ssh_config: new option in Devuan, March 2023

bgstack15 — Sun, 05 Mar 2023 13:54:19 GMT

From the apt-listchanges message for this month:

openssh (1:9.2p1-1) unstable; urgency=medium

  OpenSSH 9.2 includes a number of changes that may affect existing
  configurations:

   * ssh(1): add a new EnableEscapeCommandline ssh_config(5) option that
     controls whether the client-side ~C escape sequence that provides a
     command-line is available. Among other things, the ~C command-line
     could be used to add additional port-forwards at runtime.

     This option defaults to "no", disabling the ~C command-line that was
     previously enabled by default. Turning off the command-line allows
     platforms that support sandboxing of the ssh(1) client (currently only
     OpenBSD) to use a stricter default sandbox policy.

 -- Colin Watson <cjwatson@debian.org>  Wed, 08 Feb 2023 10:36:06 +0000

So I had to run this on all Devuan systems, to keep my ssh client command-line enabled.

sudo updateval -a -v /etc/ssh/ssh_config '^\s*EnableEscapeCommandline.*' 'EnableEscapeCommandline yes'

Where updateval is from my bgscripts-core package.

socks proxy command

bgstack15 — Wed, 01 Mar 2023 14:29:10 GMT

Run this command.

ssh -D 8880 ${USER}@proxyserver -n -f -N

Set socks proxy in browser settings.

Knowledge Base (Posts about socks)

ssh_config: new option in Devuan, March 2023

socks proxy command