The sys admin's daily grind: Shell In A Box

Sea Shells in a Box

Article from Issue 167/2014
Author(s):

At some point, any service that can't run fast enough will be put on the web. So, why not do this for remote login? With a little JavaScript and CSS wizardry, a software tool called "Shell In A Box" sends a shell to the browser.

The web login tool I am looking at today is available in many distributions, or you can download it from the website [1]. I got Shell In A Box to jump onto my Kubuntu lab machine like this:

apt-get -fym install shellinabox

It runs as a service in the background, normally listening on port 4200. When I then surf to localhost:4200, I see the Bash login prompt and can log on and go about my work in the normal way (Figure 1). It doesn't even have to be a full login. I can also redirect the output from programs running in Bash to the web.

Figure 1: With the Shell In A Box web server running on a server, admins can use their browsers to address it; the reward for doing so is a Bash login.

Shell In A Box is easily configurable. Typing

shellinaboxd -t--localhost-only -p 8001--no-beep -s'/htop/:nobody:nogroup:/:htop-d 5'

beams the Htop process monitor into the web. The -t parameter disables SSL encryption, which is enabled by default. Switching this off here is less critical than you might think, because I am only letting Shell In A Box listen locally on 127.0.0.1 – in a box in the true sense of the word. If you don't like the idea of the default port (4200), you can choose a different one; this is handled by -p 8001 in my example. The --no-beep option disables the annoying notification tones.

Miscellaneous Crustaceans

The -s parameter is followed by the actual shell command, whose output you want to display in the browser. You can do this with multiple box shell instances at the same time, which is why I specified a URL (/htop) to distinguish between the instances. To see the output, I thus need to enter a URL of http://127.0.0.1/htop in my browser's address bar. The results look like Figure  2.

Figure 2: The Htop process monitor running in Shell In A Box. Despite being displayed in the browser, hotkeys like M still work.

Besides statically displaying the typical text flow from standard command-line tools, the browser also supports interactive working, assuming that the tools you use have an interactive mode. For example, if you press the M key in the Htop output, the browser shows the processes sorted in descending order by memory requirement, just as in the native command line.

As always in production operations, I would advise caution with the shellinaboxd. If you export your Bash to the web, you should at least insist on HTTPS. The user rights also need to be as conservative as possible, as shown in the Htop example, where I specified nobody:nogroup.

Charly Kühnast

Charly Kühnast is a Unix operating system administrator at the Data Center in Moers, Germany. His tasks include firewall and DMZ security and availability. He divides his leisure time into hot, wet, and eastern sectors, where he enjoys cooking, freshwater aquariums, and learning Japanese, respectively.

Buy this article as PDF

Express-Checkout as PDF
Price $2.95
(incl. VAT)

Buy Linux Magazine

SINGLE ISSUES
 
SUBSCRIPTIONS
 
TABLET & SMARTPHONE APPS
Get it on Google Play

US / Canada

Get it on Google Play

UK / Australia

Related content

  • Charly's Column: Terminator

    Friends are all about friendship – names and appearances typically don’t play any role at all. Sys admin Charly’s friend the Terminator is a convincing example.

  • Social Aid

    Fortunately, Facebook is not the only place you can chat: When sys admin columnist Charly Kühnast visits the web chat center Reddit, he often goes without a web browser and uses the RTV tool, which can even display photos and videos on plain text consoles.

  • Charly's Column: Fish

    Columnist Charly serves up Fish as the "shellfish" of the day. His conclusion: tasty, but not something you would want every day.

  • Charly’s Column: Cluster SSH

    Charly doesn’t relish the idea of searching through the logfiles of a dozen proxy servers when page requests fail. Now that he has deployed Cluster SSH, he can pull the strings on many machines at the same time.

  • PHP Shell and Shell in a Box

    Firewalls often block shell access for remote users on a corporate network or at an Internet cafe. Luckily, tools like PHP Shell and Shell in a Box put the shell in a browser window.

comments powered by Disqus
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters

Support Our Work

Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.

Learn More

News