Differential D20240 Diff 48313 src/applications/diffusion/ssh/DiffusionSSHWorkflow.php

Changeset View

Standalone View

src/applications/diffusion/ssh/DiffusionSSHWorkflow.php

Show First 20 Lines • Show All 121 Lines • ▼ Show 20 Lines	protected function getProxyCommand($for_write) {
$options[] = '-o';		$options[] = '-o';
$options[] = 'StrictHostKeyChecking=no';		$options[] = 'StrictHostKeyChecking=no';
$options[] = '-o';		$options[] = '-o';
$options[] = 'UserKnownHostsFile=/dev/null';		$options[] = 'UserKnownHostsFile=/dev/null';

// This is suppressing "added <address> to the list of known hosts"		// This is suppressing "added <address> to the list of known hosts"
// messages, which are confusing and irrelevant when they arise from		// messages, which are confusing and irrelevant when they arise from
// proxied requests. It might also be suppressing lots of useful errors,		// proxied requests. It might also be suppressing lots of useful errors,
// of course. Ideally, we would enforce host keys eventually.		// of course. Ideally, we would enforce host keys eventually. See T13121.
$options[] = '-o';		$options[] = '-o';
$options[] = 'LogLevel=quiet';		$options[] = 'LogLevel=ERROR';

// NOTE: We prefix the command with "@username", which the far end of the		// NOTE: We prefix the command with "@username", which the far end of the
// connection will parse in order to act as the specified user. This		// connection will parse in order to act as the specified user. This
// behavior is only available to cluster requests signed by a trusted		// behavior is only available to cluster requests signed by a trusted
// device key.		// device key.

return csprintf(		return csprintf(
'ssh %Ls -l %s -i %s -p %s %s -- %s %Ls',		'ssh %Ls -l %s -i %s -p %s %s -- %s %Ls',
▲ Show 20 Lines • Show All 171 Lines • Show Last 20 Lines