SSH/GPG

Secure shell connections and GPG key management. Generate keys, configure agents, and manage remote access.

57 commands

Browse by Topic

Getting Started

Quick setup and installation

3commands

Keys

Key management

17commands

Connections

Connection commands

17commands

Tunnels

Port forwarding

8commands

Config

Configuration

12commands

Check SSH version

$ ssh -V

Display the installed OpenSSH client version

Generate SSH key (Ed25519)

$ ssh-keygen -t ed25519 -C "your_email@example.com"

Generate a new Ed25519 SSH key pair with an email comment

Check GPG version

$ gpg --version

Verify GPG is installed and display version information

Local port forward

$ ssh -L 8080:localhost:80 user@host

Forward local port to remote.

Remote port forward

$ ssh -R 8080:localhost:80 user@host

Forward remote port to local.

SOCKS proxy

$ ssh -D 1080 user@host

Create SOCKS proxy tunnel.

Background tunnel

$ ssh -N -f -L 3306:localhost:3306 user@host

Create background tunnel.

Dynamic port forward (SOCKS5)

$ ssh -D 9090 -N -f user@host

Background SOCKS5 proxy for browser traffic.

Persistent tunnel with autossh

$ autossh -M 20000 -N -f -L 8080:localhost:80 user@host

Auto-reconnecting tunnel via autossh.

Forward to third-party host

$ ssh -L 5432:db.internal:5432 user@bastion

Tunnel to a host behind bastion.

Reverse tunnel for remote access

$ ssh -R 2222:localhost:22 user@public-server

Expose local SSH via remote server.

SSH config file

$ ~/.ssh/config

SSH client configuration file path.

SSH config entry

$ Host alias HostName host User user

Example SSH config entry.

Fix key permissions

$ chmod 600 ~/.ssh/id_*

Set correct key file permissions.

Fix SSH directory permissions

$ chmod 700 ~/.ssh

Set correct .ssh directory permissions.

Wildcard host pattern

$ Host *.example.com User deploy IdentityFile ~/.ssh/deploy_key

Apply config to matching hostnames.

ProxyJump config

$ Host internal HostName 10.0.0.5 ProxyJump bastion

Configure jump host in SSH config.

IdentityFile per host

$ Host github.com IdentityFile ~/.ssh/github_ed25519

Use specific key for a host.

ForwardAgent in config

$ Host bastion ForwardAgent yes

Enable agent forwarding for a host.

AddKeysToAgent config

$ Host * AddKeysToAgent yes IdentityFile ~/.ssh/id_ed25519

Auto-add keys to agent on first use.

ServerAliveInterval config

$ Host * ServerAliveInterval 60 ServerAliveCountMax 3

Keep connections alive with heartbeat.

Include directive

$ Include ~/.ssh/config.d/*

Include additional config files.

ControlMaster multiplexing

$ Host * ControlMaster auto ControlPath ~/.ssh/sockets/%r@%h-%p ControlPersist 600

Reuse SSH connections for speed.

Discussion

Loading comments...

SSH/GPG

Secure shell connections and GPG key management. Generate keys, configure agents, and manage remote access.

57 commands

Browse by Topic

Getting Started

Quick setup and installation

3commands

Keys

Key management

17commands

Connections

Connection commands

17commands

Tunnels

Port forwarding

8commands

Config

Configuration

12commands

Check SSH version

$ ssh -V

Display the installed OpenSSH client version

Generate SSH key (Ed25519)

$ ssh-keygen -t ed25519 -C "your_email@example.com"

Generate a new Ed25519 SSH key pair with an email comment

Check GPG version

$ gpg --version

Verify GPG is installed and display version information

Local port forward

$ ssh -L 8080:localhost:80 user@host

Forward local port to remote.

Remote port forward

$ ssh -R 8080:localhost:80 user@host

Forward remote port to local.

SOCKS proxy

$ ssh -D 1080 user@host

Create SOCKS proxy tunnel.

Background tunnel

$ ssh -N -f -L 3306:localhost:3306 user@host

Create background tunnel.

Dynamic port forward (SOCKS5)

$ ssh -D 9090 -N -f user@host

Background SOCKS5 proxy for browser traffic.

Persistent tunnel with autossh

$ autossh -M 20000 -N -f -L 8080:localhost:80 user@host

Auto-reconnecting tunnel via autossh.

Forward to third-party host

$ ssh -L 5432:db.internal:5432 user@bastion

Tunnel to a host behind bastion.

Reverse tunnel for remote access

$ ssh -R 2222:localhost:22 user@public-server

Expose local SSH via remote server.

SSH config file

$ ~/.ssh/config

SSH client configuration file path.

SSH config entry

$ Host alias HostName host User user

Example SSH config entry.

Fix key permissions

$ chmod 600 ~/.ssh/id_*

Set correct key file permissions.

Fix SSH directory permissions

$ chmod 700 ~/.ssh

Set correct .ssh directory permissions.

Wildcard host pattern

$ Host *.example.com User deploy IdentityFile ~/.ssh/deploy_key

Apply config to matching hostnames.

ProxyJump config

$ Host internal HostName 10.0.0.5 ProxyJump bastion

Configure jump host in SSH config.

IdentityFile per host

$ Host github.com IdentityFile ~/.ssh/github_ed25519

Use specific key for a host.

ForwardAgent in config

$ Host bastion ForwardAgent yes

Enable agent forwarding for a host.

AddKeysToAgent config

$ Host * AddKeysToAgent yes IdentityFile ~/.ssh/id_ed25519

Auto-add keys to agent on first use.

ServerAliveInterval config

$ Host * ServerAliveInterval 60 ServerAliveCountMax 3

Keep connections alive with heartbeat.

Include directive

$ Include ~/.ssh/config.d/*

Include additional config files.

ControlMaster multiplexing

$ Host * ControlMaster auto ControlPath ~/.ssh/sockets/%r@%h-%p ControlPersist 600

Reuse SSH connections for speed.

Discussion

Loading comments...