oinit

Certificate-based OpenSSH for Federated Identities

This repository contains a collection of programs to enable OpenSSH login for federated identities based on certificates.

Please refer to the Wiki to learn about installation and configuration.

OpenID Connect access token for selected provider is loaded from oidc-agent.

Development

# Client application
$ make oinit

# oinit-shell and oinit-switch
$ make oinit-shell oinit-switch

# Server application (CA)
$ make oinit-ca

When changing the REST API annotations, run make swagger to generate the Swagger files.

Branches

Development happens on feature branches checked out from and merged back into prerelease. When ready, commits are merged into main and tagged as release.

Github Actions create new Docker images for GHCR on release. The Gitlab CI runs integration tests and creates Linux packages.

License

This project is licensed under the MIT License.