Ssh on Ilya Rusalowski Hubhttps://rivik.dev/tags/ssh/Recent content in Ssh on Ilya Rusalowski HubHugoen-usSat, 09 May 2026 00:00:00 +0000Hardware-backed SSH keys end to end: YubiKey, PIV, software alternatives, and where SSH CAs fit inhttps://rivik.dev/hardware-backed-ssh-keys-end-to-end-yubikey-piv-software-alternatives-and-where-ssh-cas-fit-in/Sat, 09 May 2026 00:00:00 +0000https://rivik.dev/hardware-backed-ssh-keys-end-to-end-yubikey-piv-software-alternatives-and-where-ssh-cas-fit-in/A working guide to using a YubiKey for SSH on a real Linux fleet — the four knobs (resident, touch, PIN, agent), a four-mode policy for root and Ansible, software-only alternatives, and where SSH CAs fit in.SSH Tunnel Magic: Your SSH Already Is Tailscalehttps://rivik.dev/ssh-tunnel-magic-your-ssh-already-is-tailscale/Fri, 24 Apr 2026 00:00:00 +0000https://rivik.dev/ssh-tunnel-magic-your-ssh-already-is-tailscale/SSH punching for everyone who only knows <code>ssh user@host</code> — how -D replaces a corporate VPN, -R replaces a mesh VPN for NAT&rsquo;d boxes, and -L forwards Unix sockets. 3 flags, 3 bonuses, 1 man page.