jeff.wheeler.blog

Most people I work with have used OpenSSH but aren’t too familiar with its features. It’s got a lot of creature comforts! It also has powerful security features some people misuse by mistake, and that’s dangerous! There’s no real TL;DR here, but if you need the highlights: use ssh keys to avoid typing passwords into servers all day use ssh-agent to avoid typing your passphrase all day use ProxyJump or ForwardAgent to avoid copying your secret keys onto jump servers use HashKnownHosts so your ~/. ...

Ubuntu 18.04 LTS is planned for release soon. I’m looking forward to the inclusion of an upgraded openssh-client package. It will finally support the ProxyJump feature, which gives you an easy way to configure ssh to connect by way of jump hosts. It’s been available on Mac for years. # $HOME/.ssh/config Host *.example.com ProxyJump j@jumper.acme.com:12345 In today’s world of perimeter security, mergers & acquisitions, moonlighting, and defense-in-depth networking, you may find yourself doing several ssh hops to get from your workstation to a target host you need to inspect or manage: ...