Federated_Computer/webcoredesktop
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updates to the content

Browse Source
This commit is contained in:
david
2026-10-31 08:34:17 -06:00
parent 70f41725a8
commit a27cc6ff5e
13 changed files with 158 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/software/openssh.md
+10 -2
View File
@@ -25,6 +25,14 @@ ssh you@machine.local
## On CoreDesktop
OpenSSH is installed from pacman and `sshd.service` is enabled, so you can SSH into this computer. The firewall allows SSH on port 22, and Avahi advertises it on your LAN, so other machines can reach this one as `<hostname>.local`. Commands run with `ssh machine command` can find tools in `~/.local/bin` and mise.
OpenSSH is installed from pacman and `sshd.service` is enabled, so you can SSH into this computer. It accepts keys only, not passwords, so nobody on the same Wi-Fi can try to guess yours. Copy your public key to this computer once, from the computer you connect from:
For the client, CoreDesktop sets keepalives so a dropped connection is noticed within a minute (your `~/.ssh/config` still wins per host) and points `SSH_AUTH_SOCK` at Bitwarden's SSH agent. It also adds shell functions for port forwarding: `fip <host> <port>...` forwards local ports to the same ports on a host, `dip <port>...` stops them, and `lip` lists them. `update` keeps OpenSSH current with the pacman packages.
```
ssh-copy-id you@machine.local
```
To allow passwords again, delete `/etc/ssh/sshd_config.d/10-coredesktop-keys-only.conf` and run `sudo systemctl reload sshd`. On machines installed earlier, where someone has logged in over SSH with a password, `update` leaves passwords on so nobody is locked out; add your key, then run `bash ~/.local/share/coredesktop/system/sshd.sh` to switch.
The firewall allows SSH on port 22, and Avahi advertises it on your LAN, so other machines can reach this one as `<hostname>.local`. Commands run with `ssh machine command` can find tools in `~/.local/bin` and mise.
For the client, CoreDesktop sets keepalives so a dropped connection is noticed within a minute (your `~/.ssh/config` still wins per host) and uses [Bitwarden](/software/bitwarden/)'s SSH agent while Bitwarden is running it, and GNOME's otherwise. It also adds shell functions for port forwarding: `fip <host> <port>...` forwards local ports to the same ports on a host, `dip <port>...` stops them, and `lip` lists them. `update` keeps OpenSSH current with the pacman packages.