Accessing Remote Files Easily and Securely

The secure shell, ssh, and its companion, scp, are tools that I use more or less on a daily basis. Being able to move files between machines without having to setup SAMBA or NFS is very handy when working with multiple systems. All that you need is to enable the secure shell daemon - sshd.

Before we go into the details of the sshfs, let's run through a quick re-cap of ssh. The secure shell daemon runs on port 22 by default. It makes it possible to run an encrypted shell session. With the -Y flag, you can even run X11-forwarding, allowing you to run X11, i.e. graphical, programs on the remote machine and displaying the windows on the terminal that you are sitting at.

You can configure sshd through the /etc/ssh/sshd_config file (that is the location on my Kubuntu machine). Here, you can disable root access, older protocols, X11 forwarding, etc. The notion is that the more limits you put on the remote access, the more secure your system is from potential attacks. You might also want to tune your hosts.allow and hosts.deny files if you plan to expose sshd to the Internet. There are many guides on hardening servers and ssh, so I will not go into details.

To get things up and running, what you need to do is to install sshd. In Ubuntu, that means the openssh-server package. For external access, you also need to enable port forwarding of port 22 in your router/firewall and find your external IP. Now, you should be able to log onto your machine using your normal user credentials.

$ ssh user@192.168.1.100
user@192.168.1.200's password:

Having entered the password, you should now have full access to the remote system.

The handy scp command, secure copy, works in much the same way. To copy the file test.txt to user's remote home directory, simply enter:

$ scp test.txt user@192.168.1.100:

As before, you will be prompted for a password. You can copy the other way around as well. The command below demonstrates how to copy a file with an absolute path, i.e. not in the home directory of user, to your local machine.

$ scp user@192.168.1.100:/var/log/messages remote-messages

These two commands means that you can browse the file system, and freely copy files between machines. What sshfs does is that it exposes this functionality as a file system that you can mount. Before we look into how, let's have a quick look at sshfs.

The sshfs is implemented using FUSE, and relies on the sftp part of ssh to access the remote computer. As a remote file access protocol, sshfs is not very good. For instance, multiple users writing to the same file at once can create havoc. The benefits are the inherit security and that it is easy to setup.

So, how to use it. Let's look at a very short demonstration.

$ sshfs user@192.168.1.100: remote-home
$ ls remote-home
Desktop  Documents  Downloads  Music
$ fusermount -u remote-home

The initial sshfs command mounts the user's home directory to remote-home. You can specify another path after the colon to mount any other part of the remote file system. Access is only restricted by user's access rights.

Using ls, or any other ordinary command, will work as if the remote home directory was mounted locally. All tools work. For instance, you can log onto your remote machine and build software using your locally installed setup of build tools.

To unmount the filesystem, the fusermount command from the FUSE utilities package is used.

To summarize, sshfs an easy setup remote file access tool. It needs to be used with care if multiple users are involved. It makes it dead easy to temporarily access remote file systems, as well as mounting file systems from virtual machines for easier access and monitoring, as well as for remote installation, compilation and debugging. All-in-all, one of the tools I always keep handy in my toolbox.

______________________

Johan Thelin is a consultant working with Qt, embedded and free
software. On-line, he is known as e8johan.

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

But you need to be root...

Anonymous's picture

But you need to be root... in order to mount a file system on your local machine...

I am afraid your $ sign in front of your commands is a little bit misleading, or at least use a "sudo" before commands.

Anyway, I didn't know sshfs and I have to say it is pretty handy, thanks for sharing!
Ciao.

I'm not sure that the root /

Johan Thelin's picture

I'm not sure that the root / sudo requirement holds true in all setups. I'm pretty sure that can do sshfs mounts in my Kubuntu installation as my ordinary user (on vacation now, so I cannot check to make 100% sure).

Johan Thelin is a consultant working with Qt, embedded and free
software. On-line, he is known as e8johan.

Missing words?

Anonymous's picture

I think the line "These two commands means that you can browse the file system freely copy files between machines" is missing something, maybe a comma or "and"?

Nice article, thanks!

Thanks! I'll fix it.

Johan Thelin's picture

Thanks! I'll fix it.

Johan Thelin is a consultant working with Qt, embedded and free
software. On-line, he is known as e8johan.

Spaces in file names

bartmanus's picture

scp and sshfs are truly sweet quick and dirty tools.

I've been using sshfs for years for mounting my remote folder filled with music so the local music player on the laptop connect not to the unsynced local storage but directly to the source (, yo!).

I just haven't figured out how to make scp accept spaces in file names. On Linux filesystems i usually don't use spaces in file names but copying anything out of a Wintendo parition is bound to have a space in the filepath...

Tripple escape

Johan Thelin's picture

What you need to do is to escape the space with a backslash, but you need to do it twice. Once for the local machine and once for the remote. To add the second backslash, you need to escape it as well. This means that you will have to use tripple backslashes for each space, e.g. 192.168.1.100:monty\\\ python.

Johan Thelin is a consultant working with Qt, embedded and free
software. On-line, he is known as e8johan.

try this\ is_windows\

charles's picture

try this\ is_windows\ file_with\ spaces

Typo in Story

stan reichardt's picture

Shouldn't line in story:

$ user@192.168.1.100:/var/log/messages remote-messages

Read as:

$ scp user@192.168.1.100:/var/log/messages remote-messages

It should. Thank you! I'll

Johan Thelin's picture

It should. Thank you! I'll have it fixed.

Johan Thelin is a consultant working with Qt, embedded and free
software. On-line, he is known as e8johan.

White Paper
Linux Management with Red Hat Satellite: Measuring Business Impact and ROI

Linux has become a key foundation for supporting today's rapidly growing IT environments. Linux is being used to deploy business applications and databases, trading on its reputation as a low-cost operating environment. For many IT organizations, Linux is a mainstay for deploying Web servers and has evolved from handling basic file, print, and utility workloads to running mission-critical applications and databases, physically, virtually, and in the cloud. As Linux grows in importance in terms of value to the business, managing Linux environments to high standards of service quality — availability, security, and performance — becomes an essential requirement for business success.

Learn More

Sponsored by Red Hat

White Paper
Private PaaS for the Agile Enterprise

If you already use virtualized infrastructure, you are well on your way to leveraging the power of the cloud. Virtualization offers the promise of limitless resources, but how do you manage that scalability when your DevOps team doesn’t scale? In today’s hypercompetitive markets, fast results can make a difference between leading the pack vs. obsolescence. Organizations need more benefits from cloud computing than just raw resources. They need agility, flexibility, convenience, ROI, and control.

Stackato private Platform-as-a-Service technology from ActiveState extends your private cloud infrastructure by creating a private PaaS to provide on-demand availability, flexibility, control, and ultimately, faster time-to-market for your enterprise.

Learn More

Sponsored by ActiveState