ssh config

用户 ~/.ssh/config
系统 /etc/ssh/ssh_config
参考
- ssh_config.5

# 指定配置文件
ssh -F /path/to/configfile

Include
- 包含其他配置文件 - 支持 glob 和 ~ 展开

# 网关服务器
Host my-gate
User root
Hostname 1.2.3.4

# 通过 my-gate 链接 1.2.3.100
# busybox 的 nc 没有 -q, 需要
Host my-gate-110
User root
ProxyCommand ssh -q qc-sh-1 nc -q0 1.2.3.100 22

Host/Match 区分段落

通配 Host
# 为匹配的 Host 指定默认 User
Host 10.10.*
    User root
# 可以 排除
Host !10.10.10.*
    User admin

# 设置所有默认参数
Host *
    UseKeychain yes
    AddKeysToAgent yes
    IdentityFile ~/.ssh/id_rsa
    User admin
    ExitOnForwardFailure yes

# 直到下一个 Host/Match
Match

Match
- canonical, final, exec, host, originalhost, user, localuser, all

通配 Host 需要放在后面

FAQ

Match 本地地址

# macOS
# grep -v 取反
ifconfig | grep 'inet ' | grep -Fv 127.0.0.1 | awk '{print $2}' | grep -qF 192.168.0.
# Linux
hostname -I | grep -qF 10.10.11.

Match exec "ifconfig | grep 'inet ' | grep -Fv 127.0.0.1 | awk '{print $2}' | grep -vqF 192.168.0"
  # IP is not 192.168.0.*
  Include ~/.ssh/not-at-home

onsubnet

#!/usr/bin/env bash

if [[ "$1" == "--help" ]] || [[ "$1" == "-h" ]] || [[ "$1" == "" ]]; then
  printf "Usage:\n\tonsubnet [ --not ] partial-ip-address\n\n"
  printf "Example:\n\tonsubnet 10.10.\n\tonsubnet --not 192.168.0.\n\n"
  printf "Note:\n\tThe partial-ip-address must match starting at the first\n"
  printf "\tcharacter of the ip-address, therefore the first example\n"
  printf "\tabove will match 10.10.10.1 but not 110.10.10.1\n"
  exit 0
fi

on=0
off=1
if [[ "$1" == "--not" ]]; then
  shift
  on=1
  off=0
fi

regexp="^$(sed 's/\./\\./g' <<< "$1")"

if [[ "$(uname)" == "Darwin" ]]; then
  ifconfig | grep -F 'inet ' | grep -Fv 127.0.0. | cut -d ' ' -f 2 | grep -Eq "$regexp"
else
  hostname -I | tr -s " " "\012" | grep -Fv 127.0.0. | grep -Eq "$regexp"
fi

if [[ $? == 0 ]]; then
  exit $on
else
  exit $off
fi

ssh config​

FAQ

Match 本地地址​

ssh config

Match 本地地址