So, what's new regarding this problem in v256? Well, it works now: you finally can log in via SSH directly into your super secure systemd-homed account.
How did we make this happen? Roughly like this: first, we let SSH do its authentication. If that succeeded then we permit the log in to go though, but temporarily provide a slightly different user record for the user, where the login shell in the record is redirected to a small stub tool provided by systemd.
Lennart Poettering /
npub1rk…qzenj
2024-05-02 07:45:57
in reply to nevent1q…d6rr
Author Public Key
npub1rk2uxtv6nk262nucavh259t085a8rhzfaj3vjc9jhzvkyav0rnqqxqzenjPublished at
2024-05-02 07:45:57Event JSON
{
"id": "ced8633ea96e452aaeff8bcb83ebda475c9f4b70251a21fcadf1a8a22730f92e",
"pubkey": "1d95c32d9a9d95a54f98eb2eaa156f3d3a71dc49eca2c960b2b89962758f1cc0",
"created_at": 1714635957,
"kind": 1,
"tags": [
[
"e",
"16c8b61cb7fdbf845c3e29fda1a1ea0e3bb5c5ebaabb2ef91cf652645d368617",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://mastodon.social/users/pid_eins/statuses/112370382111824767",
"activitypub"
]
],
"content": "So, what's new regarding this problem in v256? Well, it works now: you finally can log in via SSH directly into your super secure systemd-homed account.\n\nHow did we make this happen? Roughly like this: first, we let SSH do its authentication. If that succeeded then we permit the log in to go though, but temporarily provide a slightly different user record for the user, where the login shell in the record is redirected to a small stub tool provided by systemd.",
"sig": "2ff2b87a1e9af63cdc428ddb9e0367de942816824ddd87a57e30e1fdb6373364f8beaf5d0d2daffb846938b829d80d9b3212f5502828a71517a2ec4e841dbd70"
}