Show HN: Linux server management over SSH – written in Rust and Tauri(serverbox.stupidlabs.lol)

45 pointsby freakynit6 hours ago20 comments

omidmash3 hours ago
Are you guys really letting a (as of now) non FOSS, presumably vibecoded app have access to your servers, presumably as root, as most people don't follow best practices?
- Arrowmaster2 hours ago
  The choice of Tauri for a Linux app using AppImage is a dead giveaway they have no clue what they are doing.
  - hn92726819an hour ago
    Can you expand on that? The point of an appimage is so you don't have any dependencies or linking errors. Rust can still link to libraries, so that doesn't seem to be a weird pattern to me.
    Electron appimage would be weird though since it does all its bundling by itself
- dewey3 hours ago
  Most people already run software like that on their computer, even if it's just your coding harness that could just as easily run ssh and use your keys in ~/.ssh to connect to your servers. In my case I'd get a permission prompt from 1Password as I have my keys in there, but with all the prompts that a modern macOS throws at you the chances of it getting approved mistakenly are not zero.
  I'd not run OPs software either though.
  - glitchcrab2 hours ago
    Anyone who gives an LLM unfettered access to their ssh keys/agent socket deserves what they get IMO. I sandbox Claude with my own bubblewrap-based script which denies it access to anything I deem unnecessary.
    dewey2 hours ago
    There's many ways to shoot yourself into the foot, most things that run in your userspace can do evil things and it's not an LLM exclusive feature. Any npm package you install on your machine can put you in danger already if it executes some scripts.
- ahriad3 hours ago
  I only tested it on WSL locally, there is bo way im connecting it to a live server without seeing the sourcecode.
- marcosscriven3 hours ago
  Absolutely not.
- hoppp2 hours ago
  It's from stupidlabs.lol Made for stupid people?
- edoceo3 hours ago
  Nope, cfEngine FTW!
ramon1564 hours ago
Looks like TRUENAS if it was single-prompted. Also how will it know what my server runs if I install nothing on it? will my server just expose all information? I'm a bit confused why this was a design choice.
- freakynit4 hours ago
  I just heard of TrueNAS for the first time in my life... So, checked google images.. there is some similarity for sure.
  It detects the server OS "after SSH authentication" by running a small POSIX-shell probe.
  It will not automatically expose "all information". It can access only what the SSH account can access.
ubittibu3 hours ago
Every time I connect to my server I receive a Delivery Status Notification (Failure) email from my gmail address as if it tries to use my phpmailer to send an email to testing@example.com
edit: the email comes from my website, when I connect a new user is created in my website with random name and that email address..
DOESN’T SEEM SAFE AT ALL!
- freakynit3 hours ago
  [dead]
seemaze4 hours ago
What's the business model - and what guarantees are provided that Serverbox[0] won't rug pull after a seed round from Dillon-Edwards[1]?
[0]https://stupidlabs.lol
[1]https://clownpenisf.art
- freakynit4 hours ago
  No financial incentive in mind or planned... I was building it for myself... then, spent a few days extra polishing it so others can use it as well.
  - seemaze2 hours ago
    Thanks for the reply, did not expect a response.
    The initial inquiry was not in good faith, but a satirical critique of the project domain.
sgt2 hours ago
Only problem of course is that it's unlikely that this even exists in 5 years.
kushalpandya4 hours ago
The macOS installer is not notarized, and while adding an exception in Gatekeeper exists, not everyone would be willing to do that, especially currently when even the app source is unavailable.
- freakynit3 hours ago
  Apple charges $99/year to be able to notarize a app. Plus, it has one years long bug that any random Apple developer account can get stuck in, and then, you just can't get it notarized. Have a look at this thread: https://github.com/electron/notarize/issues/205
  I do agree that notarizing it would make installing much easier.
  Also, source code is coming day after tomorrow.
vablings3 hours ago
Pretty cool for those who are not running something like TrueNAS/FreeNAS/Proxmox. But then the question is why are you not. Even for MacOS im pretty sure you can glue up a raw bare metal box to Proxmox these days with Proxmox Datacenter Manager
thenews2 hours ago
OMG cool app, let me share my ip and cert
e12e4 hours ago
Potentially interesting - of it is at a minimum source-availble - preferably FOSS?
I assume it is vibe-coded, so would need a pretty thorough review before considering using it.
License and source availability not being on the page/faq suggest this is just a hobby project, I guess?
- freakynit4 hours ago
  Source code will be released day after tomorrow. I will add a comment in this thread itself, as well as update the site with a link to Github.
ahriad4 hours ago
This is exactly the gap I needed filled, a proper desktop panel that manages my Linux servers over SSH without installing anything on them.
Is it open source?
- freakynit4 hours ago
  Thank you...
  Source code will be released day after tomorrow. I will add a comment in this thread itself, as well as update the site with a link to Github.
  - ahriad4 hours ago
    Thank you, I tried it, so far working great. One small thing I hit: when I tried connecting to a server I'd never connected to before, it refused at first with no clear error. I had to SSH in from my terminal once to accept the host key signature, and then it worked fine. Minor, but thought I'd pass it along. Great work!
    freakynit4 hours ago
    Thank you for testing. I'll fix the issue.. tomorrow.. too tired as of now.
_def4 hours ago
Is this shipping wasm openssh or how does it work?
edit: nvm, for some reason I thought it runs in the browser.
hn_submit3 hours ago
It's free but not open-source?
- freakynit3 hours ago
  Source code will be released day after tomorrow. I will add a comment in this thread itself, as well as update the site with a link to Github.
ealhad3 hours ago
I mean yeah sure, I'll give SSH access to a blackbox. "Don't worry — the app is safe."
- freakynit3 hours ago
  Source code will be released day after tomorrow. I will add a comment in this thread itself, as well as update the site with a link to Github.
  - Arrowmaster2 hours ago
    Why not make this post the day after tomorrow then instead of today?
marcosscriven3 hours ago
You have a never ending stream of show HN. It becomes meaningless.
Show HN: Linux server management over SSH – written in Rust and Tauri
2 hours
Show HN: The wanderer – cozy weekend game with no objective
14 days
Show HN: Feature-packed 6MB Rust+Tauri free bookmarking app
16 days
Show HN: HN-jobs aggregator – updated in real-time
27 days
Show HN: One no-subscriptions online search for all your agent needs
30 days
Show HN: 100% Free Indian Railways API
35 days
Show HN: Xkcd Search
45 days
Show HN: A calculator CLI to help your agents perform calculations accurately
55 days
Show HN: Hacker-News Jobs
57 days
Show HN: Hacker-News Buddies
58 days
Show HN: HTTPS://HN-Jobs.com
59 days
Show HN: JerrySniffs – MCP Server (and API’s) for web and social media search
75 days
Show HN: Give This Markdown to Your Coding Agent Before Publishing to NPM
3 months
Show HN: Nano-RAG – Agentic multi-hog retrieval without graph database
3 months
Show HN: Chat with UFO Files
3 months
- freakynit3 hours ago
  I do. I love to build things, though these things are not that meaningful yet as I want them to be. Most of these (except last 3 and that 'A calculator CLI...') are being actively used by many.
  But I should not have shared a single `show hn` more than once.. that I will take care of going ahead.
  - marcosscriven2 hours ago
    I think what I have trouble with is the lack of awareness. Anyone and everyone can do this now. It’s great. I do so myself at home, for myself.
    But what are you (and millions of others) actually adding here?
  - bigstrat20032 hours ago
    If you truly love to build things, then actually build them, don't vibe code them.
    freakynit2 hours ago
    this is not vibe-coded... this is ai-assisted... also, i love building things.. using whatever that lets me build more efficiently.
- hoppp2 hours ago
  So its pretty much abandoneware?
gguingff4 hours ago
yikes, no thanks.
rewgs3 hours ago
Clearly vibe-coded. Hard pass.
whalesalad3 hours ago
All of these "written in rust" ai-slop tools lately. Means absolutely nothing, really.
ls-a4 hours ago
[dead]
iluvcommunism4 hours ago
[dead]
Kuyawa2 hours ago
Beautiful, I have a fetish for beautiful software so here goes my upvote ^
I believe more Rust/Tauri apps will flood the market as that's the best combo right now for desktop apps in universal knowledge reusability for those who come from the web world HTML, CSS, JS. Simplicity and portablility
Just downloaded it and at 8MB is a thing of joy to see apps small again
- Arrowmaster2 hours ago
  Won't happen until Tauri can treat Linux as a first class platform. Which they cannot do because of architectural design and library choices.