guardian-agent VS DomTerm

Compare guardian-agent vs DomTerm and see what are their differences.

guardian-agent

[beta] Guardian Agent: secure ssh-agent forwarding for Mosh and SSH (by StanfordSNR)

DomTerm

DOM/JavaScript-based terminal-emulator/console (by PerBothner)
Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
guardian-agent DomTerm
5 15
431 355
0.0% -
0.0 8.0
8 months ago 2 months ago
Go C++
BSD 3-clause "New" or "Revised" License GNU General Public License v3.0 or later
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

guardian-agent

Posts with mentions or reviews of guardian-agent. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-09-18.
  • The pitfalls of using SSH-agent, or how to use an agent safely
    3 projects | news.ycombinator.com | 18 Sep 2021
    ObPlug for Guardian Agent, which is basically "safe" ssh-agent forwarding (and works with Mosh and SSH): https://github.com/StanfordSNR/guardian-agent

    The basic story is that ssh-agent really just exposes a primitive of "please sign this challenge," which is useful locally, but the protocol wasn't designed to be forwarded. If requests are coming from a semi-trusted intermediary host, the protocol doesn't tell the agent (a) what remote server is being authenticated to [i.e., who generated the challenge?], or (b) what command is going to be executed. It doesn't even really know (c) what (semi-trusted) host has forwarded the challenge?

    Guardian Agent is a sort of hack that allows the agent to know (a), (b), and (c) before deciding whether to grant or deny the request, and you can set up policies like, "I'd like to allow `jump host x` to use to run "git pull" when talking to `git server y`, but that's it." The basic ssh-agent protocol just doesn't have enough info to be able to do something like that.

  • Mosh: The Mobile Shell
    15 projects | news.ycombinator.com | 11 Aug 2021
    Re: Unicode, please see https://news.ycombinator.com/item?id=28151652. (Mosh really just uses your C library for knowing the width of characters -- if the server's and client's libc support a character, Mosh will too. Unfortunately Apple in particular has historically been not super-great about keeping theirs up-to-date once Unicode went to an annual release cycle. screen and tmux have similar issues and basically ship their own Unicode tables, which has its own problems.)

    For ssh-agent forwarding, most people are using https://github.com/StanfordSNR/guardian-agent which is more secure than traditional agent forwarding, and works with SSH or Mosh.

    15 projects | news.ycombinator.com | 11 Aug 2021
    there is a fork with port forwarding support https://github.com/rinne/mosh and a PR with a long discussion https://github.com/mobile-shell/mosh/pull/696 on why it's not merged

    you can compile them yourself or if you want to skip the step I recently set up GitHub actions to compile linux binaries of this [1][2], tested by a sample of 1 so no guarantees it works, was planning on doing a tap PR/tap of it at some point

    also the official developers have been involved a project to solve this while improving the whole-agent approval things also https://github.com/StanfordSNR/guardian-agent , but I couldn't get it to work which is why I tried the fork and got that working

    [1] https://github.com/gnyman/mosh/actions/runs/1068715036

  • AskReddit: is there such a thing as async SSH that allows for zero latency typing? (explanation in text)
    2 projects | /r/commandline | 13 Mar 2021
    ‘mosh’ is amazing for this, although I had to stop using it years ago because it didn’t support key forwarding. Apparently, there’s now a solution for that: https://github.com/StanfordSNR/guardian-agent

DomTerm

Posts with mentions or reviews of DomTerm. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-05-15.
  • VT330/VT340 Sixel Graphics
    4 projects | news.ycombinator.com | 15 May 2023
    Sixel has the one advantage of being mplemented in xterm and a modest number of other terminals. Otherwise, it's a pretty bad format: Inefficient. Unclear and inconsistently implemented specification. All images have to be a multiple fof 6 pixel rows, which may not align with either image height or character height.

    Some terminal implement some other protocols, but attempts to specify a standard have failed. There are some tricky issues, such as: When does an image or part of an image get erased? Can you write text on top of an image and if so how are they aligned? What happens if you write an image on top of existing text? On top of an existing image? How does scrolling affect things? What happens to the image on window resize or zoom? Can you reliably update part of an image?

    DomTerm (https://domterm.org) supports images in two ways:

  • Show HN: Rust+Svelte=Terminal
    2 projects | news.ycombinator.com | 15 Feb 2023
    If interested in enhanced terminals, please take a look at DomTerm (https://domterm.org). It too optionally uses Tauri/Wry, though it can also also Electron, Qt, or a plain web-browser. You can embed images and rich text among other feayrures. DomTerm also has builtin tmux-like panes+tabs (mouse-draggable), detachable sessions, and a powerful "view" (selection) mode.
  • Ask HN: Is it still possible to live in a terminal?
    28 projects | news.ycombinator.com | 14 Oct 2022
    DomTerm (https://domterm.org) isn't quite what you asked for: It only indirectly has a JavaScript console: Since its frontend is a browser engine, you can open up a JavaScript debugger.
  • TermKit: A Rich Graphical Terminal (2011)
    3 projects | news.ycombinator.com | 2 Mar 2022
    DomTerm (https://domterm.org) attempts to provide similar possibilities as TermKit. However, it starts with the position that it should also (and perhaps first) be a fully-functional modern mostly-xterm-compatible terminal emulator. On top of that we add rich html text, images, logical structure, "shell integrayion", and more.
  • Quick roundup of bitmap graphics availability in free/open-source terminal emulators
    20 projects | /r/linux | 28 Feb 2022
    DomTerm - JavaScript, Electron, Qt - Web browser, Linux (+ others?)
  • Using tree data structures to implement terminal split panes
    3 projects | news.ycombinator.com | 30 Jan 2022
    DomTerm (https://domterm.org) uses the Golden Layout library (https://github.com/golden-layout/golden-layout). As far as I can tell, this does everything mentioned in the article. It also supports tabs, and you can also reposition terminal windows by dragging, neither of which I saw mentioned in the article. (I'm currently working on being able to drag between top-level windows. It sort-of-works, but only at the proof-of-concept level.)
  • Terminal support for Emoji – or why terminals don't like families
    6 projects | news.ycombinator.com | 28 Jan 2022
    DomTerm (https://domterm.org) does a pretty good job IMNSO. See screenshot here: https://domterm.org/Features.html . DomTerm mostly delegates to the browser and the font how to compose extended Grapheme Clusters.

    Unfortunately, as far as I know there is no "complete" monospace font set that handles emoji. Ideally, you want a font with two character widths, with double-width for emoji, hanji (CJK characters), and similar. Instead the browser will substitute these characters from some variable-width font, and then the spacing will be off.

    DomTerm handles this by putting double-width characters as well as Extended Grapheme Clusters in a separate span that is forced to have the correct width. I created a library https://github.com/PerBothner/unicode-properties based on other people's code but optimized for DomTerm's needs: It provides both East Asian Width (for recognizing double-width characters) and character classes (for grapheme clusters) in a single efficient trie structure.

    The DomTerm equivalent of tmux's "select mode" is grapheme-cluster-aware, so left/right-arrow will correct move over an entire grapheme cluster.

    6 projects | news.ycombinator.com | 28 Jan 2022
    Please try DomTerm (https://domterm.org). The 2.9.4 AppImage (https://github.com/PerBothner/DomTerm/releases/tag/2.9.4) should have the needed support for grapheme clusters and hopefully work on reasonably up-to-date Linux systems. Of course there are more recent fixes and improvements if you don't mind building from source.
  • Tauri – Electron alternative written in Rust
    17 projects | news.ycombinator.com | 5 Jan 2022
  • Mosh: The Mobile Shell
    15 projects | news.ycombinator.com | 11 Aug 2021
    DomTerm has nice remote-terminal solution: https://domterm.org/Remoting-over-ssh.html . Compared to mosh is supports a much more complete xterm-like terminal, runs on Windows (using WSL), does not require superuser/admin access (runs on top of plain ssh), has an integrated tmux-style multiplier, and is actively developed. Like mosh it has predictive echo, and detach/attach. It also has an optional local-input-edit mode (used by default if the remote terminal is in icanon mode). An easily-installable AppImage is available (https://github.com/PerBothner/DomTerm/releases). Feedback welcome.

What are some alternatives?

When comparing guardian-agent and DomTerm you can also consider the following projects:

Mosh - Mobile Shell

mosh - Mobile Shell

yaft - yet another framebuffer terminal

wezterm - A GPU-accelerated cross-platform terminal emulator and multiplexer written by @wez and implemented in Rust

tauri - Build smaller, faster, and more secure desktop applications with a web frontend.

openssh-portable - Portable OpenSSH

muxile - Putting tmux on your mobile - Muxile is a tmux plugin that lets you control a running tmux session with your phone, no app needed.

nushell - A new type of shell

golden-layout - A multi window layout manager for webapps

sycamore-mac