Clone this repo:
  1. 6cfae18 1.0 by Kevin Burke · 12 months ago master 1.0
  2. 14846fb all: rewrite the lexer to consume the entire input first by Mark Nevill · 12 months ago devnev-drain-lexer-tokens
  3. 2e50c44 all: fix lint issues by Kevin Burke · 1 year, 1 month ago fix-tests
  4. f648cfb all: use ints instead of uints by Kevin Burke · 1 year, 1 month ago
  5. 81db2a7 0.5 by Kevin Burke · 1 year, 11 months ago 0.5


This is a Go parser for ssh_config files. Importantly, this parser attempts to preserve comments in a given file, so you can manipulate a ssh_config file from a program, if your heart desires.

It‘s designed to be used with the excellent x/crypto/ssh package, which handles SSH negotiation but isn’t very easy to configure.

The ssh_config Get() and GetStrict() functions will attempt to read values from $HOME/.ssh/config and fall back to /etc/ssh/ssh_config. The first argument is the host name to match on, and the second argument is the key you want to retrieve.

port := ssh_config.Get("myhost", "Port")

You can also load a config file and read values from it.

var config = `
Host *.test
  Compression yes

cfg, err := ssh_config.Decode(strings.NewReader(config))
fmt.Println(cfg.Get("example.test", "Port"))

Some SSH arguments have default values - for example, the default value for KeyboardAuthentication is "yes". If you call Get(), and no value for the given Host/keyword pair exists in the config, we'll return a default for the keyword if one exists.

Manipulating SSH config files

Here's how you can manipulate an SSH config file, and then write it back to disk.

f, _ := os.Open(filepath.Join(os.Getenv("HOME"), ".ssh", "config"))
cfg, _ := ssh_config.Decode(f)
for _, host := range cfg.Hosts {
    fmt.Println("patterns:", host.Patterns)
    for _, node := range host.Nodes {
        // Manipulate the nodes as you see fit, or use a type switch to
        // distinguish between Empty, KV, and Include nodes.

// Print the config to stdout:

Spec compliance

Wherever possible we try to implement the specification as documented in the ssh_config manpage. Unimplemented features should be present in the issues list.

Notably, the Match directive is currently unsupported.


This is the second comment-preserving configuration parser I've written, after an /etc/hosts parser. Eventually, I will write one for every Linux file format.


Donations free up time to make improvements to the library, and respond to bug reports. You can send donations via Paypal's “Send Money” feature to Donations are not tax deductible in the USA.