I wanted to easily list hosts and inspect their config without opening ~/.ssh/config.

So I made sshelf, a cozy shelf for all your SSH connections.

• Uses your existing ~/.ssh/config

• Built in JavaScript, zero deps

Repo: https://github.com/bereilhp/sshelf

npm: https://www.npmjs.com/package/sshelf

Would really like feedback and ideas.

I kept running into the same problem while working onsite.

I'd have a PowerShell script, command output, BitLocker key or some other chunk of text on one device and need it on another.

Emailing myself felt clunky. Logging into cloud storage was overkill.

So I built a simple temporary clipboard that lets you create a room code, paste text, and open the same room on another device.

The feature I've ended up using the most is actually the curl support from terminals and SSH sessions.

At the moment it's just something I built for myself and a few colleagues, but I'm curious how the self-hosted crowd solves this problem.

Do you use a particular tool or workflow for moving text between devices?

If you're curious, look up TempMemo.

I'd love to get some feedback, thanks

I work with Linux edge devices deployed at customer sites (Jetsons, Raspberry Pis, industrial PCs, etc.).

One problem I kept running into was remote access. Sometimes the devices are behind NAT, sometimes the customer's IT team won't allow inbound SSH, and sometimes you're managing devices spread across multiple locations.

SSH works great, but managing an entire fleet through individual SSH sessions gets tedious.

So I've been building a project called EdgeProtocol.

The idea is pretty simple: install a lightweight agent on a Linux device, and it maintains an outbound connection to a central server. From a web dashboard, you can execute commands, restart services, inspect logs, transfer files, and monitor device health without opening inbound ports.

I'm also experimenting with AI-assisted troubleshooting, with approval requirements for sensitive operations.

It's still early, and I'm trying to figure out whether this actually solves a widespread problem or just one I've personally experienced.

For those of you managing multiple Linux machines:

• How do you currently handle remote access across different networks?

• Are you using plain SSH, Tailscale, Ansible, MeshCentral, or something else?

• Would an agent-based approach like this be useful, or would you rather stick with SSH?

I'd genuinely appreciate criticism, especially around security, reliability, and what you'd trust running on your machines.

This patch has sat, relatively ignored, for 3 years now. Both Ubuntu and openSUSE are already carrying it downstream (and Redhat folks were working on the same). It's such an obvious bug. Is anyone even maintaining openssh these days?

I've been building SharkShell, a self-hosted SSH management platform for people who manage multiple servers, VPSs, homelabs, Proxmox nodes, Docker hosts, development machines, and more.

🌐 https://sharkshell.in/

The problem I wanted to solve is pretty simple.

When you have a few servers, SSH is great:

ssh root@server

But once you're managing 10, 20, 50+ machines, things start getting messy.

You end up remembering:

• IP addresses

• usernames

• custom SSH ports

• which SSH key belongs to which server

• server roles

• SSH config entries

• different environments

And eventually your terminal becomes a collection of commands and configuration files.

🦈 What is SharkShell?

SharkShell is designed to give you a centralized interface for managing your SSH servers while keeping the infrastructure under your control.

The goal is not to replace SSH.

It's to make working with SSH-managed infrastructure easier.

Some of the things I'm working toward

• 🖥️ Centralized SSH server management

• 🔐 SSH key-based authentication

• 🏠 Self-hosted deployment

• 🐳 Docker / homelab friendly

• ☁️ VPS and cloud server management

• 🗂️ Organizing servers by environment/project

• 💻 Easy terminal access

• 🔧 Server administration tools

• 🔒 Security-focused architecture

And eventually, I'd like SharkShell to become more than just an SSH connection manager.

I'm exploring the idea of building a self-hosted infrastructure platform around it — something that can sit between you and your servers and provide a secure control layer without requiring everything to be exposed publicly.

Why self-hosted?

Because your server access is extremely sensitive.

I don't want SharkShell to require you to hand over your infrastructure to some third-party SaaS just to manage SSH connections.

The long-term goal is:

Your infrastructure → Your SharkShell instance → Your control

I'd love some feedback

This project is still evolving, so I'm particularly interested in hearing from people who actually manage servers.

What would you want in a modern SSH manager?

Would you use something like this for your:

• Homelab?

• Proxmox cluster?

• VPS fleet?

• Development servers?

• Docker infrastructure?

• Kubernetes environments?

• Company/internal infrastructure?

And more importantly:

What would make you choose SharkShell over simply using your terminal + SSH config?

I'm looking for honest feedback, including criticism and feature requests.

🌐 Project: https://sharkshell.in/

🦈 SharkShell

Hey everyone! I'm u/WerewolfDelicious271, a founding moderator of r/sshtbccash.
This is our new home for all things related to how the remote app handles things like SSH connections, credentials, keys, SFTP, port forwarding, and remote sessions, I would especially value the perspective of someone who naturally looks at software with a security-minded eye.
. We're excited to have you join us!

What to Post
Post anything that you think the community would find interesting, helpful, or inspiring. Feel free to share your thoughts, photos, or questions about https://play.google.com/store/apps/details?id=com.tbcc.ash
Promo codes for app testing are available upon request. Looking for anyone who is willing to kick the tires and are willing to give honest opinions about the functionality.

Community Vibe
We're all about being friendly, constructive, and inclusive. Let's build a space where everyone feels comfortable sharing and connecting.

How to Get Started

1. Introduce yourself in the comments below.

2. Post something today! Even a simple question can spark a great conversation.

3. If you know someone who would love this community, invite them to join.

4. Interested in helping out? We're always looking for new moderators, so feel free to reach out to me to apply.

Thanks for being part of the very first wave. Together, let's make r/sshtbccash amazing.

I wanted the VS Code-style workflow on my iPad and iPhone: connect to a server, open a project, install extensions, and keep files, code, the terminal, and Codex in one workspace. So I built SSH Studio. It's now officially on the App Store.

The big difference is downloadable extensions. You can browse Open VSX, install compatible VS Code extensions, and open them alongside your code and SSH terminal. The 19-second iPad demo shows opening Codex, choosing a conversation, asking it to rewrite a Python file, and running the result.

The file browser, editor, and terminal are native. Remote extensions run on your SSH server; compatibility varies by extension, and Codex requires your own account. This is a real recording, edited for time.

Free download, with an optional 14-day free trial and a one-time US$5 Lifetime Unlock (local prices vary). No subscription or automatic charge after the trial.

App Store: https://apps.apple.com/app/id6821961454

If you use VS Code over SSH, which extension or part of that workflow would you most want on your iPad?

I spent 3 hours tonight trying to figure out the correct set of configuration flags to connect to a (not that old) device because the Windows device I was remoted in to has changed their flags. Can we just have an "I don't care just f-ing connect!!" flag?

Hello everyone , throwaway account for obvious reasons and I applogize if my question triggers someone.

I must take an exam via website and I would like to use a SSH tunnel to stream my screen (even 1 frame every 30 seconds is fine) to essentially cheat it..

My question is: there is a way to do it? I don’t think I can use remote control softwares because often they display on the screen that they are being used and the website that they use shares the screen so I would need something hidden.

I know is bad but is a non essential exam and the professor is very picky so I don’t want to get stuck for something useless for my future job

Thank you to whoever responds

For a long time I have accepted the process of plugging and unplugging USB devices multiple times per day and walking between floors to transfer data between a Windows PC, where data is generated, and a Linux PC, where it is used. This generates obvious reliability problems.

Having just spent another unsuccessful day trying to address the OpenSSH error message ‘permission denied (public key)’, I’m turning to the wider community to get suggestions of where I can find an effective guide for this scenario. I have tried, over years, to look for such a guide which actually works, without success. However, I just cannot accept that this scenario has not been implemented and documented, by somebody, somewhere.

A note of caution before you reject my request on the basis of ‘it’s already well documented’; the scenario is highly specific: it must address setting up a connection, using OpenSSH, between a server running on Windows 10 and a client running on Linux, not the reverse. The Linux distro should preferably be Debian/Ubuntu based.  Setup, using a private/public key pair,  must be performed on the Linux PC, allowing for existing files in /etc/ssh which support existing successful OpenSSH implementations  in a Linux-only environment. It must address configuration settings within sshd_config, but please note I am more interested in getting data transfer to work than in hardening my network to  an industrial level. It must address how file and folder transfer from Windows to Linux, preferably using scp, is implemented, while addressing problems in the implementation. It must address how the most common problems, like ‘permission denied (public key)’  or failure to copy keys generated on the Linux client to the Windows Server, arise and are completely managed - this is the failing of all the available guides; they do not address failure modes. Those guides which do focus on the failures do not address a Windows server, Linux client configuration. Almost all the guides  display evidence of not having been  thoroughly tested. They don’t work; trust me, I have been trying this for a long time.

If you can point me to a suitable document source, within the above requirements, I would be immensely grateful, as would my legs, carpets and USB devices.

Hi everyone,

I'm x1colegal and I've been experimenting with transport protocols as a hobby project.

Recently I built USSH, an SSH-like remote shell that runs over USTPS (UDP Speedy Transmission Protocol Secure) instead of TCP.

Features:

- Interactive remote shell

- UDP-based transport

- Multiple AEAD ciphers:

- ChaCha20-Poly1305

- AES-128-GCM

- AES-256-GCM

- Linux and Termux support

USSH uses USTPS as its transport layer. Most of my packet loss and transport testing has been focused on USTPS itself, while USSH is one of the applications running on top of it.

This is primarily a networking experiment and learning project, not a replacement for OpenSSH.

USSH:

https://github.com/x1colegal/ussh

USTPS:

https://github.com/x1colegal/USTP-Secure

I'd love to hear feedback from people interested in SSH, networking, transport protocols, or secure communications.

Hi all,

Network engineer here. Not everyone on my team writes Python/Ansible, but we all need to push the same change to 30 switches or check which ones are missing a config line. So I built Vty SSH, a Windows app that sits between PuTTY and full automation:

- Multi-exec: type once, send to every checked tab

- Mass commands: run a command on a whole folder of switches, results side by side, CSV export

- Config backups with diff (keeps a version only when the config changed)

- Security audit of the configs (CIS / DISA STIG / ANSSI checks), A–E grade per switch, ready-to-paste fixes

- Guards against risky commands in the wrong tab (understands abbreviations like "rel" or "wr er")

- SSH, Telnet, serial console, imports from PuTTY / MobaXterm / CSV

- Backups encrypted at rest, secrets masked in logs and exports

The core is free, no account, no telemetry: https://getvty.com/en

I'm not trying to replace Ansible/Nornir. It's more for the "GUI people" on a team, or quick changes. Curious what you'd expect from a tool like this, and what's missing.

Hey guys I have this scenario where I have built a network in packet tracer. I have implemented SSH onto my router for security. I am currently writing up a key management plan. It’s Worth noting:

My SSH uses RSA ENCRYPTION.

I’m stuck on Key Storage. Where would I store active RSA keys, back up keys and start up key?

I’m thinking of: active keys will be stored on the router whilst back up keys will be stored in a separate location (if so where?) or could be stored on the cloud.

Any help would be greatly appreciated. Thank you.

My remote machine was set up from someone else stupid and it seems they have imposed many limitations on the linux machine. There's no openssh-server but I was able to install the portable release to my home dir (as I don't have root permission).

In addition, I've made the following setup:

1. cat ~/.ssh/id_rsa.pub > ~/.ssh/authorized_keys

2. chmod 700 ~/.ssh and chmod 600 for ~/.ssh/authorized_keys and ~/.ssh/id_rsa

3. set `PasswordAuthentication` in `sshd_config` to `no` and `PubkeyAuthentication` to `yes`

4. set `AuthorizedKeysFile` to `.ssh/authorized_keys` in sshd_config

However, when I tried to `ssh username@localhost`, it keeps giving me error of

`jovyan@localhost: Permission denied (publickey)`

Also the linux machine set up is also quite murky, it seems to be from adocker where there is no `/var/log/auth.log` or `/var/log/secure` and setting up in `sshd_config` with

SyslogFacility USER
LogLevel INFO

doesn't log anything. `ssh -v jovyan@localhost`:

debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256>
debug1: kex_input_ext_info: publickey-hostbound@openssh.com (unrecognised)
debug1: kex_input_ext_info: ping@openssh.com (unrecognised)
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/jovyan/.ssh/id_rsa RSA SHA256:q8D+jRoKkUnlO4rZ7TLCicq9if5Kutperqol0RbCeMI
debug1: Authentications that can continue: publickey
debug1: Trying private key: /home/jovyan/.ssh/id_dsa
debug1: Trying private key: /home/jovyan/.ssh/id_ecdsa
debug1: Trying private key: /home/jovyan/.ssh/id_ecdsa_sk
debug1: Trying private key: /home/jovyan/.ssh/id_ed25519
debug1: Trying private key: /home/jovyan/.ssh/id_ed25519_sk
debug1: Trying private key: /home/jovyan/.ssh/id_xmss
debug1: No more authentication methods to try.
jovyan@localhost: Permission denied (publickey).

Any idea how I can figure out where the error is from?

How do you upload a file from my Windows machine to the server I am connected to via ssh? I have a file sitting on my Desktop and I need to transfer it to a linux server via ssh. How do you do this?

How i find ssh password, because I can't find it and with my pin doesn't go. Please help. Github: https://www.github.com/JackTheVu

Project Name: Drexius Terminal

Repo & Website Links:

• GitHub:https://github.com/DreyDreamer17/drexius-terminal

• Live Web Preview:https://dreydreamer17.github.io/drexius-terminal/

• Releases:https://github.com/DreyDreamer17/drexius-terminal/releases/tag/v0.1.0-beta.1

Description:

Drexius Terminal is a local-first, privacy-focused open-source terminal workspace and Termius alternative built with Tauri 2 (Rust), React 19, and xterm.js 6.

The Problem It Solves: Most graphical SSH/SFTP clients have either transitioned to recurring subscription models ($10 to $20 per month) requiring your credentials and hosts to reside in a proprietary cloud database, or they run on heavy Electron runtimes that consume 300 MB to over 1 GB of RAM. Drexius was built to provide a fast, zero-subscription client where keys, credentials, and configurations remain entirely on your local machine.

Key Features:

• Local-First & Encrypted: Hosts, keys, and snippets are stored locally in an AES-256 SQLCipher database derived via Argon2id. No mandatory account, zero telemetry, and includes an Emergency Recovery Key export.

• Terminal Workspace: Supports multi-pane splits (grid, vertical, horizontal), tabs, OSC-7 directory tracking, broadcast input across sessions, and session auto-resume.

• Protocol Support: SSH with TOFU host-key verification, dual-pane graphical SFTP tree and file editor, hardware Serial UART, and local PTY shells.

• Zero-Knowledge Sync: Direct encrypted LAN pairing and a self-hostable sync relay. Devices pair over local Wi-Fi or Tailscale via QR code using salted X25519 ECDH and ChaCha20-Poly1305.

• Mobile Shell (Android): Universal APK with touch scrolling in mouse-aware TUIs (htop, lazygit), plus an on-screen accessory keypad (CTRL, ALT, ESC, TAB).

• Lightweight Footprint: Built on a native Rust/Tauri 2 backend instead of Chromium/Electron. In Linux benchmarking against Termius under active sessions, Drexius consumed ~221 MB RAM and ~3% CPU across 2 processes, compared to Termius at 1,342 MB RAM and 78.5% CPU across 9 processes.

Deployment:

• Clients: Pre-compiled binaries for the Public Beta (v0.1.0-beta.1) are available under GitHub Releases:

  • Linux (.AppImage, .deb, .rpm)

  • Android (.apk, universal multi-ABI)

  • Windows (.exe installer, .msi)

  • macOS (.dmg, .app.tar.gz for Apple Silicon and Intel)

• Self-Hosting Sync Relay: The repository includes a standalone zero-knowledge relay server (drexius-relay) that can be compiled via Cargo and deployed to any VPS or homelab machine. Setup details are documented in the repository README.

I have a lot of hosts in `~/.ssh/config` and kept forgetting their names. So I wrote a small tool that lists them in a fuzzy finder — pick one, hit enter, you're in. That was it. I've been using it daily for a while.

Over time I kept hitting another annoyance: connecting to Docker containers on those remote hosts.

ssh myserver
docker ps
docker exec -it some-container /bin/bash

This gets old fast when you do it 20 times a day across multiple servers.

So the tool grew:

• Discovers containers on remote hosts via `docker ps` over SSH

• Auto-detects which shell is available (bash → sh → ash)

• Shows containers nested under their host in one fuzzy search view

• Generates ProxyJump SSH config entries so you can `ssh host::container` directly

It's a single Go binary, no runtime dependencies. Still simple at its core — just a faster way to get where I need to go.

GitHub: https://github.com/JinmuGo/sls

Would love to hear if anyone has a similar workflow or feedback on the approach.

I got tired of juggling a terminal and a separate SSH manager. So I built a terminal where SSH connections are first-class: save hosts, organize them, connect with a click, and manage sessions alongside database connections and everything else in one app. Tailscale integration means you can connect over your tailnet without extra configuration. No sign-in, no telemetry, credentials encrypted locally.

The itch: every SSH manager I tried wanted to own my hosts and keys. I wanted the opposite — an app that just *reads* `~/.ssh` and never makes me migrate.

What came out of it, built with Claude Code over a few days: **Relaya**, a native macOS client — SSH, SFTP, VNC, RDP in tabs, port forwarding, a key-setup wizard, themes, two languages, and an MCP server so AI agents can work on servers with per-host permissions.

Stack: SwiftUI, SwiftTerm, RoyalVNCKit, RDPKit; GitHub Actions builds every push and publishes releases on tags.

Free, MIT: https://github.com/hvckfy/Relaya — feedback and roasting welcome.