mete0r.recipe.sshtunnel 0.0.1

a zc.buildout recipe to make on-demand ssh tunnel

mete0r.recipe.sshtunnel

a zc.buildout recipe to make on-demand ssh tunnels i.e. ssh -L, using systemd socket activation.

Requirements

Local side	Remote side
systemd	sshd
ssh	nc

Usage example

Attention!

This package is in its planning stage. Everything can be changed at any time.

In your buildout.cfg, define a zc.recipe.deployment section:

[buildout]
parts =
   tunnel

[foo]
recipe = zc.recipe.deployment
prefix = FOO-DIR
etc-user = MY-USERNAME
user = MY-USERNAME
...

Then define a tunnel socket in the deployment:

[foo-db]
recipe = mete0r.recipe.sshtunnel
deployment = foo
socket.name = mysql.sock
ssh.process.user = MY-USERNAME
ssh.hostname = 192.168.0.2
remote.bind = 127.0.0.1:3306

On buildout run, two systemd unit files will be created:

$ ls -l ~/.config/systemd/user/
foo-db.socket
foo-db@.service

Then you can start the listening socket:

$ systemctl --user start foo-db.socket
$ systemctl --user list-sockets --all
LISTEN                         UNIT          ACTIVATES
FOO-DIR/var/run/foo/mysql.sock foo-db.socket [e-mail]

Test it:

$ mysql --socket=FOO-DIR/var/run/foo/mysql.sock

Enable it to persist:

$ systemctl --user enable foo-db.socket

Development environment

To setup development environment:

python setup.py virtualenv
make

Changes

0.0.1 (2016-11-10)

• Fix service unit ‘User=’ configuration for non-root users.

0.0.0 (2016-11-10)

• Initial release.