unix socket support

[cyberb]

What would you like to be added?

I would like to be able to not use any tcp ports and use only unix sockets.

Why is this needed?

I am working on https://github.com/syncloud/platform project where I am allowing non tech users to run various popular services like crowdsec on a single (some times not very powerful) device. Apps are coming from the store and having ports does not really help. Many apps support unix socket, to some I have added it myself (matrix-org/dendrite@985298c).
Are you open for such a feature, I could try to implement server side and probably in some bouncers.

/kind feature

[github-actions]

@cyberb: Thanks for opening an issue, it is currently awaiting triage.

In the meantime, you can:

1. Check Crowdsec Documentation to see if your issue can be self resolved.
2. You can also join our Discord.
3. Check Releases to make sure your agent is on the latest version.

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[github-actions]

@cyberb: There are no 'kind' label on this issue. You need a 'kind' label to start the triage process.

• /kind feature
• /kind enhancement
• /kind bug
• /kind packaging

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[cyberb]

/kind feature

[LaurenceJJones]

We have spoken about this internally for a while. However, finding a time to do it as well as going through the bouncer (underlying SDK https://github.com/crowdsecurity/go-cs-bouncer ) to support it takes some time to which we wouldn't know if people would use it.

I'm all for this feature and so are the team as it would help solo users since they wouldn't need to bind a port if they are not exposing the API.

[LaurenceJJones]

We have started creating a shared module between go based bouncers. Find it here, this is where the connection code should live.

[mmetc]

Thanks @LaurenceJJones , just a note

this is where the connection code should live.

Yes if the code is reusable for both crowdsec and bouncers. If it's only for bouncers it can stay in go-cs-bouncer. Let me know if you need help for the functional tests

[LaurenceJJones]

Closing issue due to feature being released as of 1.6.1, however, currently none of the remediation components support unix sockets.

Firstly we will distribute support via our golang lib which will be tracked as this issue.

Closing issue as completed in main CrowdSec codebase.