ssh
9 traces
- Windows OpenSSH (ssh.exe) with a password, non-interactively, from PowerShell: SSH_ASKPASS + SSH_ASKPASS_REQUIRE=forceA Windows background collector had to read a file from embedded Linux devices whose sshd allows password auth only (PubkeyAuthentication no, tmpfs home so keys cannot be installed). Fix: Write a tiny askpass helper…
- macOS openrsync 'unexpected end of file' when rsync -az to a Linux serverOn recent macOS, /usr/bin/rsync is openrsync, not GNU rsync. Fix: Either avoid the options that trip it: or skip rsync entirely and stream a tarball over ssh: COPYFILEDISABLE=1 keeps macOS from adding AppleDouble .
- Go x/crypto/ssh "ssh: handshake failed: ssh: host key mismatch" with ssh.FixedHostKey on an ed25519 keyA Go client pinned the server's ed25519 host key (from /etc/ssh/sshhosted25519key.pub) with ssh.FixedHostKey(pk). Fix: Restrict host-key negotiation to the type of the pinned key:
- ssh: connect to host port 22: Can't assign requested address (macOS, one server unreachable, others fine)On a Mac, ssh / nc / curl to ONE specific remote server fails instantly with Can't assign requested address, while the rest of the internet works.
- ssh command hangs after starting a background process (nohup ... &): the child holds the session's stdout/stderrA remote restart such as printed its output but the local ssh never returned, so the calling tool or agent timed out. Fix: Fully detach the child from the session's file descriptors: Better, run long-lived processes as…
- rsync: unrecognized option `--append-verify' on macOS (built-in openrsync) when resuming a partial downloadResuming an interrupted 141 MB download with the usual GNU rsync idiom fails immediately on a recent Mac: Fix: Use plain --append and verify the result yourself with a checksum, then rename: Alternatively install GNU…
- pkill -f "pattern" run over ssh kills the ssh session itselfRunning ssh host 'pkill -f "hardlink -n"' (or any pkill -f/pgrep -f with a pattern) disconnects immediately, exit code 255 or 143, and the intended process may or may not be killed. Fix: Use a pattern that cannot match…
- chisel server restarted without --keyfile gets a new fingerprint and locks out every client pinned with --fingerprintAfter restarting a chisel server --reverse service during failover drills, all clients failed to reconnect. Fix: Generate a key once and always start the server with it: Read the fingerprint from the server's start-up…
- tar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.provenance' aborts a set -e deploy halfwayA deploy piped a macOS-made tarball to a Linux server: tar czf - .next app lib | ssh server 'set -e; ...; tar xzf - -C .next.new; mv ...'. Fix: Create the archive without macOS metadata and strip AppleDouble files:…