google / hiba
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
☆374Updated 2 months ago
Alternatives and similar repositories for hiba:
Users that are interested in hiba are comparing it to the libraries listed below
- Short term certificate based identity system (ssh/x509 ca + openidc)☆127Updated last month
- Turn IP sockets into Unix domain sockets☆360Updated 6 months ago
- Silly usage of AWS EC2 IPv6 prefixes☆321Updated 3 years ago
- ssh-agent for TPMs☆391Updated this week
- ☆575Updated 6 months ago
- Create microVMs from OCI images☆1,449Updated last week
- Simple Linux seccomp rules without writing any code☆465Updated 3 months ago
- Linux Process Discovery. C Library, Go bindings, Runtime.☆220Updated 2 years ago
- build distroless images with alpine tools☆128Updated 2 years ago
- Kadeessh (formerly Caddy-SSH) is a general-purpose, extensible, modular, memory-safe SSH server built in Go☆547Updated last month
- 🦠 NVMe-TCP at your fingertips 🦠☆295Updated 8 months ago
- Run containerized, rootless applications with podman☆121Updated 2 years ago
- A jump-host SSH server that starts machines on-demand☆483Updated 3 years ago
- runj is an experimental, proof-of-concept OCI-compatible runtime for FreeBSD jails.☆628Updated 7 months ago
- Software Supply Chain Transparency Log☆917Updated this week
- Progressively image a mounted disk correctly without corruption☆294Updated 3 years ago
- Common go library shared across sigstore services and clients☆458Updated this week
- Inspect certificate authorities in container images☆229Updated 8 months ago
- Tang binding daemon☆530Updated 2 months ago
- A fancy-schmancy tcpdump-esque TUI, programmed in Go.☆367Updated 2 years ago
- Keyless Git signing using Sigstore☆966Updated this week
- Serverless Public Key Infrastructure Framework☆271Updated 2 years ago
- Container image registry that serves images built fresh when you ask for them☆216Updated 11 months ago
- Test ssh login key acceptance without having the private key☆215Updated 3 years ago
- The world's worst kernel module☆296Updated 3 years ago
- Sigstore OIDC PKI☆670Updated this week
- eBPF Port Knocking Tool☆232Updated last year
- 🦐SSH Certificate Authority in a Lambda (on the barbie)☆116Updated 4 years ago
- golang library and tools for managing nftables☆92Updated last year