Release history
Cardea releases
SSH bastion server with access control, session recording, and optional TPM-backed key protection. `EUPL-1.2` `Go/Docker`
All releases
18 shown
Minor fixes and improvements.
Full changelog
What's Changed
- Bump golang from 1.26.2-trixie to 1.26.3-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/62
- Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/63
- Bump grafana/grafana from 13.1.0-25196703233 to 13.1.0-25530058790 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/64
- Bump github/codeql-action from 4.35.3 to 4.35.4 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/65
Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.2...v1.7.0
Minor fixes and improvements.
Full changelog
What's Changed
- Bump grafana/grafana from 13.1.0-24866141508 to 13.1.0-25196703233 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/59
- Bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/61
- Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/60
Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.1...v1.6.2
Minor fixes and improvements.
Full changelog
What's Changed
- Bump golang from
da39430toc0074c7in the docker-all group across 1 directory by @dependabot[bot] in https://github.com/hectorm/cardea/pull/52 - Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/53
- Bump the github-actions-all group with 3 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/54
- Bump grafana/grafana from 13.1.0-24485707904 to 13.1.0-24866141508 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/55
- Bump golang from
c0074c7to982ae92in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/56 - Bump prom/prometheus from v3.11.2 to v3.11.3 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/58
- Bump golang from
982ae92to4a7137ein the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/57
Full Changelog: https://github.com/hectorm/cardea/compare/v1.6.0...v1.6.1
- Reject unknown options in authorized_keys entries.
- Preserve key comments for piped authorized_keys entries.
- Extract authorized_keys parser into public package pkg/authkeys.
Full changelog
What's Changed
- Reject unknown options in authorized_keys entries.
- Preserve key comments for piped authorized_keys entries.
- Pause session recording for non-PTY sessions (e.g. rsync, git), which can generate unprintable data.
- Extract authorized_keys parser into public package pkg/authkeys.
- Extract timewindow parser into public package pkg/timewindow.
Dependencies
- Bump the docker-compose-all group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/46
- Bump the github-actions-all group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/47
- Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/49
- Bump golang from
ce3f1c8toe3474b9in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/48 - Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/50
- Bump golang from 1.26.1-trixie to 1.26.2-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/51
Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.2...v1.6.0
Minor fixes and improvements.
Full changelog
What's Changed
- Bump grafana/grafana from 13.0.0-23466975118 to 13.0.0-23649747481 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/42
- Bump github/codeql-action from 4.34.1 to 4.35.1 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/43
Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.1...v1.5.2
Minor fixes and improvements.
Full changelog
What's Changed
- Bump grafana/grafana from 13.0.0-23336907879 to 13.0.0-23466975118 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/41
Full Changelog: https://github.com/hectorm/cardea/compare/v1.5.0...v1.5.1
- Recordings stored in date-based subdirectories (YYYY/MM/DD/)
- Structured recording metadata field added to asciicast files
Full changelog
What's Changed
Features
- Store recordings in date-based subdirectories (
YYYY/MM/DD/) - Add structured recording metadata field to asciicast files
Dependencies
- Bump golang.org/x/sys from 0.41.0 to 0.42.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/35
- Bump golang from
ab8c494to96b2878in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/36 - Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/37
- Bump grafana/grafana from 13.0.0-22696220628 to 13.0.0-23336907879 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/38
- Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/39
- Bump golang from
96b2878toce3f1c8in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/40
Full Changelog: https://github.com/hectorm/cardea/compare/v1.4.1...v1.5.0
Minor fixes and improvements.
Full changelog
What's Changed
- Bump docker/login-action from 3.7.0 to 4.0.0 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/30
- Bump grafana/grafana from 13.0.0-22288738230 to 13.0.0-22649226721 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/31
- Bump golang from 1.26.0-trixie to 1.26.1-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/32
- Bump grafana/grafana from 13.0.0-22649226721 to 13.0.0-22696220628 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/33
- Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/34
Full Changelog: https://github.com/hectorm/cardea/compare/v1.4.0...v1.4.1
- Added `permitsocketopen` and `permitsocketlisten` options
- Added `from`, `start-time`, `expiry-time`, and `time-window` options
- Added `environment` option
Full changelog
What's Changed
Features
- Add
permitsocketopenandpermitsocketlistenoptions - Add
fromoption - Add
start-time,expiry-time, andtime-windowoptions - Add
environmentoption - Add
restrict,pty,port-forwarding,no-socket-forwarding, andsocket-forwardingoptions - Add per-key
no-recording/recordingoptions - Add SK key support
Dependencies
- Bump the gomod-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/23
- Bump golang from
fb4b74atoff83f37in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/22 - Bump grafana/grafana from 12.4.0-21230963995 to 12.4.0-21419697389 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/21
- Bump the github-actions-all group with 3 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/20
- Bump github/codeql-action from 4.32.0 to 4.32.2 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/25
- Bump grafana/grafana from 12.4.0-21419697389 to 12.4.0-21887950227 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/26
- Bump the github-actions-all group with 5 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/27
- Bump the docker-compose-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/28
- Bump github/codeql-action from 4.32.4 to 4.32.5 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/29
Full Changelog: https://github.com/hectorm/cardea/compare/v1.3.0...v1.4.0
- Add banner file support
Full changelog
What's Changed
Features
- Add banner file support
Dependencies
- Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/19
- Bump grafana/grafana from 12.4.0-20977568970 to 12.4.0-21230963995 in the docker-compose-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/18
Full Changelog: https://github.com/hectorm/cardea/compare/v1.2.0...v1.3.0
- Add health and metrics endpoint
Full changelog
What's Changed
Features
- Add health and metrics endpoint
Dependencies
- Bump the github-actions-all group with 2 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/14
- Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/12
Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.2...v1.2.0
Routine maintenance release for Cardea.
Changelog
Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.1...v1.1.2
Routine maintenance release for Cardea.
Changelog
Full Changelog: https://github.com/hectorm/cardea/compare/v1.1.0...v1.1.1
- Implement remote port forwarding (`permitlisten` option)
- Add pipe syntax for sharing options across multiple keys (e.g., `KEY1 | KEY2 | KEY3`)
- Add line continuation support in authorized_keys files (`\` at end of line)
Full changelog
What's Changed
Features
- Add TPM 2.0 support for hardware-backed private key protection
- Implement remote port forwarding (
permitlistenoption) - Add pipe syntax for sharing options across multiple keys (e.g.,
KEY1 | KEY2 | KEY3) - Add line continuation support in authorized_keys files (
\at end of line)
Improvements
- Make host pattern matching case-insensitive
Dependencies
- Bump github/codeql-action from 4.30.7 to 4.30.8 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/3
- Bump golang from 1.25.2-trixie to 1.25.3-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/4
- Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in https://github.com/hectorm/cardea/pull/6
- Bump golang.org/x/crypto from 0.43.0 to 0.46.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/7
- Bump the github-actions-all group across 1 directory with 9 updates by @dependabot[bot] in https://github.com/hectorm/cardea/pull/8
- Bump golang from 1.25.3-trixie to 1.25.5-trixie in the docker-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/9
- Bump golang.org/x/sys from 0.39.0 to 0.40.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/10
Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.3...v1.1.0
Routine maintenance release for Cardea.
Changelog
Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.2...v1.0.3
Minor fixes and improvements.
Full changelog
What's Changed
- Bump hectorm/ghaction-release from 1.0.0 to 1.0.1 in the github-actions-all group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/2
- Bump golang.org/x/crypto from 0.42.0 to 0.43.0 in the gomod-minor-patch group by @dependabot[bot] in https://github.com/hectorm/cardea/pull/1
New Contributors
- @dependabot[bot] made their first contribution in https://github.com/hectorm/cardea/pull/2
Full Changelog: https://github.com/hectorm/cardea/compare/v1.0.1...v1.0.2
Routine maintenance release for Cardea.
Changelog
Full Changelog: https://github.com/hectorm/cardea/commits/v1.0.1