Add authorized Unix pipe forwarding

This commit is contained in:
Eric Wendland 2026-05-21 01:15:51 +02:00
commit 3d0da22eae
8 changed files with 491 additions and 16 deletions

View file

@ -385,11 +385,17 @@ Goal: add authorized stream-oriented management workflows over Iroh.
request/response serialization.
- `[ ]` Tests cover a full two-node request/response forwarding exchange.
- `[ ]` Unix socket forwarding where supported.
- `[~]` Unix socket forwarding where supported.
Acceptance criteria:
- Unix socket forwarding is available on Unix platforms.
- Unsupported platforms return clear errors.
- Tests skip or use cfg guards where sockets are unavailable.
- `[x]` Unix socket forwarding is available on Unix platforms through
`geth pipe forward-unix`.
- `[x]` Forwarding is resource-scoped with `pipe.forward` on
`resource:pipe-unix:<target>`.
- `[x]` Unix socket paths must be absolute and reject parent-directory
components.
- `[x]` Tests cover Unix path validation and pipe wire request serialization.
- `[ ]` Unsupported platforms return clear errors.
- `[ ]` Tests cover a full two-node Unix socket forwarding exchange.
- `[~]` SSH proxy over Iroh.
Acceptance criteria: