DeepSeek Harness Plugin: dsh-remote-ssh

Introduction¶

DeepSeek Harness (DSH) uses a plugin-based architecture. The dsh-remote-ssh plugin provides the ability to connect to legacy Unix / IBM AIX / macOS hosts over SSH. The tools are executed on the DSH side and default to read-only mode with a command allowlist policy. This plugin is an optional companion to dsh-wsl-kit.

Core Features¶

• Host Connection: Supports connecting to legacy system hosts such as Unix, IBM AIX, and macOS over SSH.
• Status Probing: Provides the remote_ssh_status tool to list configured hosts, with optional uname probing.
• Command Execution: Provides the remote_ssh_run tool to execute allowlisted argv on a specified hostId (without invoking a shell).
• Security Mechanisms:
  • BatchMode SSH: Prevents interactive passwords from entering the chat.
  • Argument Validation: argv must not contain shell metacharacters or newline characters.
  • Destructive Commands: Destructive commands require configuring allowMutate and confirmation before execution.
• Default Allowlist: For IBM AIX, the default allowlist includes oslevel, errpt, lsps, and lparstat.

Installation and Configuration¶

Install the Plugin¶

Run the following command in a terminal to add the plugin to the specified profile:

dsh plugin --profile web add github:173787247/dsh-remote-ssh

Configuration File¶

Configure hosts (host information) and allowCommands (command allowlist) in the profile’s cordis.patch.yml.

Credential Management¶

The plugin depends on the local SSH agent (ssh-agent) to manage credentials. It is recommended to add your SSH private key to ssh-agent.

Typical Usage¶

1. Define the host configuration and allowed commands in cordis.patch.yml.
2. Ensure the local ssh-agent has loaded the required private key.
3. Use the remote_ssh_status or remote_ssh_run tool in a DSH environment to manage remote hosts.

Notes¶

• This plugin is not included in install.sh.
• The plugin runs with the permissions of the DSH process. Review the source code and license before installation.
• Because no shell is used, command arguments must strictly comply with the allowlist restrictions and must not contain shell metacharacters or newline characters.

Summary¶

dsh-remote-ssh provides DeepSeek Harness with the ability to connect to legacy systems. Through allowlisting and BatchMode mechanisms, Unix, AIX, and macOS hosts can be operated in read-only or controlled ways while maintaining security. For more details, see the plugin directory or the GitHub repository.