OpenSSH
sshThe OpenSSH client: encrypted remote login, and a config that names how to reach each host.
The OpenSSH client: encrypted remote login, and a config that names how to reach each host.
Otty extracts these into your secret store instead of syncing the files. Every generated manager config below leaves them out too.
IdentityFile, IdentityAgent, ControlPath, UserKnownHostsFileHost * AddKeysToAgent yes IdentityAgent "/Users/octocat/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"machine-local UserKnownHostsFile /Users/octocat/.ssh/known_hostsmachine-local ControlMaster auto ControlPath /Users/octocat/.ssh/cm-%r@%h:%pmachine-local ControlPersist 10m Host github.com User git IdentityFile /Users/octocat/.ssh/id_ed25519machine-local Include config.d/*.confOtty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.
Not a subtraction from the paths above: this is everything else OpenSSH writes in your home directory that is state, not configuration. It keeps a whole-home manager like chezmoi from sweeping those up, and it still holds if the synced paths are ever widened.
IdentityFileIdentityAgentControlPathUserKnownHostsFileHost * AddKeysToAgent yes IdentityAgent "/Users/octocat/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"machine-local UserKnownHostsFile /Users/octocat/.ssh/known_hostsmachine-local ControlMaster auto ControlPath /Users/octocat/.ssh/cm-%r@%h:%pmachine-local ControlPersist 10m Host github.com User git IdentityFile /Users/octocat/.ssh/id_ed25519machine-local Include config.d/*.confEach machine keeps its own copy of these.
Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.
Opens otty://sync/add/ssh. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.
Every one of these keeps all credential files out. None of them splits IdentityFile and IdentityAgent for you — that part is Otty’s own sync, or a template you write by hand.