🎨 update Readme

Phinease · Phinease · commit e0e734b3729f · 2025-07-31T09:30:03.000+08:00
diff --git a/README.md b/README.md
@@ -1,5 +1,3 @@
-[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/modelengine-group-nexent-badge.png)](https://mseep.ai/app/modelengine-group-nexent)
-
 ![Nexent Banner](./assets/NexentBanner.png)
 
 [![English](https://img.shields.io/badge/English-README-blue)](README.md)
diff --git a/docker/openssh-server/config/.bash_history b/docker/openssh-server/config/.bash_history
@@ -0,0 +1,12 @@
+pwd
+pwd
+ls -la
+pwd
+ls -la
+df -h
+ls -la
+pwd
+ls -la logs/
+ls -la custom-cont-init.d/
+cat logs/loginfo.txt
+cat custom-cont-init.d/99-sshd-timeout-config
diff --git a/docker/openssh-server/config/.ssh/authorized_keys b/docker/openssh-server/config/.ssh/authorized_keys
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKffjYHsaAgs2CP636ykBe03KR9UYApscn6NRTu/4XHi root@7e89bdb58508
diff --git a/docker/openssh-server/config/authorized_keys b/docker/openssh-server/config/authorized_keys
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKffjYHsaAgs2CP636ykBe03KR9UYApscn6NRTu/4XHi root@7e89bdb58508
diff --git a/docker/openssh-server/config/custom-cont-init.d/99-sshd-timeout-config b/docker/openssh-server/config/custom-cont-init.d/99-sshd-timeout-config
@@ -0,0 +1,20 @@
+#!/usr/bin/with-contenv bash
+
+# Configure SSH timeout settings for nexent terminal tool
+echo "Configuring SSH timeout settings (60 minutes)..."
+
+# Fix SSH host key permissions (must be 600 for private keys)
+echo "Fixing SSH host key permissions..."
+find /config -name "*_key" -type f -exec chmod 600 {} \; 2>/dev/null || true
+find /config/ssh_host_keys -name "*_key" -type f -exec chmod 600 {} \; 2>/dev/null || true
+echo "SSH host key permissions fixed"
+
+# Append timeout configuration to sshd_config
+cat >> /config/sshd/sshd_config << 'SSHD_EOF'
+
+# Nexent Terminal Tool - Session timeout configuration (60 minutes = 3600 seconds)
+ClientAliveInterval 300
+ClientAliveCountMax 12
+SSHD_EOF
+
+echo "SSH timeout configuration applied successfully"
diff --git a/docker/openssh-server/config/logs/loginfo.txt b/docker/openssh-server/config/logs/loginfo.txt
@@ -0,0 +1 @@
+The current log file is named "current". The rotated log files are gzipped, named with a TAI64N timestamp and a ".s" extension
diff --git a/docker/openssh-server/config/ssh_host_keys/ssh_host_ecdsa_key b/docker/openssh-server/config/ssh_host_keys/ssh_host_ecdsa_key
@@ -0,0 +1,9 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAaAAAABNlY2RzYS
+1zaGEyLW5pc3RwMjU2AAAACG5pc3RwMjU2AAAAQQR0QRXV2gLQge6hay8TR9zayzBNWtf1
+XhEXPdsvpdgf6T2y7Q8RJMy6AviwfUqrkr9Hb3WVZA5LKJJ1SqRqrGyYAAAAuKmFQqiphU
+KoAAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHRBFdXaAtCB7qFr
+LxNH3NrLME1a1/VeERc92y+l2B/pPbLtDxEkzLoC+LB9SquSv0dvdZVkDksoknVKpGqsbJ
+gAAAAhAKzhlmW3JRAupS4GAnfRapHv3cZR8wuf0L44RDHXzTiNAAAAGnJvb3RAbmV4ZW50
+LW9wZW5zc2gtc2VydmVyAQIDBAU=
+-----END OPENSSH PRIVATE KEY-----
diff --git a/docker/openssh-server/config/ssh_host_keys/ssh_host_ecdsa_key.pub b/docker/openssh-server/config/ssh_host_keys/ssh_host_ecdsa_key.pub
@@ -0,0 +1 @@
+ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHRBFdXaAtCB7qFrLxNH3NrLME1a1/VeERc92y+l2B/pPbLtDxEkzLoC+LB9SquSv0dvdZVkDksoknVKpGqsbJg= root@nexent-openssh-server
diff --git a/docker/openssh-server/config/ssh_host_keys/ssh_host_ed25519_key b/docker/openssh-server/config/ssh_host_keys/ssh_host_ed25519_key
@@ -0,0 +1,7 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACBojXxqpEcBm4sZj+ton2rbB9XWaIBWRO6Y3mvFtixCUgAAAKBLrdVNS63V
+TQAAAAtzc2gtZWQyNTUxOQAAACBojXxqpEcBm4sZj+ton2rbB9XWaIBWRO6Y3mvFtixCUg
+AAAEDeYCbwP+CabBNb8E4IR+hThwrSdiLMG+PXNFllaF+r3miNfGqkRwGbixmP62ifatsH
+1dZogFZE7pjea8W2LEJSAAAAGnJvb3RAbmV4ZW50LW9wZW5zc2gtc2VydmVyAQID
+-----END OPENSSH PRIVATE KEY-----
diff --git a/docker/openssh-server/config/ssh_host_keys/ssh_host_ed25519_key.pub b/docker/openssh-server/config/ssh_host_keys/ssh_host_ed25519_key.pub
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGiNfGqkRwGbixmP62ifatsH1dZogFZE7pjea8W2LEJS root@nexent-openssh-server
diff --git a/docker/openssh-server/config/ssh_host_keys/ssh_host_rsa_key b/docker/openssh-server/config/ssh_host_keys/ssh_host_rsa_key
@@ -0,0 +1,38 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABlwAAAAdzc2gtcn
+NhAAAAAwEAAQAAAYEAqzUClYvO8PEr05XkHYkTfeZzqD2AzQsvAT8M5P/c8Fuy5pjtm7Xp
+AMyo+YN2Vacl0aKZsx5JcxKFlM9XOLPsx6RDSIsSxtMALEMGbGqpK1XmBVmU4cnwo6rEOi
+gTNgh9Pyl6/Nsfxeo+cZBAekW/JjFLO3BmnNbAxkjPeOBpO6Bz5t931KlGShgaFKG7+6n/
+CwoB/PvT3Po8IUSS0HZKAiVT63iR4T6VjJ1LTpBo0qFSTNgUXrm+l7o9JLi5gQfkiV7+C/
+iwO82gdwZeUiVGrMnfd8CwzxZcMqhEt6rd5D1OKP19chk7zzvDy1hCbuCnUu/hsYrWiJXR
+7Z4RvgiFTdZ8Y3I3qqMYwVLndWpSGMGR3qSVtgAQm4mWu7yQu7KAEBNEPj7fyFtiucM+Kg
+jL/xMisYgfZlD0oQg1nnYa7w01UONb1YP9iEEW7WQiHxAOMLlZC7NMulzyLfJkeTxvGqFU
+tbEpCClAqd7ECnkc6V9Dlt6CueakpkvlU6xMpwTLAAAFkJJLpZKSS6WSAAAAB3NzaC1yc2
+EAAAGBAKs1ApWLzvDxK9OV5B2JE33mc6g9gM0LLwE/DOT/3PBbsuaY7Zu16QDMqPmDdlWn
+JdGimbMeSXMShZTPVziz7MekQ0iLEsbTACxDBmxqqStV5gVZlOHJ8KOqxDooEzYIfT8pev
+zbH8XqPnGQQHpFvyYxSztwZpzWwMZIz3jgaTugc+bfd9SpRkoYGhShu/up/wsKAfz709z6
+PCFEktB2SgIlU+t4keE+lYydS06QaNKhUkzYFF65vpe6PSS4uYEH5Ile/gv4sDvNoHcGXl
+IlRqzJ33fAsM8WXDKoRLeq3eQ9Tij9fXIZO887w8tYQm7gp1Lv4bGK1oiV0e2eEb4IhU3W
+fGNyN6qjGMFS53VqUhjBkd6klbYAEJuJlru8kLuygBATRD4+38hbYrnDPioIy/8TIrGIH2
+ZQ9KEINZ52Gu8NNVDjW9WD/YhBFu1kIh8QDjC5WQuzTLpc8i3yZHk8bxqhVLWxKQgpQKne
+xAp5HOlfQ5begrnmpKZL5VOsTKcEywAAAAMBAAEAAAGAHx9cUGYhYNBemLB7Ttkvx2fAp5
+lClEOPsGjPRcOzXKg2vc+YBgHMEP6jSvRYaxqe99xYl2SOkpIP4WzNnLusc+BK8OGDMMyD
+kAhBHy1Ggl+zmE5gD6l/iqkM0cueLmjdp8E5H8UPohFCd69y4SdTp7Q3Sl9U7/bkBUeQG5
+ej2ZiB6Tq/VFPPOMHn389E1mthNxcDJIN80INWse9+xtFyA7DYcAozbqBLXEvtuCLtQzjb
+NqfjEBMw7/EFk2rXIfsWhmVYL5EJfHYjouCVwSJ8rXWftk2HZUvIbfppydxmH/LAhL0IXW
+kKn1mPJlreCZhv1GbtW5wzcZPmMr15uxBK6L+o2Bo4ecBgH1l9t1QGZgBpYT8KeDCXX2aM
+6zZk62ZXdutAHhyf0TEGzdgDZxKA3yjAUisUV2EohBenIlssgE/QTaQbpBfOyz45BBEHPg
+01i4P57lOCJyqk/DIcab1vkj9s7KpPWy2BoQWFdJSu5eudBQf98p+Am70L7OJEM7SFAAAA
+wE/gLU6Mxo5ubfr52x5qFl1GGAQSDFUCCEsgSHbuqDzO1evGBpt7i299n7dRhYDeEKQ8mU
+s6FEVabPzPtLOTnVwDQ8LIJE3Fs/spNcozH3ET9uJXcuNU2/oWl5gXwoIZLGKWJT8eJE6q
+Az0J9/XUwacz2YGp6hTDRVZCIwO6U8ja49SzuxySfyt5cMibejS/gVYf/L02gFkx+YuYcU
+XIxXILZzvUM8DS5bgSyNyMvX7AUmYDhi41ZzHD6fYeRvdasQAAAMEA5elLR3yg1Ho7Nfss
+eIf/NSvXHdm4GJTOyh5QCuLGxzS5NXRZVUWG7VP072PcvVfls7JpePOtS2pJ1uHdzmLMpB
+6PFb3X9mQ7JsrM29eQq6NITpLLhJHFAKzFjy8kug2sV7W6LfqGWVs8taMjsagS4tqyKEfK
+eB4FTbOfp0gW+/IcyqenArkZw93r7f7yq1h5TvqmKWXZmCTKnVtN6umZ3lQPqlCz7QK2vX
+hJTMFR+d9QYARLpNrH61x2m6ZH62RVAAAAwQC+omne4Mu8umAxeINkphUnWjDLKVgq2aj2
+HhGBmNPFyIExbnNRxqbaW/ZxPmeulIMSwVvYVStp/LPr+wj69dy9pba1AgJWnSMfvBff8S
+jDNwiZuCsknJ9jQLAAVWu1w2hewT5wTa1AnGD2CzYn7YwhwwSBfEXg+9Se+eEOU6I18u6M
+TjkfQm5gODqaRU0KIsCFAxNREJ30uO4kFVRAeZdNcxMVFZ0NjSuya/3e7M38Efa++CYSYg
+OpZcZ/72O45J8AAAAacm9vdEBuZXhlbnQtb3BlbnNzaC1zZXJ2ZXIB
+-----END OPENSSH PRIVATE KEY-----
diff --git a/docker/openssh-server/config/ssh_host_keys/ssh_host_rsa_key.pub b/docker/openssh-server/config/ssh_host_keys/ssh_host_rsa_key.pub
@@ -0,0 +1 @@
+ssh-rsa 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 root@nexent-openssh-server
diff --git a/docker/openssh-server/config/sshd.pid b/docker/openssh-server/config/sshd.pid
@@ -0,0 +1 @@
+205
diff --git a/docker/openssh-server/config/sshd/sshd_config b/docker/openssh-server/config/sshd/sshd_config
@@ -0,0 +1,135 @@
+#	$OpenBSD: sshd_config,v 1.105 2024/12/03 14:12:47 dtucker Exp $
+
+# This is the sshd server system-wide configuration file.  See
+# sshd_config(5) for more information.
+
+# This sshd was compiled with PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+# The strategy used for options in the default sshd_config shipped with
+# OpenSSH is to specify options with their default value where
+# possible, but leave them commented.  Uncommented options override the
+# default value.
+
+# Include configuration snippets before processing this file to allow the
+# snippets to override directives set in this file.
+#Include /etc/ssh/sshd_config.d/*.conf
+
+Port 2222
+#AddressFamily any
+#ListenAddress 0.0.0.0
+#ListenAddress ::
+
+#HostKey /etc/ssh/ssh_host_rsa_key
+#HostKey /etc/ssh/ssh_host_ecdsa_key
+#HostKey /etc/ssh/ssh_host_ed25519_key
+
+# Ciphers and keying
+#RekeyLimit default none
+
+# Logging
+#SyslogFacility AUTH
+#LogLevel INFO
+
+# Authentication:
+
+#LoginGraceTime 2m
+#PermitRootLogin prohibit-password
+#StrictModes yes
+#MaxAuthTries 6
+#MaxSessions 10
+
+#PubkeyAuthentication yes
+
+# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
+# but this is overridden so installations will only check .ssh/authorized_keys
+AuthorizedKeysFile	.ssh/authorized_keys
+
+#AuthorizedPrincipalsFile none
+
+#AuthorizedKeysCommand none
+#AuthorizedKeysCommandUser nobody
+
+# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
+#HostbasedAuthentication no
+# Change to yes if you don't trust ~/.ssh/known_hosts for
+# HostbasedAuthentication
+#IgnoreUserKnownHosts no
+# Don't read the user's ~/.rhosts and ~/.shosts files
+#IgnoreRhosts yes
+
+# To disable tunneled clear text passwords, change to "no" here!
+PasswordAuthentication no
+#PermitEmptyPasswords no
+
+# Change to "no" to disable keyboard-interactive authentication.  Depending on
+# the system's configuration, this may involve passwords, challenge-response,
+# one-time passwords or some combination of these and other methods.
+#KbdInteractiveAuthentication yes
+
+# Kerberos options
+#KerberosAuthentication no
+#KerberosOrLocalPasswd yes
+#KerberosTicketCleanup yes
+#KerberosGetAFSToken no
+
+# GSSAPI options
+#GSSAPIAuthentication no
+#GSSAPICleanupCredentials yes
+
+# Set this to 'yes' to enable PAM authentication, account processing,
+# and session processing. If this is enabled, PAM authentication will
+# be allowed through the KbdInteractiveAuthentication and
+# PasswordAuthentication.  Depending on your PAM configuration,
+# PAM authentication via KbdInteractiveAuthentication may bypass
+# the setting of "PermitRootLogin prohibit-password".
+# If you just want the PAM account and session checks to run without
+# PAM authentication, then enable this but set PasswordAuthentication
+# and KbdInteractiveAuthentication to 'no'.
+#UsePAM no
+
+#AllowAgentForwarding yes
+# Feel free to re-enable these if your use case requires them.
+AllowTcpForwarding no
+GatewayPorts no
+X11Forwarding no
+#X11DisplayOffset 10
+#X11UseLocalhost yes
+#PermitTTY yes
+#PrintMotd yes
+#PrintLastLog yes
+#TCPKeepAlive yes
+#PermitUserEnvironment no
+#Compression delayed
+#ClientAliveInterval 0
+#ClientAliveCountMax 3
+#UseDNS no
+PidFile /config/sshd.pid
+#MaxStartups 10:30:100
+#PermitTunnel no
+#ChrootDirectory none
+#VersionAddendum none
+
+# no default banner path
+#Banner none
+
+# override default of no subsystems
+Subsystem	sftp	internal-sftp
+
+# Example of overriding settings on a per-user basis
+#Match User anoncvs
+#	X11Forwarding no
+#	AllowTcpForwarding no
+#	PermitTTY no
+#	ForceCommand cvs server
+
+# Nexent Terminal Tool - Session timeout configuration (60 minutes = 3600 seconds)
+ClientAliveInterval 300
+ClientAliveCountMax 12
+
+# Nexent Terminal Tool - Session timeout configuration (60 minutes = 3600 seconds)
+ClientAliveInterval 300
+ClientAliveCountMax 12
+
+# Nexent Terminal Tool - Session timeout configuration (60 minutes = 3600 seconds)
+ClientAliveInterval 300
+ClientAliveCountMax 12
diff --git a/docker/openssh-server/ssh-keys/openssh_server_key b/docker/openssh-server/ssh-keys/openssh_server_key
@@ -0,0 +1,7 @@
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACCn342B7GgILNgj+t+spAXtNykfVGAKbHJ+jUU7v+Fx4gAAAJjSsG/V0rBv
+1QAAAAtzc2gtZWQyNTUxOQAAACCn342B7GgILNgj+t+spAXtNykfVGAKbHJ+jUU7v+Fx4g
+AAAECsYIiZK4+xeslLb/QNeF83Y9MGVXrrhcciVKbMkMsWa6ffjYHsaAgs2CP636ykBe03
+KR9UYApscn6NRTu/4XHiAAAAEXJvb3RAN2U4OWJkYjU4NTA4AQIDBA==
+-----END OPENSSH PRIVATE KEY-----
diff --git a/docker/openssh-server/ssh-keys/openssh_server_key.pub b/docker/openssh-server/ssh-keys/openssh_server_key.pub
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKffjYHsaAgs2CP636ykBe03KR9UYApscn6NRTu/4XHi root@7e89bdb58508

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,3 @@`
`1`		`-[![MseeP.ai Security Assessment Badge](https://mseep.net/pr/modelengine-group-nexent-badge.png)](https://mseep.ai/app/modelengine-group-nexent)`
`2`		`-`
`3`	`1`	`![Nexent Banner](./assets/NexentBanner.png)`
`4`	`2`
`5`	`3`	`[![English](https://img.shields.io/badge/English-README-blue)](README.md)`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKffjYHsaAgs2CP636ykBe03KR9UYApscn6NRTu/4XHi root@7e89bdb58508`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+The current log file is named "current". The rotated log files are gzipped, named with a TAI64N timestamp and a ".s" extension`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHRBFdXaAtCB7qFrLxNH3NrLME1a1/VeERc92y+l2B/pPbLtDxEkzLoC+LB9SquSv0dvdZVkDksoknVKpGqsbJg= root@nexent-openssh-server`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGiNfGqkRwGbixmP62ifatsH1dZogFZE7pjea8W2LEJS root@nexent-openssh-server`