tree 576e146d5abec5934bb468e3d85ce4e5c4025ebc
parent 12a6fa4e32d21840c16d24998799c81eeaeded15
author Nick Vatamaniuc <vatamane@gmail.com> 1636759029 -0500
committer Nick Vatamaniuc <vatamane@gmail.com> 1636759029 -0500
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEC9ephJnEq0HJEO5l/ATfvJZXp44FAmGO9zMACgkQ/ATfvJZX
 p44u4A/+Mqjf1idZtBDM3En7JGi4bR+BCm50bvo2Y2diLZ4hmbmucaLHDI1tGFyd
 oSbJOjRR6hLkxDVQuLdapjJyXPlLQod0kdxP267kmfUzzYNj25tOjvGruDYbGUi1
 cr19gtc2sKocJ5xKMCqYlOenCv1U+808jrqi5woKn4/1F1zCS58IgufxS4P4+nNC
 y090qWEbcAvhTXc0yAY+trSBCC+1SyzILscGwfCKgkpT1Az8lGQHhUBGhB3Ip5QB
 NFfpfb/fDhfUtc63B87o6y3u8Vt8NDPo7LiOiZr3MmRzLq42R7+Z3ISwlSbayvm0
 abiMOmO3um+DeGPpQ6yFy/2JFzVuNlT9mCv3Xn/HMckZSGe/v2EmqBDcxZ/0m+5b
 90NClLHzqKf68bHoizx8xKR6EUv2+xb2ILrAvBeniXqWsEY3rqoFXKuJpzSX5GTO
 PQsE4QMg0nCpVZOJwsUT/BmEvyBVWiQ3FKYTgNMcwqMxsesePOGdLNwV4yVPjSKP
 vt9yq75boKmBluDgE0sRdarq5efdn2DwYRDpT4wjU+2B2nQ6NQ2Hvt+nb55ygkQ5
 C47EGeV+dneIUQ9oTK++bA/ETxACtCYhbnuItJvqqvbsQ9H0MoXI60pAFYasqe33
 liisAkyoC8nFWDz8THY7yRdJyCfq14oHch9g2E4FXph1S9g6+n0=
 =9ulk
 -----END PGP SIGNATURE-----

Improve bastion setup

 * Use a single control socket.
   - Use the bastion hostname in proxy commands instead of IP
   - CI agents which need bastions don't start an extra control socket

 * Avoid using a relative ./ssh.cfg file
   - Instead users can include it in their `~/.ssh/config` file
   - Now it is possible to ssh in without having to be in the source directory