Ssh – Forward ssh for Git user to Git server

gitgitlabopensshsshsshd

It is surprisingly difficult to find information on this simple problem.

Like many people we run a gitlabs/gogs server on a remote instance. Currently it listens on port 10022. We also run ssh on that instance to administer the server. It listens on port 22.

We'd like the ssh server listening on port 22 to forward connections for Git@ ONLY to the Git server on 10022.

That way when people use Git locally, they won't have to manually specify the port of our remote Git server each time.

How can we do this?

Best Answer

I have never done that but maybe this does what you want:

You can put a Match block for the user git in sshd_config which contains ForceCommand. The forced command can be an ssh login to the real server. You can use public key authentication without passphrase so the users might not even notice this.

Related Solutions

SSH OpenSSH – How to Start a Specific Shell and Run Commands Remotely

The most obvious way to run a command remotely is to specify it on the ssh command line. The ssh command is always interpreted by the remote user's shell.

ssh bob@example.com '. ~/.profile; command_that_needs_environment_variables'
ssh -t bob@example.com '. ~/.profile; exec zsh'

Shared accounts are generally a bad idea; if at all possible, get separate accounts for every user. If you're stuck with a shared account, you can make an alias:

ssh -t shared-account@example.com 'HOME=~/bob; . ~/.profile; exec zsh'

If you use public key authentication (again, recommended), you can define per-key commands in ~/.ssh/authorized_keys. See this answer for more explanations. Edit the line for your key in ~/.ssh/authorized_keys on the server (all on one line):

command="HOME=$HOME/bob;
     if [ -n \"$SSH_ORIGINAL_COMMAND\" ]; then
       eval \"$SSH_ORIGINAL_COMMAND\";
     else exec \"$SHELL\"; fi" ssh-rsa AAAA…== bob@some.where

Ssh – Git config forwarding

Try sshrc.

Install sshrc on your local machine.

Add the following line to ~/.sshrc on your local machine:

cp "$SSHHOME/.sshrc.d/.gitconfig" ~/.gitconfig

Create ~/.sshrc.d on your local machine: mkdir ~/.sshrc.d

Create a symlink:

ln -s ~/.gitconfig ~/.sshrc.d/.gitconfig

And try sshrc me@myserver

Best Answer

Related Solutions

SSH OpenSSH – How to Start a Specific Shell and Run Commands Remotely

Ssh – Git config forwarding

Related Question