What is Teleport?
=================
Teleport is a gateway for managing access to clusters of *nix servers via
SSH or the Kubernetes API. While it does also support connecting to
servers running traditional OpenSSH, its own node deamon is intended to be
used instead for additional functionality.
With Teleport it is simple to adopt SSH best practices like using
certificate-based access and enabling 2FA via TOTP (e.g. Google
Authenticator), U2F or an SSO provider. Cluster nodes can be accessed via
a CLI (tsh) or a Web UI which both allow for session sharing.
Teleport provides centralized user management as well as full session
recordings that can be played back for knowledge sharing or auditing
purposes. It can also be used to protect Web applications like dashboards.
go: Bump go124-dependent ports
Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
security/teleport: Update version 4.4.12=>5.2.5
This port was marked to expire on 2023-03-31 but there was another port
security/teleport5 with more recent version from upstream. So move
security/teleport5 to security/teleport.
Pet portlint/portclippy while I am here.
Approved by: portmgr (blanket)
security/teleport: Deprecate and set expiration date to 2023-03-31
4.x is no longer supported upstream and users are recommended
to upgrade. Work is being done to bring Teleport up to date but for
now we're at 5.x which is still old but supports migration from 4.x.
For more details regarding migration please refer to
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=267052
PR: 268604
Reported by: Michael Reim <kraileth@elderlinux.org>
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/teleport: update to 4.2.11
From ChangeLog: https://github.com/gravitational/teleport/releases/tag/v4.2.11
* Fixed an issue that prevented upload of session archives to NFS volumes.
* Fixed an issue with port forwarding that prevented TCP connections from being
closed correctly.
* Fixed an issue in tsh that would cause connections to the Auth Server to fail
on large clusters. #3872
* Fixed an issue that prevented the use of Write-Only roles with S3 and GCS.
While here:
* Reorder some variables
* Remove GH_TAG_COMMIT
Reported by: portscout
security/teleport: update to 4.2.10
From ChangeLog: https://github.com/gravitational/teleport/releases/tag/v4.2.10
* Fixed an issue that caused Teleport environment variables not to be
available in PAM modules. #3725
* Fixed an issue with tsh login <clusterName> not working correctly
with Kubernetes clusters. #3693
Reported by: portscout
security/teleport: update to 4.2.9
ChangeLog: https://github.com/gravitational/teleport/releases/tag/v4.2.9
* Fixed an issue where double tsh login would be required to login to a leaf
cluster. #3639
* Fixed an issue that was preventing connection reuse. #3613
* Fixed an issue that could cause tsh ls to return stale results. #3536
Reported by: portscout
Convert all Go ports to USES=go
This allows for port testing with lang/go-devel via GO_PORT, setting
up the Go build environment in a single place, and is step one in
simplifying Go ports that often define too complicated do-build
targets themselves.
USES=go gains new arguments 'run' to add lang/go to RUN_DEPENDS and
'no_targets' for ports with composite builds that call 'go' themselves
and do not need the do-build/do-install targets of USES=go.
PR: 238849
Submitted by: dg@syrec.org (also D20745)
Reviewed by: mat, tobik
Exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D20746
Upgrade security/teleport to 2.7.4.
See the release notes for details.
Approved by: mat (mentor)
Sponsored by: Joyent, Inc.
Differential Revision: https://reviews.freebsd.org/D16939
Upgrade gravitational teleport to 2.6.6.
* See upstream's changelog for details
https://github.com/gravitational/teleport/blob/master/CHANGELOG.md
* Explicitly specify the git sha when building teleport.
* Restrict builds to amd64.
* Work around daemon(8)'s lack of syslog functionality in 10-STABLE.
Submitted by: swills
Approved by: swills (mentor)
Differential Revision: https://reviews.freebsd.org/D15311
Upgrade gravitational teleport to 2.5.7.
Explicitly specify the git sha when building teleport. Restrict builds to amd64.
Reviewed by: swills, mat
Approved by: swills (mentor)
Differential Revision: https://reviews.freebsd.org/D15311
Add new port: security/teleport
Gravitational Teleport ("Teleport") is a modern SSH server for remotely
accessing clusters of FreeBSD or Linux servers via SSH or HTTPS. It is
intended to be used instead of sshd. Teleport enables teams to easily
adopt the best SSH practices like:
- Integrated SSH credentials with your organization Google Apps identities or
other OAuth identitiy providers.
- Teleport uses certificate-based access with automatic expiration time
- Enforcement of 2nd factor authentication
- Cluster introspection: every Teleport node becomes a part of a cluster
and is visible on the Web UI
- Record and replay SSH sessions for knowledge sharing and auditing purposes
- Collaboratively troubleshoot issues through session sharing
(Only the first 15 lines of the commit message are shown above )
