ssh

func AuthMethods ¶

func AuthMethods(auth config.Auth) ([]gossh.AuthMethod, io.Closer, error)

AuthMethods builds the list of SSH auth methods for a host config. The returned io.Closer must be closed when the SSH connection is done to release any resources (e.g. the SSH agent socket). It may be nil.

func HostKeyCallback ¶

func HostKeyCallback() (gossh.HostKeyCallback, error)

HostKeyCallback returns a callback that verifies remote host keys against ~/.ssh/known_hosts (TOFU — Trust On First Use):

• Known host, key matches → allowed
• Unknown host → key is added to known_hosts, allowed
• Known host, key changed → rejected with a clear error message