Automic VaultAutomic Vault

brew

openssh を Homebrew, apk, chocolatey, dnf, MacPorts, Nix, pacman, zypper, apt, scoop, winget でインストール

openssh のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

エージェント安全性

エージェント安全性の回答

openssh provides remote login, key, and transfer tools with broad host access.

認証情報アクセス

Reads SSH keys, agent sockets, known hosts, config, and forwarded credentials.

リモート変更

Can execute commands and transfer files on remote hosts.

公開/成果物リスク

Can deploy files, change servers, and expose forwarded credentials.

推奨コントロール

Gate remote command execution, scp/sftp writes, key generation, and agent forwarding.

エージェント利用ガイダンス

Allow local key inspection; require approval before connecting to or mutating remote hosts.

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install openssh

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install openssh

MacPorts ports tree · net/openssh/Portfile · ソース: api.github.com

Linux

Alpine Linux apk確認済み · 92%
sudo apk add openssh

Alpine Linux edge package indexes · openssh · ソース: dl-cdn.alpinelinux.org

Fedora dnf確認済み · 92%
sudo dnf install openssh

Fedora Rawhide package metadata · openssh · ソース: dl.fedoraproject.org

Nix確認済み · 92%
nix profile install nixpkgs#openssh

nixpkgs package indexes · openssh · ソース: raw.githubusercontent.com

Arch Linux pacman確認済み · 92%
sudo pacman -S openssh

Arch Linux sync databases · openssh · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install openssh

openSUSE Tumbleweed package metadata · openssh · ソース: download.opensuse.org

Debian apt確認済み · 92%
sudo apt install openssh-client

Debian stable package indexes · openssh-client · ソース: deb.debian.org

Windows

Chocolatey確認済み · 92%
choco install openssh

Chocolatey community package catalog · openssh · ソース: community.chocolatey.org

Scoop確認済み · 92%
scoop install main/openssh

Scoop official bucket manifest trees · bucket/openssh.json · ソース: api.github.com

Windows Package Manager確認済み · 92%
winget install --id Syncplify.Server -e

Windows Package Manager source index · Syncplify.Server · ソース: cdn.winget.microsoft.com

概要

パッケージ概要

OpenBSD freely-licensed SSH connectivity tools

コマンドとエイリアス

  • scp
  • sftp
  • slogin
  • ssh
  • ssh-add
  • ssh-agent
  • ssh-keygen
  • ssh-keyscan
  • sshd

履歴

プロジェクトの歴史と使われ方

OpenSSH is the OpenBSD project's freely licensed implementation of the SSH protocol suite: remote login, remote command execution, file transfer, key management, agent forwarding, and server-side SSH access. The package includes `ssh`, `sshd`, `scp`, `sftp`, `ssh-keygen`, `ssh-agent`, `ssh-add`, and related tools.

プロジェクトの歴史

OpenSSH began in 1999 when OpenBSD developers forked Bjorn Gronvall's OSSH, itself derived from Tatu Ylonen's last sufficiently free ssh 1.2.12 release. The OpenSSH project history describes the goal as freeing SSH from license restrictions, cleaning up the code, and maintaining it under the OpenBSD security-audit culture.

The initial import landed on September 26, 1999, shortly before OpenBSD 2.6. The early team removed portability clutter, replaced problematic cryptographic and GPL components, repaired bugs, restored features, and added support for SSH 1.5 and later SSH 2. The OpenBSD manual credits Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, Theo de Raadt, and Dug Song with creating OpenSSH from the original free ssh base.

OpenSSH's project goal was explicit: because telnet and rlogin are insecure, operating systems should ship SSH support. SSH 2 support became usable around May 4, 2000, solving the integrity and patent-era problems of SSH 1 and giving OpenSSH the protocol base that would become standard for secure administration.

採用の歴史

OpenSSH became infrastructure software because it replaced insecure remote-login and file-transfer tools with a default, scriptable, auditable SSH suite. The portable release made the OpenBSD code usable on Linux, macOS, Cygwin, Solaris, AIX, HP-UX, and other Unix-like systems by adding compatibility layers, PAM/auditing hooks, and platform-specific sandboxing.

Package managers generally split OpenSSH into client and server packages or ship it in the operating-system base. Homebrew's `openssh` formula exists for users who want a packaged OpenSSH newer or different from the system copy, with dependencies such as libfido2 and OpenSSL for modern authentication and crypto support.

使われ方

Operators use OpenSSH for daily host access, jump hosts, port forwarding, remote command execution, Git-over-SSH, rsync transport, and automated deployments. Developers touch the package through keys, `~/.ssh/config`, known-host verification, `ssh-agent`, `scp`/`sftp`, and server configuration in `sshd_config`.

OpenSSH also functions as a security policy surface. Choices such as allowed key algorithms, FIDO/U2F support, host key rotation, agent forwarding, chrooting, and subsystem configuration are all exposed through a familiar command and config ecosystem.

パッケージ好きにとっての重要性

OpenSSH is one of the canonical examples of a package becoming part of the operating-system substrate. It is both an upstream security project and a downstream packaging problem: vendors patch it, split client/server binaries, coordinate crypto-library choices, and backport fixes because remote access breakage can lock administrators out of machines.

For package nerds, OpenSSH is also a portability case study. The upstream OpenBSD version stays small and tightly audited, while portable OpenSSH carries the compatibility code that lets one security-sensitive codebase work across many Unix variants.

タイムライン

  • 1999: OpenBSD developers fork OSSH and import the code on September 26.
  • December 1, 1999: OpenBSD 2.6 ships with OpenSSH.
  • May 4, 2000: SSH 2 support is implemented sufficiently to be usable.
  • 2017: OpenSSH 7.6 removes SSH 1 protocol support.
  • 2026: Homebrew packages OpenSSH 10.3p1 in the `openssh` formula.

Related projects

  • OpenSSH descends from Tatu Ylonen's original SSH and Bjorn Gronvall's OSSH. It interacts with crypto libraries such as LibreSSL, OpenSSL, AWS-LC, and BoringSSL, and it overlaps operationally with file-transfer tools, bastion-host systems, VPNs, and configuration-management systems.

セキュリティ状態

リスクレベル: blue

broad file, network, media, or database tool signal.

リスク分類器

リスク blue · 信頼度 中 · tool

理由

  • broad file, network, media, or database tool signal

信号

  • text:ftp,ssh

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • 3 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 1 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.ssh/config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.ssh/id_*~/.ssh/config

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
scpcliグローバル実行可能ファイル
sftpcliグローバル実行可能ファイル
slogincliグローバル実行可能ファイル
sshcliグローバル実行可能ファイル
ssh-addcliグローバル実行可能ファイル
ssh-agentcliグローバル実行可能ファイル
ssh-keygencliグローバル実行可能ファイル
ssh-keyscancliグローバル実行可能ファイル
sshdcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-10
マネージャ版10.4p1
マネージャ更新日2026-07-06
ローカルデータOK
上流not checked
検出された最新未検出

https://www.openssh.com/

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:openssh
バージョン10.4p1
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/openssh
ホームページhttps://www.openssh.com/
リポジトリhttps://anongit.mindrot.org/openssh.git
上流ドキュメントhttps://www.openssh.com/manual.html
ライセンスSSH-OpenSSH
ソースアーカイブhttps://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-10.4p1.tar.gz
最終更新2026-07-06T18:10:51Z
Pulseupdated
依存関係ldns, libfido2, openssl@3
ビルド依存関係pkgconf
macOS 提供ライブラリkrb5, libedit, libxcrypt
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameopenssh
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

openssh-client 1:10.0p1-7+deb13u4

secure shell (SSH) client, for secure access to remote machines

https://www.openssh.com/

sudo apt install openssh-client
  • Section: net
  • Architecture: amd64
  • Source Package: openssh
  • 10 依存関係
  • 1 提供
  • 5 任意依存関係
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: openssh-client from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

openssh-client-gssapi 1:10.0p1-7+deb13u4

secure shell (SSH) client, with GSS-API support

https://www.openssh.com/

sudo apt install openssh-client-gssapi
  • Section: net
  • Architecture: all
  • Source Package: openssh
  • 1 依存関係
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: openssh-client-gssapi from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

openssh-server 1:10.0p1-7+deb13u4

secure shell (SSH) server, for secure access from remote machines

https://www.openssh.com/

sudo apt install openssh-server
  • Section: net
  • Architecture: amd64
  • Source Package: openssh
  • 25 依存関係
  • 1 提供
  • 9 任意依存関係
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: openssh-server from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

openssh-server-gssapi 1:10.0p1-7+deb13u4

secure shell (SSH) server, with GSS-API key exchange

https://www.openssh.com/

sudo apt install openssh-server-gssapi
  • Section: net
  • Architecture: all
  • Source Package: openssh
  • 2 依存関係
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: openssh-server-gssapi from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

openssh-sftp-server 1:10.0p1-7+deb13u4

secure shell (SSH) sftp server module, for SFTP access from remote machines

https://www.openssh.com/

sudo apt install openssh-sftp-server
  • Section: net
  • Architecture: amd64
  • Source Package: openssh
  • 2 依存関係
  • 2 任意依存関係
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: openssh-sftp-server from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

openssh-tests 1:10.0p1-7+deb13u4

OpenSSH regression tests

https://www.openssh.com/

sudo apt install openssh-tests
  • Section: net
  • Architecture: amd64
  • Source Package: openssh
  • 10 依存関係
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: openssh-tests from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

ssh 1:10.0p1-7+deb13u4

secure shell client and server (metapackage)

https://www.openssh.com/

sudo apt install ssh
  • Section: net
  • Architecture: all
  • Source Package: openssh
  • 2 依存関係
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: ssh from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

ssh-askpass-gnome 1:10.0p1-7+deb13u4

interactive X program to prompt users for a passphrase for ssh-add

https://www.openssh.com/

sudo apt install ssh-askpass-gnome
  • Section: gnome
  • Architecture: amd64
  • Source Package: openssh
  • 5 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Openssh
Debian stable package indexes · deb.debian.org · Debian stable package indexes: ssh-askpass-gnome from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

openssh

nix profile install nixpkgs#openssh
  • normalized package name match
  • 一致条件: Openssh
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: openssh from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
Ubuntu apt95%

openssh-client 1:9.6p1-3ubuntu13

secure shell (SSH) client, for secure access to remote machines

https://www.openssh.com/

sudo apt install openssh-client
  • Section: net
  • Architecture: amd64
  • Source Package: openssh
  • 9 依存関係
  • 1 提供
  • 5 任意依存関係
  • normalized package name match
  • 一致条件: Openssh
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: openssh-client from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

openssh-server 1:9.6p1-3ubuntu13

secure shell (SSH) server, for secure access from remote machines

https://www.openssh.com/

sudo apt install openssh-server
  • Section: net
  • Architecture: amd64
  • Source Package: openssh
  • 21 依存関係
  • 1 提供
  • 10 任意依存関係
  • normalized package name match
  • 一致条件: Openssh
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: openssh-server from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

openssh-sftp-server 1:9.6p1-3ubuntu13

secure shell (SSH) sftp server module, for SFTP access from remote machines

https://www.openssh.com/

sudo apt install openssh-sftp-server
  • Section: net
  • Architecture: amd64
  • Source Package: openssh
  • 2 依存関係
  • 2 任意依存関係
  • normalized package name match
  • 一致条件: Openssh
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: openssh-sftp-server from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

openssh-tests 1:9.6p1-3ubuntu13

OpenSSH regression tests

https://www.openssh.com/

sudo apt install openssh-tests
  • Section: universe/net
  • Architecture: amd64
  • Source Package: openssh
  • 9 依存関係
  • normalized package name match
  • 一致条件: Openssh
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: openssh-tests from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

ssh 1:9.6p1-3ubuntu13

secure shell client and server (metapackage)

https://www.openssh.com/

sudo apt install ssh
  • Section: net
  • Architecture: all
  • Source Package: openssh
  • 2 依存関係
  • normalized package name match
  • 一致条件: Openssh
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: ssh from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz
Ubuntu apt95%

ssh-askpass-gnome 1:9.6p1-3ubuntu13

interactive X program to prompt users for a passphrase for ssh-add

https://www.openssh.com/

sudo apt install ssh-askpass-gnome
  • Section: universe/gnome
  • Architecture: amd64
  • Source Package: openssh
  • 5 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Openssh
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: ssh-askpass-gnome from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

openssh 10.3_p1-r0

Port of OpenBSD's free SSH release

https://www.openssh.com/portable.html

sudo apk add openssh
  • License: SSH-OpenSSH
  • Architecture: x86_64
  • Source Package: openssh
  • 1 依存関係
  • normalized package name match
  • 一致条件: Openssh
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: openssh from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment