libvirt/tools/ssh-proxy/30-libvirt-ssh-proxy.conf.in

# SPDX-License-Identifier: LGPL-2.1-or-later

Host qemu/* qemu:system/* qemu:session/*
    ProxyCommand @libexecdir@/libvirt-ssh-proxy %h %p
    ProxyUseFdpass yes
    CheckHostIP no
tools: Introduce SSH proxy This allows users to SSH into a domain with a VSOCK device: ssh user@qemu/machineName So far, only QEMU domains are supported AND qemu:///system is looked for the first for 'machineName' followed by qemu:///session. I took an inspiration from Systemd's ssh proxy [1] [2]. To just work out of the box, it requires (yet unreleased) systemd to be running inside the guest to set up a socket activated SSHD on the VSOCK. Alternatively, users can set up the socket activation themselves, or just run a socat that'll forward vsock <-> TCP communication. 1: https://github.com/systemd/systemd/blob/main/src/ssh-generator/ssh-proxy.c 2: https://github.com/systemd/systemd/blob/main/src/ssh-generator/20-systemd-ssh-proxy.conf.in Resolves: https://gitlab.com/libvirt/libvirt/-/issues/579 Signed-off-by: Michal Privoznik <mprivozn@redhat.com> Reviewed-by: Ján Tomko <jtomko@redhat.com> 2024-04-16 14:32:26 +00:00			`# SPDX-License-Identifier: LGPL-2.1-or-later`

			`Host qemu/* qemu:system/* qemu:session/*`
			`ProxyCommand @libexecdir@/libvirt-ssh-proxy %h %p`
			`ProxyUseFdpass yes`
			`CheckHostIP no`