Как мы случайно сделали стартап, пока учили ИИ работать с реальной инфраструктурой
Когда мы впервые увидели AI-чаты, это выглядело впечатляюще. Они писали код, помогали с документацией, объясняли архитектурные решения. Это было хорошо. Но довольно быстро стало понятно главное:
Can't believe no one had thia idea before, but I could not find anything about it: When ssh'ing into a remote account for a shell, can i have an ephemeral shared tmp directory automatically created and managed from the client side? Would be nice if my vim config followed me to remote places. #ssh
You use SSH for remote authentication. But do you know how it works in the background? For SSH authentication to work, you need a server at the backend. Here is how to execute a complete SSH server installation, start to end.
Many #Terraform providers using SSH do not check the SSH host key... they just run with ssh.InsecureIgnoreHostKey...
And to be honest, it is partly the fault of the SSH standard library which makes it super easy to ignore the host key and does not provide any useful builtin key verification function. People are lazy. ssh.FixedHostKey is niche.
So I implemented a small library to verify SSH host keys. It builds a verification function using your known_hosts file, another one of your choice, known_hosts entries or SSHFP records queried over classic DNS, DNS over TLS or DNS over HTTPS.