Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

hacksu / kent-hack-it Public

Notifications You must be signed in to change notification settings
Fork 0
Star 4

Code
Issues 5
Pull requests
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

Ephemeral instances for ssh and web#49

Merged

EnderHubris merged 89 commits into

develophacksu/kent-hack-it:developfrom

feat/ssh-instanceshacksu/kent-hack-it:feat/ssh-instancesCopy head branch name to clipboard

Jul 24, 2026

Conversation Commits89 (89)Checks Files changed

Merged

Ephemeral instances for ssh and web#49
EnderHubris merged 89 commits into
developfrom
feat/ssh-instances

Commits

Commits on Jul 22, 2026

Add /admin/api route with moved JSON-API handler
Monster0506
committed
Remove admin/+server.ts so form actions own the /admin route
Monster0506
committed
Repoint d.view.svelte admin fetches to /admin/api
Monster0506
committed
Repoint d.users.svelte admin fetch to /admin/api
Monster0506
committed
Repoint d.admins.svelte admin fetch to /admin/api
Monster0506
committed
Repoint d.teams.svelte admin fetch to /admin/api
Monster0506
committed
Repoint file_upload.svelte admin fetch to /admin/api
Monster0506
committed
Regenerate baseline drizzle migration cleanly
Monster0506
committed
Commit drizzle/meta/ migration tracking files
Monster0506
committed
Add custom migration to seed the default event_config row
Monster0506
committed
Add unwired migrate service to docker-compose.yml
Monster0506
committed
Wire app to depend on migrate completing successfully
Monster0506
committed
Strip schema-creation SQL out of the Postgres image
Monster0506
committed
Set ssl: false explicitly in drizzle.config.ts
Monster0506
committed
Remove plaintext DB credential logging from drizzle.config.ts
Monster0506
committed
Add npm run db:generate script
Monster0506
committed
Add npm run db:migrate script
Monster0506
committed
Switch package manager lockfile from npm to bun
Monster0506
committed
Migrate main Dockerfile and supervisord to bun
Monster0506
committed
Migrate migrate/Dockerfile to bun
Monster0506
committed
Update README dev instructions from npm to bun
Monster0506
committed
Switch handler's package manager lockfile from npm to bun
Monster0506
committed
Migrate handler/Dockerfile and supervisord to bun
Monster0506
committed
Add nullable challenge_id column to instance_sessions
Monster0506
committed
Populate challenge_id when creating an nc/nsjail instance
Monster0506
committed
Add ssh_instance_sessions table
Monster0506
committed
Add image_ref column to challenges
Monster0506
committed
Add docker_proxy_net network definition
Monster0506
committed
Add docker-socket-proxy service
Monster0506
committed
build challenge's own Dockerfile
Monster0506
committed
Create ssh-challenge-wrapper Dockerfile.wrapper skeleton
Monster0506
committed
Add apk/apt-get detection and openssh-server install to wrapper
Monster0506
committed
Add ctf-player login user creation to wrapper
Monster0506
committed
Point ctf-player's home at the inherited WORKDIR
Monster0506
committed
Add wrapper entrypoint: CTF_PASSWORD -> chpasswd -> exec sshd
Monster0506
committed
build the SSH wrapper image
Monster0506
committed
Add registry/docker-compose.yml (stock registry:2)
Monster0506
committed
Add plain TCP healthcheck to registry
Monster0506
committed
Generate htpasswd from env vars at registry container start
Monster0506
committed
Refuse to start the registry if credentials are missing
Monster0506
committed
Add GetActiveNcInstances query for the admin Instances tab
Monster0506
committed
Build read-only admin Instances tab
Monster0506
committed
Add static nc type-badge column to Instances tab
Monster0506
committed
Add unwired Stop button to Instances tab rows
Monster0506
committed
Wire Instances tab Stop button to handler's /kill
Monster0506
committed
Delete instance_sessions row on successful stop
Monster0506
committed
Scaffold ssh-orchestrator service
Monster0506
committed
Implement listing running SSH instance containers via the proxy
Monster0506
committed
Implement free SSH port picking against the running instance list
Monster0506
committed
Implement CreateSSHInstance (no expiry logic yet)
Monster0506
committed
Implement /stop_instance
Monster0506
committed
Set khi.expires_at label at SSH instance creation time
Monster0506
committed
Add in-process expiry timer
Monster0506
committed
Add startup reconciliation
Monster0506
committed
Wire app onto ssh_orch_net so it can reach ssh-orchestrator
Monster0506
committed
db.ts: add CreateSSHInstance (no stop-existing guard yet)
Monster0506
committed
Add stop-existing-first guard to CreateSSHInstance
Monster0506
committed
Add GET /api/sshinstance
Monster0506
committed
Add stop/restart action on /api/sshinstance
Monster0506
committed
Add SSH Instance Image field to challenge form
Monster0506
committed
Wire image_ref field to persist into challenges.image_ref
Monster0506
committed
Add Launch SSH Instance control, wired to CreateSSHInstance
Monster0506
committed
Render ssh command and password for an active SSH instance
Monster0506
committed
Add live countdown bound to the SSH instance's real expires_at
Monster0506
committed
Add Restart SSH Instance control
Monster0506
committed
Extend admin-instances query to include SSH sessions
Monster0506
committed
Make Instances tab type badge vary between nc and ssh
Monster0506
committed
Show per-type ID and correct time-remaining in Instances tab
Monster0506
committed
Wire SSH row Stop button to ssh-orchestrator's /stop_instance
Monster0506
committed
Add SSH_IMAGE_REGISTRY/SSH_REGISTRY_USER/SSH_REGISTRY_PASSWORD
Monster0506
committed
Add IMAGES=1 to docker-socket-proxy's scope
Monster0506
committed
Implement SSH_IMAGE_PREFIX allowlist check
Monster0506
committed
Implement prefix-and-pull-through-proxy for SSH_IMAGE_REGISTRY
Monster0506
committed
Fix copy selector for commands
Monster0506
committed
Install nano and vim in the SSH challenge wrapper so players can edit files
Monster0506
committed
Preserve /etc/passwd permissions through wrapper user creation, start cron if present
Monster0506
committed
Start /opt/khi-daemon in the background if present
Monster0506
committed
Give each SSH instance its own private network instead of a shared one
Monster0506
committed
Web challenge instances
Monster0506
committed
fix svelte-check errrors
Monster0506
committed
dropdown select images
Monster0506
committed
ui for instances table
Monster0506
committed
proper instance handling
Monster0506
committed
postgres error handling
Monster0506
committed
show web instances in instance table
Monster0506
committed
filtering of instances
Monster0506
committed
container deletion and configuration
Monster0506
committed
update packages to latest versions
Monster0506
committed
allow delete
Monster0506
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.