ (start #~(make-forkexec-constructor/container >=20 >=20Let=E2=80=99s forget about =E2=80=98/container=E2=80=99 for now if it= doesn=E2=80=99t work yet. >=20 >=20Perhaps we can have a minimal system test to make sure the thing is > running and listening on the right port? There are tests for > full-fledged SSH servers in (gnu tests ssh) that could serve as > inspiration. >=20 >=20Could you send a (hopefully) last version with these changes? Will merge the doc and code changes and submit an updated patch soon. Thanks! Joshua >=20 >=20Thanks in advance, > Ludo=E2=80=99.