skip to content

the toolbox / tech

openssh

1 note uses this.

Aug 29, 2026 A key with one job A container needed to read three remote machines over SSH without holding a key that could also root them. The exact authorized_keys options that pin a key to one read-only command and a single permitted tunnel, what each one does, and the break-in tests that prove it holds. Copy it for anything that has to phone home from inside a container. infrastructure