techhub.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A hub primarily for passionate technologists, but everyone is welcome

Administered by:

Server stats:

4.6K
active users

#paramiko

0 posts0 participants0 posts today

#Paramiko 4.0 is out 🎉

paramiko.org/changelog.html#4.

pypi.org/project/paramiko/4.0.

Arguably a negative release of everybody's favorite, if slightly long in the tooth, #Python SSH implementation:

- removed functionality (DSA)
- removed Python interpreter support (Python 3.9 is the new MSV)
- added instability (overhauled packaging practices)

but hey! it took quite a while anyways…

Is also prep for some other security-focused shenanigans coming down the pipe, so stay tuned.

www.paramiko.orgChangelog — Paramiko documentation

TIL: According to the ssh_config man page, comments in ~/.ssh/config need to be on their own line. In other words,

Host foo # my awesome host

is not a valid comment.

The ssh command seems pretty relaxed about this, but other tools (e.g. Paramiko) are not necessarily.

github.com/paramiko/paramiko/i

I'm using fabric and wanted to test a very simple run command: from fabric import Connection c = Connection('myhost') This gave me the exception: paramiko.ssh_exception.ConfigParseError: Unparsable...
GitHubConfigParseError if ssh config contains a comment with a single quote · Issue #2111 · paramiko/paramikoBy picogeyer

I see #OpenSSH got to fully removing DSA key support, so that means my “probably do that in #Paramiko” todo list item has no more excuses 🤔

Well, ok, it still has a few excuses (will be years before the average sshd is OpenSSH 10.0+) but still. Needs happenin' sometime and it ain't like old releases go away, so.

Continued thread

Put out a couple small #Paramiko bugfix releases, both stemming from having fallen behind upstream changes in Cryptography.

Big thanks to the folks who patiently reported/patched/approved the relevant tickets while I've been struggling to prove myself at the new job ❤️

Hoping to stay on the treadmill for the foreseeable future. #Invoke in particular needs a lot of bug/feature work & I can arguably put /some/ dayjob time towards it. Since I, uh. Kinda shoehorned it in there. 😅

Mal eine Frage an die #python Spezialisten.

Also ich bin auf der Suche nach einer "
#einfachen" Lösung womit ich ohne #Subprocess Ordner mit möglichen Unterordner von einem #Remote Server auf dem lokalen Server auf dem auch das Skript läuft zu kopieren.

Wichtig es sind nicht nur Dateien sondern Ordner mit Unterordner.
Hierzu habe ich schon
#Paramiko ausprobiert komme da aber nicht auf eine einfache Lösung und irgendwas vergisst er dann immer.
Des weiteren hab ich versucht mit
#pyrsync zu kopieren - aber entweder hab ich Tomaten auf den Augen - jedenfalls finde ich keine Sync Funktion dazu.

Hat hier noch jemand eine andere Idee
🤔

🚀 Excited to share my latest project, Hacker News Over SSH! 🎉

Dive into your favorite tech stories directly from your terminal. This custom SSH server lets you browse Hacker News articles and comments interactively, offering a streamlined, text-based browsing experience.

👾 Demo:
$ ssh hn.parishod.com

🔗 Source code: github.com/adeekshith/hn-over-

💡 Inspired by a recent project where they setup a coffee shop accessible only via SSH. I liked the idea to have more apps like this accessible via the terminal so built this. Built using ,

📬 Also, I'm currently exploring new opportunities. Know of any openings or consulting work? Let's connect!

#til want to run a single #linux app remotely? #xpra needs to be installed both in client and server. can use either #ssh or #paramiko. if for some reason it can't connect, you can run `xpra start --bind-tcp localhost:port` on the server, use ssh's `LocalForward` option, ssh into the server, and then `xpra start tcp://localhost:port/` on the client. If it complains about keyboard bindings, try `--keyboard-layout=LAYOUT`. In my case it got confused between the local us_intl and the remote azerty.

Continued thread

OK, I can reveal what <REDACTED> is: an #SSH protocol-level weakness allowing active MitM attacks. (bad, but not as bad as that probably sounds.)

terrapin-attack.com/ - their own FAQ is tl;dr "yea probably don't drop what you're doing to patch this”.

I have been working with the researchers to update #Paramiko for this and will likely put out v3.4 today or tomorrow.

OpenSSH 9.6 is out today with their fixes.

terrapin-attack.comTerrapin Attack

I know and ❤️ Paramiko. That said, I'm wondering if anyone can recommend a pure python #SSH client library (without native dependencies). I ask for pure #Python because I'm looking at compiling something for multiple platforms. I'm assuming one must exist. It seems like Nuitka may work with #Paramiko , but I'd love to find something that could work with other compilers & Python implementations.

#Fabric 3.1 / #Paramiko 3.2 out now, after months of hacking, rewriting, cursing ancient design decisions that don't work w/ non-OpenSSH targets, & so on & so forth.

Most of this is opt-in, experimental, and incomplete - but hey, it works well enough that my colleagues can get their ssh-agents and passphraseless pubkeys working with both #OpenSSH and #Teleport!

Solid foundation, living room furnished…rest of house forthcoming 😂

fabfile.org/changelog.html#3.1
paramiko.org/changelog.html#3.

www.fabfile.orgChangelog — Fabric documentation

Trying out some #Python #SFTP with #paramiko ... as Shiffman used to say "I'm not qualified for any of this" (or something to the effect)

import paramiko

with paramiko.SSHClient() as ssh:
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh.connect(host, username=username, password=password)

with ssh.open_sftp() as sftp:
sftp.chdir(remote_dir)
sftp.put(local_file, remote_filename)

Got to a good place with my ongoing #Paramiko (#Fabric #Python #SSH etc) work* ✨ great way to end the week!

Also weedwhacked the absolute shit out of a lawnfull of dandelions this afternoon.

It is time for some well-earned 🥃 (#Akashi white label #whisky) and 🥋📽️ (#Hapkido starting Angela Mao, aka "Lady #KungFu”).

* For those interested in Protocol Bullshit and/or Software Architecture Bullshit, see github.com/paramiko/paramiko/i and subsequent comment(s).

GitHubAuthentication fails with more than one key in agent · Issue #23 · paramiko/paramikoBy gellule

Finally getting a few #Fabric / #Paramiko #Python somewheres.

1. New PKey property spits out proper SHA256 fingerprint so you can compare to`ssh` logs or `ssh-add -l` 🎉

2. New auth PoC works enough to try multiple auth sources in any order, & logging more obviously than the old code did (first 3 lines of screenshot)

3. …and that flow yields a useful result, which also has a useful __str__ (last 2 lines of screenshot). Maps the auth source to the resulting exception or server response.