Skip to content

Bind OpenSSH runners to connection generations - #68

Merged
wesm merged 1 commit into
mainfrom
openssh-bound-runner
Aug 13, 2026
Merged

Bind OpenSSH runners to connection generations#68
wesm merged 1 commit into
mainfrom
openssh-bound-runner

Conversation

@wesm

@wesm wesm commented Aug 13, 2026

Copy link
Copy Markdown
Member

Long-lived OpenSSH managers can serve callers with different executable paths, login shells, agents, and environments. This keeps each ControlMaster under the execution policy that created or adopted it.

  • Binds readiness checks, liveness probes, replacement teardown, disconnect, and idle cleanup to the connection generation's runner.
  • Keeps the manager-wide runner as the default for callers that do not need request-scoped execution.
  • Documents the runner lifetime and trust boundary for future lifecycle changes.

Long-lived managers may serve callers with different executable paths, login shells, agents, and environments. A manager-wide runner can therefore probe or tear down a master under execution policy that did not create it.

Let callers bind one runner when a master starts or is adopted. The manager retains that runner through readiness checks, liveness probes, replacement teardown, disconnect, and idle cleanup. Existing callers keep the manager-wide default.

Generated with OpenAI Codex
Co-authored-by: OpenAI Codex <noreply@openai.com>
@roborev-ci

roborev-ci Bot commented Aug 13, 2026

Copy link
Copy Markdown

roborev: Combined Review (4887c74)

No issues found.


Reviewers: 2 done | Synthesis: codex | Total: 2m50s

@wesm
wesm merged commit ffa84c6 into main Aug 13, 2026
11 checks passed
@wesm
wesm deleted the openssh-bound-runner branch August 13, 2026 19:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant