32 lines
2.4 KiB
Markdown
32 lines
2.4 KiB
Markdown
# SSH and mosh
|
||
|
||
`~/.ssh/config` with the goliath host, and mosh for the interactive session behind `SUPER + SHIFT + G`.
|
||
|
||
| | |
|
||
| --- | --- |
|
||
| Source | `private_dot_ssh/config` |
|
||
| Target | `~/.ssh/config` (symlink; `private_` keeps `~/.ssh` at `0700`) |
|
||
| Packages | `mosh`, `tailscale` (pacman, every role, so goliath has `mosh-server` too) |
|
||
|
||
Keys, `known_hosts` and the agent socket are not managed; only `config` is. The agent comes from fish's [`30-ssh-agent.fish`](../shell/fish.md#30-ssh-agentfish). Keepalives come from Omarchy's `/etc/ssh/ssh_config.d/20-omarchy-keepalive.conf` (`ServerAliveInterval 15`, `ServerAliveCountMax 3`, `ConnectTimeout 10`).
|
||
|
||
## Host goliath
|
||
|
||
| Option | Value | Why |
|
||
| --- | --- | --- |
|
||
| `HostName` | `goliath.tail62ced9.ts.net` | Tailscale MagicDNS: the same address at home and away. The LAN's DNS answers `goliath` with an IPv6 address only |
|
||
| `HostKeyAlias` | `goliath` | Host keys stay filed under the short name already in `known_hosts` |
|
||
| `User` | `prad` | |
|
||
| `IdentityFile` / `IdentitiesOnly` | `~/.ssh/id_ed25519` / `yes` | Offers one key instead of trying every default |
|
||
| `ControlMaster` / `ControlPath` / `ControlPersist` | `auto` / `~/.ssh/cm-%C` / `10m` | One shared connection: later ssh, scp and git runs skip the handshake, and it stays up 10 minutes after the last one exits |
|
||
|
||
## mosh
|
||
|
||
`SUPER + SHIFT + G` ([Hyprland](../desktop/hyprland.md)) opens `kitty --class=kitty-goliath --title=goliath --session=none mosh goliath` on the main `kitty.conf` (see [kitty](../terminal/kitty.md#goliath-super--shift--g)). mosh logs in over ssh with this host block (`%h` is the Tailscale name), starts `mosh-server` on goliath, then talks UDP 60000–61000 over Tailscale. The session survives suspend, Wi-Fi changes and dropped links, and echoes keystrokes locally while the link is slow.
|
||
|
||
- mosh's bootstrap ssh runs with `-S none`, so it never uses the shared connection; key auth through the agent must work non-interactively.
|
||
- goliath runs no firewall, and Tailscale carries the UDP traffic.
|
||
- mosh passes the client's `LANG` (`en_US.UTF-8`); goliath has `en_US.utf8` generated, which `mosh-server` needs.
|
||
- Inside mosh `TERM` is `xterm-256color`: kitty-only features (undercurl, graphics, the keyboard protocol) are unavailable.
|
||
- Closing the kitty window kills `mosh-client` without telling the server, so that `mosh-server` stays on goliath until it is killed (`pkill mosh-server` on goliath).
|