5 ms·
Neat. I was always wary about unintended side-effects of doing something like this in the main openssh server instance because I did not trust myself to configu
by tastroder 7y ago
Neat. I was always wary about unintended side-effects of doing something like this in the main openssh server instance because I did not trust myself to configure everything securely enough without accidentally exposing more than I wanted. While more work than the solution in the blog post, what worked well for me was using [0] to implement a separate server that only exposes whatever you explicitly want it to. It turned out to be pretty feature complete for my use cases (including certificate logins, SFTP, exec and working fine with curses-like applications).
[0] https://github.com/mscdex/ssh2 https://github.com/mscdex/ssh2
- unixhero 7y agoNice github username :-)
- tastroder 7y agoJust for the record, that's not my library, I just used it in a few projects. The author is on HN though.
- Franciscouzo 7y agoOn Python you can use paramiko
- e12e 7y agoThere's also Go and assembler as evidenced by: Show HN: ssh chat.shazow.net https://news.ycombinator.com/item?id=8743374 https://news.ycombinator.com/item?id=8743374 Sshtalk: An SSH-based chat made in assembler https://news.ycombinator.com/item?id=15829206 https://news.ycombinator.com/item?id=15829206