Fabian @ Blax Software
ec1ef50937
A whitelisted SSH box for an OSM airport-taxiway export pipeline. A backend may run only three commands — taxiways-list / taxiways-export <ICAO> / taxiways-cat <ICAO> — validated whole-line against an allowlist and exec'd shell-free by the vendored bastion-broker. Ubuntu 22.04 standalone (not FROM blaxsoftware/bastion): the export needs osmium, which Alpine doesn't package, and newer GDAL (Debian trixie 3.10) segfaults on the OSM->GeoJSON step — 22.04's GDAL 3.4.1 + osmium 1.14 is the known-good toolchain. Reuses the base repo's bastion-broker unchanged; a compact broker-only sshd entrypoint replaces the Alpine start-container (account unlocked via `usermod -p '*'` so glibc sshd accepts pubkey). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| taxiways-cat | ||
| taxiways-export | ||
| taxiways-list | ||