Skip to content

docs(ios): the Mac's ~/.ssh/config route reaches iPhone and iPad #114

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
datlechin merged 1 commit into from
Oct 22, 2026
Merged

docs(ios): the Mac's ~/.ssh/config route reaches iPhone and iPad #114

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions connections/ssh-tunneling.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,8 @@ Pick an alias from the **Config Host** picker and `HostName`, `User`, `Port`, `I

`IdentityFile` picks which agent key is offered, not only which key file is read, and a `.pub` is enough. That is how a 1Password or Secretive key gets pinned to a host. `IdentitiesOnly yes` then drops every agent key the config did not name, which is what keeps a thirty-key agent inside a server's `MaxAuthTries`.

Once a connection opens, the hosts, ports and usernames it reached through the config sync to [iPhone and iPad](/ios#route-from-mac), so it opens there too. The config file, keys and key paths stay on the Mac.

<Frame caption="Picking a host from ~/.ssh/config">
<img className="block dark:hidden" src="/images/ssh-config-hosts.png" alt="Config Host picker" />
<img className="hidden dark:block" src="/images/ssh-config-hosts-dark.png" alt="Config Host picker" />
Expand Down
4 changes: 4 additions & 0 deletions ios/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -274,6 +274,10 @@ Hops synced from the Mac arrive with key paths that name files on the Mac, so ea
<img className="hidden dark:block" src="/images/ios-jump-hosts-dark.png" alt="Edit Connection form with two jump hosts marked No key on this device, beside the editor for bastion1.example.com with Same Key as SSH Server switched off" />
</Frame>

### Route from Mac

A tunnel whose SSH host is an alias in the Mac's `~/.ssh/config`, or that the Mac reaches through `ProxyJump`, opens here through the hosts the Mac dialed. They arrive once the Mac has connected, under **Route from Mac** in the connection's form: each jump host, then the SSH server, with the port and username the Mac used. Only hosts, ports and usernames cross; the config file, keys and key paths stay on the Mac. A hop only the Mac's config names reads **No key on this device** until you open it and pick or paste its key, as for any jump host. Changing the SSH server or jump hosts, here or on the Mac, sets the route aside until the Mac connects again, and a copy made here with **Duplicate** gets its own once the Mac connects to it.

### SSH profiles

A connection that uses an [SSH profile](/connections/ssh-profiles) on the Mac arrives with the profile's server, sign-in method and jump hosts, read only in the form: change them in the profile on the Mac. It signs in with the profile's password once the Mac syncs passwords to iCloud Keychain; until then the password field works as it does for any tunnel. A key passphrase saved here wins over the profile's, since it goes with the key on this device. Turning **SSH Tunnel** off unlinks the profile from that connection on every device.
Expand Down
Loading