Besides two great talks by leyrer at the GPN about SSH, b0rk (Julia Evans) collected
nice tips in a mastodon thread.
I list some of them for later reference here.
Secretive is an app to store your SSH key in Apple mac's secure enclave. So instead of just storing the passphrase in your Keychain, you store your key in the trusted computing chip. I want to test it. Unfortunately, it also doensn't support
sk-keys so one cannot detect this key from the server.
So far I did something along the lines of
# This is only used on Mac
but this makes it work on all systems
# on Linux I get gnomes
agent automatically
IgnoreUnknown UseKeychain
UseKeychain yes
AddKeysToAgent yes
As mentioned in my other post about SSH forwarding you could use the following config snippet instead of -L
LocalForward <localport> IP-addr:<remoteport>
Some time ago I stumbled uppon an blog post hacking with the following feature a vimrc syncing mechanism. The basics are this
Host *
SendEnv TERM_PROGRAM TERM
Another neat feature from the thread is the replacement
ProxyJump, often coupled with Hostname %h.fulldomain
and similarly
host foo-???? bar-???? baz-????
Hostname %h.example.com
I can then ssh foo-1234, ssh baz-93hj, etc. and not have to type the entire host name.
(TODO: I have to translate this)
Also, I have to gain some experience with
Canonicalize as mentioned by deraffe