NHAS/reverse_ssh

gvisor unknown revision

exploide opened this issue · 5 comments

exploide commented

I cannot compile reverse_ssh at the moment. It seems there is a revision of gvisor specified in go.mod / go.sum which does not exist. At least this is what I assume is happening, I'm not into Go at all.

$ make release
mkdir -p bin
ssh-keygen -t ed25519 -N '' -C '' -f internal/client/keys/private_key || true
Generating public/private ed25519 key pair.
Your identification has been saved in internal/client/keys/private_key
Your public key has been saved in internal/client/keys/private_key.pub
The key fingerprint is:
SHA256:5kpawKFl+JFQL6PoGMGfd3k9w/awKFxN0p0QqUmKFdc 
The key's randomart image is:
+--[ED25519 256]--+
|  ...  ....oo    |
|.  o o ....Eo .  |
|... O + o.oo o   |
| o.B.* ..o*      |
|o oo+. oSo O     |
|o.  ..ooo o *    |
|..    oo.. . .   |
|     + ..        |
|    . .          |
+----[SHA256]-----+
touch bin/authorized_controllee_keys
go build -trimpath -ldflags="-X 'github.com/NHAS/reverse_ssh/internal.Version=v2.5.2' -s -w" -o bin ./...
go: downloading golang.org/x/crypto v0.21.0
go: downloading golang.org/x/net v0.23.0
go: downloading github.com/creack/pty v1.1.18
go: downloading github.com/go-ping/ping v1.1.0
go: downloading gvisor.dev/gvisor v0.0.0-20240216000150-e3cf008ab186
go: downloading github.com/pkg/sftp v1.13.5
go: downloading github.com/glebarez/sqlite v1.11.0
go: downloading gorm.io/gorm v1.25.8
go: downloading github.com/justincormack/go-memfd v0.0.0-20170219213707-6e4af0518993
go: downloading github.com/google/uuid v1.3.0
go: downloading golang.org/x/sync v0.6.0
go: downloading github.com/glebarez/go-sqlite v1.21.2
go: downloading modernc.org/sqlite v1.23.1
go: downloading github.com/kr/fs v0.1.0
go: downloading github.com/jinzhu/now v1.1.5
go: downloading golang.org/x/sys v0.18.0
go: downloading github.com/jinzhu/inflection v1.0.0
go: downloading modernc.org/libc v1.22.5
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading github.com/mattn/go-isatty v0.0.17
go: downloading modernc.org/mathutil v1.5.0
go: downloading modernc.org/memory v1.5.0
go: downloading github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
internal/client/handlers/tun.go:18:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:20:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:21:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:22:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:23:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:24:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:25:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:26:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:27:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:28:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:29:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:30:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:31:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
internal/client/handlers/tun.go:32:2: gvisor.dev/gvisor@v0.0.0-20240216000150-e3cf008ab186: invalid version: unknown revision e3cf008ab186
make: *** [Makefile:32: release] Error 1
NHAS commented

Hi there, I am unfortunately unable to replicate this issue.

This is on a completely clean pull, no modules using go version go1.22.3 linux/amd64

 ~/reverse_ssh$ make release
mkdir -p bin
ssh-keygen -t ed25519 -N '' -C '' -f internal/client/keys/private_key || true
Generating public/private ed25519 key pair.
internal/client/keys/private_key already exists.
Overwrite (y/n)?
touch bin/authorized_controllee_keys
go build -trimpath -ldflags="-X 'github.com/NHAS/reverse_ssh/internal.Version=v2.5.2-1-gbf25e5d' -s -w" -o bin ./...
go: downloading github.com/justincormack/go-memfd v0.0.0-20170219213707-6e4af0518993
go: downloading golang.org/x/crypto v0.21.0
go: downloading golang.org/x/net v0.23.0
go: downloading github.com/glebarez/sqlite v1.11.0
go: downloading gorm.io/gorm v1.25.8
go: downloading github.com/pkg/sftp v1.13.5
go: downloading github.com/creack/pty v1.1.18
go: downloading gvisor.dev/gvisor v0.0.0-20240216000150-e3cf008ab186
go: downloading github.com/go-ping/ping v1.1.0
go: downloading github.com/kr/fs v0.1.0
go: downloading github.com/glebarez/go-sqlite v1.21.2
go: downloading modernc.org/sqlite v1.23.1
go: downloading github.com/jinzhu/now v1.1.5
go: downloading github.com/jinzhu/inflection v1.0.0
go: downloading github.com/google/uuid v1.3.0
go: downloading golang.org/x/sync v0.6.0
go: downloading golang.org/x/sys v0.18.0
go: downloading modernc.org/libc v1.22.5
go: downloading golang.org/x/time v0.5.0
go: downloading github.com/google/btree v1.1.2
go: downloading github.com/mattn/go-isatty v0.0.17
go: downloading modernc.org/mathutil v1.5.0
go: downloading modernc.org/memory v1.5.0
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
GOOS=windows GOARCH=amd64 go build -trimpath -ldflags="-X 'github.com/NHAS/reverse_ssh/internal.Version=v2.5.2-1-gbf25e5d' -s -w" -o bin ./cmd/client
go: downloading github.com/ActiveState/termtest/conpty v0.5.0
go: downloading github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161

I would recommend using the docker version if you continue to have issues. Or if you've got any more information about the issue I'll try and help!

exploide commented

Weird. I can reproduce this, e.g. in a fresh containerized Fedora environment:

podman run --rm -it fedora bash
dnf install git make golang
cd /opt
git clone https://github.com/NHAS/reverse_ssh.git
cd reverse_ssh
make release

This is using go1.22.3 linux/amd64 just as you.

However, in a containerized Ubuntu environment it finds the dependency. Don't know how this can happen...

NHAS commented

That is.... incredibly strange, unless fedora has done something to git or go I dont see how this could be a problem. Super weird, thanks for bringing it to my attention so at least if someone else has the issue I can point them here!

exploide commented

Yes, I hope the issue will eventually go away. Maybe when some bug in one of the tools gets fixed. Or maybe when you bump the gvisor version the next time.

NHAS commented

Hm, you can always manually update the go modules if you want:

cd reverse_ssh
go get -u .../.

Just be warned it will most likely break gvisor, just as its a bit of a pain to manage