ssh

func AuthMethods ¶

func AuthMethods(ctx context.Context, auth config.Auth) ([]gossh.AuthMethod, io.Closer, error)

AuthMethods builds the list of SSH auth methods for a host config. The returned io.Closer must be closed when the SSH connection is done to release any resources (e.g. the SSH agent socket). It may be nil.

ctx bounds the work against the SSH agent, which happens during the handshake that follows.

func HostKeyCallback ¶

func HostKeyCallback(hostname string, port int) (gossh.HostKeyCallback, []string, error)

HostKeyCallback returns a callback that verifies remote host keys against ~/.ssh/known_hosts (TOFU — Trust On First Use):

• Known host, key matches → allowed
• Unknown host → key is added to known_hosts, allowed
• Known host, key changed → rejected with a clear error message