class Net::SSH::Config
The Net::SSH::Config class is used to parse OpenSSH configuration files, and translates that syntax into the configuration syntax that Net::SSH understands. This lets Net::SSH scripts read their configuration (to some extent) from OpenSSH configuration files (~/.ssh/config, /etc/ssh_config, and so forth).
Only a subset of OpenSSH configuration options are understood:
-
ChallengeResponseAuthentication => maps to the :auth_methods option challenge-response (then coleasced into keyboard-interactive)
-
KbdInteractiveAuthentication => maps to the :auth_methods keyboard-interactive
-
Ciphers => maps to the :encryption option
-
Compression => :compression
-
CompressionLevel => :compression_level
-
ConnectTimeout => maps to the :timeout option
-
ForwardAgent => :forward_agent
-
GlobalKnownHostsFile => :global_known_hosts_file
-
HostBasedAuthentication => maps to the :auth_methods option
-
HostKeyAlgorithms => maps to :host_key option
-
HostKeyAlias => :host_key_alias
-
HostName => :host_name
-
IdentityFile => maps to the :keys option
-
IdentityAgent => :identity_agent
-
IdentitiesOnly => :keys_only
-
CheckHostIP => :check_host_ip
-
Macs => maps to the :hmac option
-
PasswordAuthentication => maps to the :auth_methods option password
-
Port => :port
-
PreferredAuthentications => maps to the :auth_methods option
-
ProxyCommand => maps to the :proxy option
-
ProxyJump => maps to the :proxy option
-
PubKeyAuthentication => maps to the :auth_methods option
-
RekeyLimit => :rekey_limit
-
StrictHostKeyChecking => :strict_host_key_checking
-
User => :user
-
UserKnownHostsFile => :user_known_hosts_file
-
NumberOfPasswordPrompts => :number_of_password_prompts
-
FingerprintHash => :fingerprint_hash
Note that you will never need to use this class directly–you can control whether the OpenSSH configuration files are read by passing the :config option to Net::SSH.start. (They are, by default.)
Public Class Methods
# File lib/net/ssh/config.rb, line 60 def default_auth_methods @@default_auth_methods.clone end
Returns an array of locations of OpenSSH configuration files to parse by default.
# File lib/net/ssh/config.rb, line 56 def default_files @@default_files.clone end
Filters ::default_files down to the files that are expandable.
# File lib/net/ssh/config.rb, line 186 def expandable_default_files default_files.keep_if do |path| begin File.expand_path(path) true rescue ArgumentError false end end end
Loads the configuration data for the given host from all of
the given files (defaulting to the list of files returned by
default_files), translates the resulting hash into the options recognized
by Net::SSH, and returns them.
# File lib/net/ssh/config.rb, line 68 def for(host, files=expandable_default_files) translate(files.inject({}) { |settings, file| load(file, host, settings) }) end
Load the OpenSSH configuration settings in the given file for
the given host. If settings is given, the options
are merged into that hash, with existing values taking precedence over
newly parsed ones. Returns a hash containing the OpenSSH options. (See
translate for how to convert the OpenSSH options into Net::SSH options.)
# File lib/net/ssh/config.rb, line 80 def load(path, host, settings={}, base_dir = nil) file = File.expand_path(path) base_dir ||= File.dirname(file) return settings unless File.readable?(file) globals = {} block_matched = false block_seen = false IO.foreach(file) do |line| next if line =~ /^\s*(?:#.*)?$/ if line =~ /^\s*(\S+)\s*=(.*)$/ key, value = $1, $2 else key, value = line.strip.split(/\s+/, 2) end # silently ignore malformed entries next if value.nil? key.downcase! value = unquote(value) value = case value.strip when /^\d+$/ then value.to_i when /^no$/i then false when /^yes$/i then true else value end if key == 'host' # Support "Host host1 host2 hostN". # See http://github.com/net-ssh/net-ssh/issues#issue/6 negative_hosts, positive_hosts = value.to_s.split(/\s+/).partition { |h| h.start_with?('!') } # Check for negative patterns first. If the host matches, that overrules any other positive match. # The host substring code is used to strip out the starting "!" so the regexp will be correct. negative_matched = negative_hosts.any? { |h| host =~ pattern2regex(h[1..-1]) } if negative_matched block_matched = false else block_matched = positive_hosts.any? { |h| host =~ pattern2regex(h) } end block_seen = true settings[key] = host elsif key == 'match' block_matched = eval_match_conditions(value, host, settings) block_seen = true elsif !block_seen case key when 'identityfile' (globals[key] ||= []) << value when 'include' included_file_paths(base_dir, value).each do |file_path| globals = load(file_path, host, globals, base_dir) end else globals[key] = value unless settings.key?(key) end elsif block_matched case key when 'identityfile' (settings[key] ||= []) << value when 'include' included_file_paths(base_dir, value).each do |file_path| settings = load(file_path, host, settings, base_dir) end else settings[key] = value unless settings.key?(key) end end # ProxyCommand and ProxyJump override each other so they need to be tracked togeather %w[proxyjump proxycommand].each do |proxy_key| if (proxy_value = settings.delete(proxy_key)) settings['proxy'] ||= [proxy_key, proxy_value] end end end globals.merge(settings) do |key, oldval, newval| case key when 'identityfile' oldval + newval else newval end end end
Given a hash of OpenSSH configuration options, converts them into a hash of
Net::SSH options. Unrecognized options are
ignored. The settings hash must have Strings for keys, all
downcased, and the returned hash will have Symbols for keys.
# File lib/net/ssh/config.rb, line 176 def translate(settings) auth_methods = default_auth_methods.clone (auth_methods << 'challenge-response').uniq! ret = settings.each_with_object({ auth_methods: auth_methods }) do |(key, value), hash| translate_config_key(hash, key.to_sym, value, settings) end merge_challenge_response_with_keyboard_interactive(ret) end