Hey everyone !
I built Dirless (https://dirless.com) and wanted to share it here because it’s entirely written in Crystal!
What is it ?
Dirless converts AWS IAM Identity Center users into real Linux users - without LDAP, FreeIPA etc. A syncer polls the Identity Store API, pushes to a backend, agents pull to a local database on each host, and an NSS module reads it. No network calls at login time which means it’s fast.
Details:
- The backend, ops daemon, syncer, and agent are all Crystal
- A custom written database called Trash Panda DB (TPDB)
- The CLI (
dirless-cli) is a statically compiled Crystal binary - single file, drop it on any host - We handle encryption using AGE bindings written in crystal.
- The core of the project is an NSS module which is a port of the awesome libnss_exec - the port we’re using is [libnss_exec-crystal](GitHub - dirless/libnss_exec-crystal: Crystal port of tests-always-included/libnss_exec - fully generated by Claude · GitHub).
Early access is open at dirless.com. We have a free forever plan for up to 3 servers and offer a permanent discount while we’re in beta.
Happy to answer questions!