dsh-plugin-ssh-manager
Manage DSH instances running on multiple machines (multi-IP) from a single
DSH terminal, connected through SSH tunnels.
在一台终端上通过 SSH 隧道管理多台机器（多 IP）上的 DSH。
- Each configured remote host gets an
ssh -N -L tunnel from this machine to
the remote DSH web server (127.0.0.1:<remotePort> on the remote side).
- Every host is assigned a stable local port (
21300–21399 by default, or a
port you pin), so the remote console is always reachable at
http://127.0.0.1:<localPort>.
- Hosts can auto-connect on startup and auto-reconnect with backoff.
- Two surfaces: a sidebar quick menu (远程 DSH) that lists hosts and
opens the remote console in one click, and a full management page under
Settings → SSH 隧道主机 (add / edit / delete / connect / disconnect).
- A model tool
ssh_manager is registered too, so the agent itself can
list / status / connect / disconnect / open tunnels on request.
Install / 安装
Install into a dsh profile (the profile this app runs, usually web):
dsh plugin --profile web add github:ljh220300-eng/dsh-plugin-ssh-manager
or with plain pnpm inside the profile directory:
pnpm -w add github:ljh220300-eng/dsh-plugin-ssh-manager
For local development use a path spec instead
(dsh plugin --profile web add file:F:/work/dsh-plugin-ssh-manager).
After installing, restart the app (host half loads at boot) and refresh the
page (client half). The dsh plugin command reconciles the
dsh.profile.bundles layer list for you automatically.
Authentication / 认证
- Key (推荐 / recommended) —
ssh-agent (default) or an explicit
identity file. Requires the key on the ssh agent or at the given path;
first use of a remote host auto-accepts its host key
(StrictHostKeyChecking=accept-new). In the settings form, 选择文件 /
Choose file imports a private key straight from your file system — the
content is uploaded to the local plugin store
($DSH_HOME/plugins/ssh-manager/keys/, one file per unique key content,
mode 0600) and the path field is filled for you; the file is removed
again when its last host is deleted. Typing a host-side path manually
still works.
- Password (密码) — supported through an
SSH_ASKPASS wrapper that the
plugin generates next to its config; the password is stored in
$DSH_HOME/plugins/ssh-manager/hosts.json (file mode 0600) and passed to
ssh via environment only — it never appears in process command lines.
OpenSSH ≥ 8.4 (SSH_ASKPASS_REQUIRE) is required; on older clients switch
to key auth.
Configuration / 配置
- Registry:
$DSH_HOME/plugins/ssh-manager/hosts.json
(~/.dsh/plugins/ssh-manager/hosts.json unless DSH_HOME is set).
- One record per remote host:
{
"name": "lab-01",
"sshHost": "192.168.1.10",
"sshPort": 22,
"sshUser": "root",
"authMethod": "key",
"identityFile": "C:\\Users\\me\\.ssh\\id_ed25519",
"passphrase": "",
"remoteHost": "127.0.0.1",
"remotePort": 3080,
"localPort": null,
"autoConnect": true
}
remotePort is the port the remote DSH web server listens on
(dsh web defaults to 3080; the desktop app picks its own — check the
remote machine's GUI URL).remoteHost is the bind address to reach on the remote side through ssh;
keep 127.0.0.1 when DSH runs on the ssh host itself.- Passphrase-protected keys are supported:
passphrase is answered through
the same SSH_ASKPASS mechanism as passwords (environment only).
Requirements / 依赖
- An OpenSSH client (
ssh) on this machine — Windows ships it as an
optional feature (设置 → 可选功能 → OpenSSH 客户端); the plugin also
probes C:\Windows\System32\OpenSSH\ssh.exe and /usr/bin/ssh.
- No additional npm dependencies; it runs against the packages the dsh
profile already provides (
@deepseek-ai/dsh-tools,
@deepseek-ai/dsh-home-paths).
License
MIT
