Remote Terminal

Execute commands on remote Linux servers through SSH, Telnet, or web terminals. Supports password authentication, SSH keys, and SSH config aliases.

Quick Start

Basic SSH Connection

CODEBLOCK0

Using SSH Config Aliases

If the user has ~/.ssh/config configured:

CODEBLOCK1

With Password (using sshpass)

CODEBLOCK2

Connection Methods

1. SSH (Recommended)

Key-based authentication (most secure):
CODEBLOCK3

Using SSH config aliases:
CODEBLOCK4

Password authentication:
CODEBLOCK5

2. Telnet

CODEBLOCK6

3. Web Terminal (ttyd, wetty)

For web-based terminals, use curl or HTTP requests to the terminal's API:

CODEBLOCK7

Security Features

Command Confirmation

Before executing dangerous commands, ask the user to confirm:

Dangerous command patterns:

• - rm -rf, rm -r, del, INLINECODE4
• INLINECODE5, reboot, poweroff, INLINECODE8
• INLINECODE9, fdisk, parted, INLINECODE12
• INLINECODE13, INLINECODE14
• INLINECODE15, INLINECODE16
• INLINECODE17, pkill, INLINECODE19
• INLINECODE20, ufw, INLINECODE22
• INLINECODE23, DELETE FROM, INLINECODE25

Confirmation format:

⚠️ Dangerous command detected: rm -rf /var/log/*

This will permanently delete files. Proceed? (yes/no)

Command Blacklist

These commands are blocked by default and require explicit user override:

• - rm -rf / (entire filesystem)
• INLINECODE28 on mounted drives
• INLINECODE29 to primary disk
• Any command piping to /dev/sda or similar

Operation Logging

All remote commands are logged with timestamp, target host, and command:

CODEBLOCK8

Log location: INLINECODE31

Workflow

Step 1: Identify Target Host

Parse the user's request to identify:

• - Hostname, IP address, or SSH alias
• Username (if specified, otherwise use default or prompt)
• Connection method (SSH by default)

Example prompts:

• - "Connect to production and run docker ps" → alias: production
• "SSH to 192.168.1.50, check disk space" → host: 192.168.1.50
• "On my server, restart nginx" → need to ask which server

Step 2: Build Connection Command

Construct the appropriate SSH command based on:

• - Authentication method available
• Host configuration
• Whether it's interactive or one-shot

Step 3: Security Check

If command matches dangerous patterns:

1. 1. Warn the user
2. Ask for explicit confirmation
3. If confirmed, proceed; otherwise, cancel

Step 4: Execute and Return Output

Run the command and return:

• - Standard output
• Standard error (if any)
• Exit code
• Execution time

Step 5: Log Operation

Record the operation in the log file for audit trail.

Common Operations

Check System Status

CODEBLOCK9

Docker Management

CODEBLOCK10

Service Management

CODEBLOCK11

File Operations

CODEBLOCK12

Process Management

CODEBLOCK13

Interactive Sessions

For commands requiring interaction, use ssh -t for pseudo-terminal:

CODEBLOCK14

Note: Interactive sessions require the -t flag to allocate a PTY.

Multiple Hosts

Parallel Execution

Execute the same command on multiple hosts:

CODEBLOCK15

Using Parallel SSH

For larger fleets:

CODEBLOCK16

Host Management

Store Host Information

Hosts can be stored in ~/.qclaw/workspace/memory/hosts.json:

CODEBLOCK17

List Known Hosts

CODEBLOCK18

Troubleshooting

Connection Refused

CODEBLOCK19

Permission Denied

CODEBLOCK20

Host Key Verification Failed

CODEBLOCK21

Output Parsing

Structured Output

For commands returning JSON:

CODEBLOCK22

Table Output

For commands like docker ps, ps aux:

CODEBLOCK23

Resources

scripts/

• - ssh_exec.py - Python wrapper for SSH operations with logging
• INLINECODE38 - Manage host configurations
• INLINECODE39 - Execute commands on multiple hosts

references/

• - ssh_config_guide.md - SSH config file examples and patterns
• INLINECODE41 - Security guidelines for remote access