From b87107dd23d2f0886b8e96d9d84b4e8f88384a44 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Lesimple?= Date: Mon, 16 Nov 2020 10:39:06 +0000 Subject: [PATCH] bump to v3.00.02 --- README.md | 14 +++++++++----- doc/CHANGELOG.md | 6 ++++++ doc/sphinx/installation/upgrading.rst | 5 +++++ lib/perl/OVH/Bastion.pm | 2 +- 4 files changed, 21 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index b3a2c45..a241819 100644 --- a/README.md +++ b/README.md @@ -23,9 +23,11 @@ Please see the [online documentation](https://ovh.github.io/the-bastion/), or th ## TL;DR: disposable sandbox using Docker -This is a good way to test The Bastion within seconds, but [read the FAQ](https://ovh.github.io/the-bastion/faq.html#can-i-run-it-under-docker-in-production) if you're serious about using this in production. +This is a good way to test The Bastion within seconds, but [read the FAQ](https://ovh.github.io/the-bastion/faq.html#can-i-run-it-under-docker-in-production) if you're serious about using containerization in production. -OK, let's run the docker image: +The sandbox image is available for the following architectures: linux/386, linux/amd64, linux/arm/v6, linux/arm/v7, linux/arm64, linux/ppc64le, linux/s390x. + +Let's run the docker image: docker run -d -p 22 --name bastiontest ovhcom/the-bastion:sandbox @@ -60,7 +62,7 @@ Note that you can connect directly without using interactive mode, with: bastion @ -That's it! Additional documentation is available under the `doc/` folder and [online](https://ovh.github.io/the-bastion/). +That's it! Of course, there is a lot more to it, documentation is available under the `doc/` folder and [online](https://ovh.github.io/the-bastion/). Be sure to check the help of the bastion (`bastion --help`) and the help of each osh plugin (`bastion --osh command --help`). Also don't forget to customize your `bastion.conf` file, which can be found in `/etc/bastion/bastion.conf` (for Linux). @@ -73,12 +75,14 @@ Linux distros below are tested with each release, but as this is a security prod - Ubuntu LTS 20.04, 18.04, 16.04, 14.04* - OpenSUSE Leap 15.2*, 15.1*, 15.0* -*: Note that these versions have no MFA support. +*: Note that these versions have no out-of-the-box MFA support, as they lack packaged versions of `pamtester`, `pam-google-authenticator`, or both. Of course, you may compile those yourself. Any other so-called "modern" Linux version are not tested with each release, but should work with no or minor adjustments. The code is also known to work correctly under: -- FreeBSD 10+ / HardenedBSD [no MFA support] +- FreeBSD 10+ / HardenedBSD** + +**: Note that FreeBSD has partial MFA support, due to its reduced set of available `pam` plugins. You can set it up to support an additional password or TOTP factor, but not both. Other BSD variants partially work but are unsupported and discouraged as they have a severe limitation over the maximum number of supplementary groups (causing problems for group membership and restricted commands checks), no filesystem-level ACL support and missing MFA: diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md index 084860b..372324d 100644 --- a/doc/CHANGELOG.md +++ b/doc/CHANGELOG.md @@ -1,3 +1,9 @@ +## v3.00.02 - 2020/11/16 +- feat: add more archs to dockerhub sandbox +- fix: adminSudo: allow called plugins to read from stdin +- fix: add missing `echo` in the entrypoint of the sandbox +- chore: install-ttyrec.sh: adapt for multiarch + ## v3.00.01 - 2020/11/06 - feat: add OpenSUSE 15.2 to the officially supported distros - enh: install-ttyrec.sh: replaces build-and-install-ttyrec.sh, no longer builds in-place but prefers .deb and .rpm packages & falls back to precompiled static binaries otherwise diff --git a/doc/sphinx/installation/upgrading.rst b/doc/sphinx/installation/upgrading.rst index 527c061..c4a4f4f 100644 --- a/doc/sphinx/installation/upgrading.rst +++ b/doc/sphinx/installation/upgrading.rst @@ -42,6 +42,11 @@ Note that this is done automatically for bastion admins. Version-specific upgrade instructions ===================================== +v3.00.02 +******** + +No specific upgrade instructions. + v3.00.01 ******** diff --git a/lib/perl/OVH/Bastion.pm b/lib/perl/OVH/Bastion.pm index 410868c..85d6696 100644 --- a/lib/perl/OVH/Bastion.pm +++ b/lib/perl/OVH/Bastion.pm @@ -5,7 +5,7 @@ use common::sense; use Fcntl; use POSIX qw(strftime); -our $VERSION = '3.00.01'; +our $VERSION = '3.00.02'; BEGIN { # only used by the handler below