Published: Mon 24 August 2026
Updated: Sun 30 August 2026
By Julian
In Tooling .
tags: ssh 127.0.0.1 links til mac wip
Besides two great talks by leyrer at the GPN about SSH, b0rk (Julia Evans) collected
nice tips in a mastodon thread .
I list some of them for later reference here.
Secretive is an app to store your SSH key in Apple mac's secure enclave. So instead of just storing the passphrase in your Keychain, you store your key in the trusted computing chip. I want to test it. Unfortunately, it also doensn't support
sk-keys so one cannot detect this key from the server.
So far I did something along the lines of
# This is only used on Mac
but this makes it work on all systems
# on Linux I get gnomes
agent automatically
IgnoreUnknown UseKeychain
UseKeychain yes
AddKeysToAgent yes
As mentioned in my other post about SSH forwarding you could use the following config snippet instead of -L
LocalForward < localport > IP - addr :< remoteport >
Some time ago I stumbled uppon an blog post hacking with the following feature a vimrc syncing mechanism. The basics are this
Host *
SendEnv TERM_PROGRAM TERM
Another neat feature from the thread is the replacement
ProxyJump, often coupled with Hostname %h.fulldomain
and similarly
Host foo-???? bar-???? baz-????
Hostname %h.example.com
I can then ssh foo-1234, ssh baz-93hj, etc. and not have to type the entire host name.
This basically uses globbing for the input (here foo-???? for foo- and then four characters) and then fills in the input as %h into the hostname.
Let's assum a institute (here: ou for organisational unit) in a bigger organisation has to have FQDNs like ou-sub-pc-01.ou.example.com, then one could have an entry like
Host *sub-*
Hostname ou-%h.ou.example.com
in order to save some characters and only have to type ssh sub-pc-01 to SSH to the aforementioned computer.
But be aware, that you should keep in mind to not type ssh ou-sub-pc-01 or even ssh ou-sub-pc-01.ou.example.com anymore, as there the rule would also match and expand to ou-ou-sub-pc-01.ou.example.com or even ou-ou-sub-pc-01.ou.example.com.ou.example.com. So restrict your globbing.
Also, I have to gain some experience with
Canonicalize as mentioned by deraffe