brew

Installer openssh avec Homebrew, apk, chocolatey, dnf, MacPorts, Nix, pacman, zypper, apt, scoop, winget

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de openssh pour les workflows d'agents IA.

Commande d'installation Notes de sécurité

sécurité des agents

Réponse sur la sécurité des agents

openssh provides remote login, key, and transfer tools with broad host access.

Accès aux identifiants

Reads SSH keys, agent sockets, known hosts, config, and forwarded credentials.

Modification distante

Can execute commands and transfer files on remote hosts.

Risque de publication ou d'artéfact

Can deploy files, change servers, and expose forwarded credentials.

Contrôle recommandé

Gate remote command execution, scp/sftp writes, key generation, and agent forwarding.

Conseils d'utilisation par les agents

Allow local key inspection; require approval before connecting to or mutating remote hosts.

installation

Commandes d'installation supplémentaires

macOS

Homebrewvérifié · 100%

brew install openssh

local Homebrew formula metadata

MacPortsvérifié · 94%

sudo port install openssh

MacPorts ports tree · net/openssh/Portfile · Source: api.github.com

Linux

Alpine Linux apkvérifié · 92%

sudo apk add openssh

Alpine Linux edge package indexes · openssh · Source: dl-cdn.alpinelinux.org

Fedora dnfvérifié · 92%

sudo dnf install openssh

Fedora Rawhide package metadata · openssh · Source: dl.fedoraproject.org

Nixvérifié · 92%

nix profile install nixpkgs#openssh

nixpkgs package indexes · openssh · Source: raw.githubusercontent.com

Arch Linux pacmanvérifié · 92%

sudo pacman -S openssh

Arch Linux sync databases · openssh · Source: geo.mirror.pkgbuild.com

openSUSE zyppervérifié · 92%

sudo zypper install openssh

openSUSE Tumbleweed package metadata · openssh · Source: download.opensuse.org

Debian aptvérifié · 92%

sudo apt install openssh-client

Debian stable package indexes · openssh-client · Source: deb.debian.org

Windows

Chocolateyvérifié · 92%

choco install openssh

Chocolatey community package catalog · openssh · Source: community.chocolatey.org

Scoopvérifié · 92%

scoop install main/openssh

Scoop official bucket manifest trees · bucket/openssh.json · Source: api.github.com

Windows Package Managervérifié · 92%

winget install --id Syncplify.Server -e

Windows Package Manager source index · Syncplify.Server · Source: cdn.winget.microsoft.com

aperçu

Résumé du paquet

OpenBSD freely-licensed SSH connectivity tools

Liens du projet

Commandes et alias

scp
sftp
slogin
ssh
ssh-add
ssh-agent
ssh-keygen
ssh-keyscan
sshd

historique

Historique du projet et usages

OpenSSH is the OpenBSD project's freely licensed implementation of the SSH protocol suite: remote login, remote command execution, file transfer, key management, agent forwarding, and server-side SSH access. The package includes `ssh`, `sshd`, `scp`, `sftp`, `ssh-keygen`, `ssh-agent`, `ssh-add`, and related tools.

Historique du projet

OpenSSH began in 1999 when OpenBSD developers forked Bjorn Gronvall's OSSH, itself derived from Tatu Ylonen's last sufficiently free ssh 1.2.12 release. The OpenSSH project history describes the goal as freeing SSH from license restrictions, cleaning up the code, and maintaining it under the OpenBSD security-audit culture.

The initial import landed on September 26, 1999, shortly before OpenBSD 2.6. The early team removed portability clutter, replaced problematic cryptographic and GPL components, repaired bugs, restored features, and added support for SSH 1.5 and later SSH 2. The OpenBSD manual credits Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song with creating OpenSSH from the original free ssh base.

OpenSSH's project goal was explicit: because telnet and rlogin are insecure, operating systems should ship SSH support. SSH 2 support became usable around May 4, 2000, solving the integrity and patent-era problems of SSH 1 and giving OpenSSH the protocol base that would become standard for secure administration.

Historique d'adoption

OpenSSH became infrastructure software because it replaced insecure remote-login and file-transfer tools with a default, scriptable, auditable SSH suite. The portable release made the OpenBSD code usable on Linux, macOS, Cygwin, Solaris, AIX, HP-UX, and other Unix-like systems by adding compatibility layers, PAM/auditing hooks, and platform-specific sandboxing.

Package managers generally split OpenSSH into client and server packages or ship it in the operating-system base. Homebrew's `openssh` formula exists for users who want a packaged OpenSSH newer or different from the system copy, with dependencies such as libfido2 and OpenSSL for modern authentication and crypto support.

Modes d'utilisation

Operators use OpenSSH for daily host access, jump hosts, port forwarding, remote command execution, Git-over-SSH, rsync transport, and automated deployments. Developers touch the package through keys, `~/.ssh/config`, known-host verification, `ssh-agent`, `scp`/`sftp`, and server configuration in `sshd_config`.

OpenSSH also functions as a security policy surface. Choices such as allowed key algorithms, FIDO/U2F support, host key rotation, agent forwarding, chrooting, and subsystem configuration are all exposed through a familiar command and config ecosystem.

Pourquoi les passionnés de paquets s'y intéressent

OpenSSH is one of the canonical examples of a package becoming part of the operating-system substrate. It is both an upstream security project and a downstream packaging problem: vendors patch it, split client/server binaries, coordinate crypto-library choices, and backport fixes because remote access breakage can lock administrators out of machines.

For package nerds, OpenSSH is also a portability case study. The upstream OpenBSD version stays small and tightly audited, while portable OpenSSH carries the compatibility code that lets one security-sensitive codebase work across many Unix variants.

Chronologie

1999: OpenBSD developers fork OSSH and import the code on September 26.
December 1, 1999: OpenBSD 2.6 ships with OpenSSH.
May 4, 2000: SSH 2 support is implemented sufficiently to be usable.
2017: OpenSSH 7.6 removes SSH 1 protocol support.
2026: Homebrew packages OpenSSH 10.3p1 in the `openssh` formula.

Related projects

OpenSSH descends from Tatu Ylonen's original SSH and Bjorn Gronvall's OSSH. It interacts with crypto libraries such as LibreSSL, OpenSSL, AWS-LC, and BoringSSL, and it overlaps operationally with file-transfer tools, bastion-host systems, VPNs, and configuration-management systems.

Sources

posture de sécurité

Niveau de risque : blue

broad file, network, media, or database tool signal.

Classificateur de risque

risque blue · confiance moyen · tool

Pourquoi

broad file, network, media, or database tool signal

Signaux

text:ftp,ssh

Comportement d'installation

Aucun hook post-install Homebrew n’est enregistré dans les métadonnées de formule.
Les métadonnées de bottle Homebrew sont disponibles pour 6 plateformes.
S’installe avec 3 dépendances d’exécution.
Les métadonnées de compilation listent 1 dépendances de compilation.

Revue recommandée

Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.ssh/config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.ssh/id_*~/.ssh/config

exécutables

Exécutables installés

Commande	Type	Exposition
`scp`	cli	exécutable global
`sftp`	cli	exécutable global
`slogin`	cli	exécutable global
`ssh`	cli	exécutable global
`ssh-add`	cli	exécutable global
`ssh-agent`	cli	exécutable global
`ssh-keygen`	cli	exécutable global
`ssh-keyscan`	cli	exécutable global
`sshd`	cli	exécutable global

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-07-10

version du gestionnaire10.4p1

gestionnaire mis à jour2026-07-06

données localesOK

amontnot checked

dernière version détectéenon détecté

Clé du paquet	brew:openssh
Version	10.4p1
Gestionnaire de paquets	Homebrew
Page du gestionnaire de paquets	https://formulae.brew.sh/formula/openssh
Page d'accueil	https://www.openssh.com/
Dépôt	https://anongit.mindrot.org/openssh.git
Docs amont	https://www.openssh.com/manual.html
Licence	SSH-OpenSSH
Archive source	https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-10.4p1.tar.gz
Dernière mise à jour	2026-07-06T18:10:51Z
Pulse	updated
Dépendances	ldns, libfido2, openssl@3
Dépendances de compilation	pkgconf
Bibliothèques fournies par macOS	krb5, libedit, libxcrypt
Bouteille	disponible (sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
post-install Homebrew	non défini
Service	aucun déclaré

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	openssh
Version Scheme	0
Revision	0
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable