bao is a KISS ssh tunnel built in go

• simple systray tool to connect connect to the remote machine
• secure ; default ed25519 ssh crypto keys, and server key pinning
• a simple run-once server script to spin new SSH users with no other rights than port-forwarding

bao makes it simple to share a part of a host you run somewhere for others to use. It was initially designed to provide transport for gossa, but it can also serve for other purposes.

Just run the newUser.sh script to spin a new user on your server with only access to the ports you specify. The generated config will be at ./bao.conf

$ sudo bash newUser.sh self-hosted-service 8000 1234
all done!

Either download release for linux or mac. Once started, bao will look for a config files in ~/.ssh/bao/, or $PWD (on the mac release it's bao.app/Contents/MacOS/).

dep ensure
go build main.go

note linux : linux build would need libgtk-3-dev and libappindicator3-dev

note mac: mac build should be executed from a mac. The built blob should be copied into the .app skeleton in builds/bao.app/Contents/MacOS/bao