Skip to content

feat(bsshd): support publickey exec sessions#398

Merged
ryanbreen merged 1 commit into
mainfrom
feat/bsshd-publickey-auth
May 31, 2026
Merged

feat(bsshd): support publickey exec sessions#398
ryanbreen merged 1 commit into
mainfrom
feat/bsshd-publickey-auth

Conversation

@ryanbreen
Copy link
Copy Markdown
Owner

Summary

  • records SSH exec requests in the server channel state
  • runs non-interactive bsshd exec commands with stdout/stderr relayed over the SSH channel
  • sends SSH exit-status before closing the channel

Validation

  • cargo check --manifest-path libs/libbreenix/Cargo.toml --features std
  • userspace/programs/build.sh --arch aarch64
  • cargo build --release --features testing,external_test_bins --bin qemu-uefi (warning scan empty)
  • macOS OpenSSH publickey-only proof with StrictHostKeyChecking=yes and UserKnownHostsFile=turn92-artifacts/known_hosts:
    • Authenticated using /Users/wrb/.ssh/id_rsa publickey
    • exec request accepted
    • stdout included BREEMARK and Breenix uname output
    • SSH exit status 0

Artifacts: /Users/wrb/Downloads/Ralph/breenix-interrupt-io-roadmap-1780056222/turn92-artifacts

OpenSSH publickey exec sessions now run the requested command, stream stdout/stderr over the SSH channel, and report exit status.

Validated with strict host key checking from macOS OpenSSH to Breenix bsshd using /Users/wrb/.ssh/id_rsa.

Co-authored-by: Ryan Breen <ryan@breen.com>

Co-authored-by: Claude Code <noreply@anthropic.com>
@ryanbreen ryanbreen merged commit 65d47a6 into main May 31, 2026
@ryanbreen ryanbreen deleted the feat/bsshd-publickey-auth branch May 31, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant