Workshop wiki · SSH

SSH

Complete, versioned learning material for this workshop—from reference documentation and workshop levels to exercises, assessments and the supporting texts for every practice module.

SSH

My learning progress

With the web app option enabled, your progress is stored on this device.

Learning progress in the web app

Mark chapters as read, view reading progress and check off practice modules after enabling the optional web app. Workshop progress is calculated from chapters across all document pages. Your choices stay on this device; there is no account or server sync. Installation is not required. Withdrawing your choice in Privacy settings deletes the progress.

Workshop progress0%
Practice modules completed0 / 31
Documents read0 / 94
Workshop progress0%
0%
0 / 648 chapters read

Practice modules

Workshop examples as ZIP files

All 31 practice examples in this workshop are available as individual ZIP files. Choose an example to download its package directly.

00lab-skeleton 14 Files · 17.5 KB · SHA-256 bc51d20c31f4 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/lab_skeleton.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
01first-client-login-model 14 Files · 18.2 KB · SHA-256 64cd07892c06 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/first_client_login_model.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
02ed25519-key-generation 14 Files · 18.2 KB · SHA-256 4f8d0391011d Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/ed25519_key_generation.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
03known-hosts-tofu 14 Files · 17.7 KB · SHA-256 e26eace6a222 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/known_hosts_tofu.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
04authorized-keys-options 14 Files · 18.0 KB · SHA-256 f138383e10b5 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/authorized_keys_options.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
05file-permissions-ssh-dir 14 Files · 18.2 KB · SHA-256 4a209c013cee Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/file_permissions_ssh_dir.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
06client-config-host-blocks 14 Files · 18.3 KB · SHA-256 6e155a97ba02 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/client_config_host_blocks.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
07verbose-debugging 14 Files · 17.8 KB · SHA-256 1bc9e94c1fb4 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/verbose_debugging.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
08ssh-agent-workflow 14 Files · 17.9 KB · SHA-256 fc042d7e44d1 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/ssh_agent_workflow.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
09agent-forwarding-risk 14 Files · 18.0 KB · SHA-256 12eed65a0c6f Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/agent_forwarding_risk.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
10sftp-scp-rsync-model 14 Files · 18.1 KB · SHA-256 159535e2cecf Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/sftp_scp_rsync_model.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
11local-port-forwarding 14 Files · 17.9 KB · SHA-256 880d6aedd2da Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/local_port_forwarding.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
12remote-port-forwarding 14 Files · 18.1 KB · SHA-256 6ea6d19b72e1 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/remote_port_forwarding.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
13dynamic-socks-forwarding 14 Files · 18.1 KB · SHA-256 06d7734652ae Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/dynamic_socks_forwarding.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
14proxyjump-bastion 14 Files · 17.7 KB · SHA-256 a816d6fcb409 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/proxyjump_bastion.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
15proxycommand-netcat 14 Files · 17.9 KB · SHA-256 742e38e35bbb Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/proxycommand_netcat.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
16controlmaster-multiplexing 14 Files · 18.2 KB · SHA-256 43f1d12b41b0 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/controlmaster_multiplexing.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
17git-over-ssh 14 Files · 17.5 KB · SHA-256 088cdfe86e1f Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/git_over_ssh.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
18ci-deploy-key-model 14 Files · 18.0 KB · SHA-256 beecc1deab8f Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/ci_deploy_key_model.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
19sftp-only-chroot-model 14 Files · 18.1 KB · SHA-256 300d0bc79943 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/sftp_only_chroot_model.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
20user-ca-certificates 14 Files · 17.8 KB · SHA-256 4d083450aa6c Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/user_ca_certificates.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
21host-ca-certificates 14 Files · 17.9 KB · SHA-256 75f13ac995ca Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/host_ca_certificates.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
22key-revocation-list 14 Files · 17.9 KB · SHA-256 219954aac3db Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/key_revocation_list.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
23fido2-security-key-model 14 Files · 18.2 KB · SHA-256 560552e9d74c Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/fido2_security_key_model.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
24algorithm-policy-review 14 Files · 18.2 KB · SHA-256 5d628b69a16b Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/algorithm_policy_review.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
25sshd-hardening-baseline 14 Files · 18.0 KB · SHA-256 7dfa9136c1c4 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/sshd_hardening_baseline.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
26login-rate-limit-fail2ban-model 14 Files · 18.6 KB · SHA-256 af8c6e2e3b60 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/login_rate_limit_fail2ban_model.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
27audit-auth-logs 14 Files · 17.6 KB · SHA-256 664c4957a151 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/audit_auth_logs.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
28host-key-rotation 14 Files · 17.7 KB · SHA-256 f84718500021 Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/host_key_rotation.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
29break-glass-access 14 Files · 17.9 KB · SHA-256 80a10a3b7afa Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/break_glass_access.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh
30incident-response-key-leak 14 Files · 18.3 KB · SHA-256 d202aae7c6dc Download example ZIP
Files in the ZIP · 14
  • README-EL.md
  • README.md
  • bin/incident_response_key_leak.sh
  • client/ssh_config
  • data/auth.log.sample
  • docs/de/README.md
  • docs/el/README.md
  • docs/en/README.md
  • run.sh
  • runbook.txt
  • scenario.json
  • server/authorized_keys.sample
  • server/sshd_config.sample
  • tests/smoke.sh

Learning material

Documentation in the Orthevs Wiki

The material retains its subject-specific structure. German and English versions are cross-linked, and diagrams are generated directly from the included Mermaid sources.

Workshop overview

1

Technical documentation

13
English · 61.5 KB

Architecture: SSH

This document belongs to the SSH workshop and describes architecture as training material, reference documentation and review basis.

Open document ↗
English · 61.1 KB

Best Practices: SSH

This document belongs to the SSH workshop and describes best-practices as training material, reference documentation and review basis.

Open document ↗
English · 60.4 KB

Commands: SSH

This document belongs to the SSH workshop and describes commands as training material, reference documentation and review basis.

Open document ↗
English · 60.7 KB

Concepts: SSH

This document belongs to the SSH workshop and describes concepts as training material, reference documentation and review basis.

Open document ↗
English · 69.9 KB

Curriculum: SSH

This curriculum structures an SSH workshop from the first safe login to advanced operations with bastion hosts, certificates, hardening and incident response.

Open document ↗
English · 61.1 KB

Diagrams: SSH

This document belongs to the SSH workshop and describes diagrams as training material, reference documentation and review basis.

Open document ↗
English · 61.1 KB

Cloud Environment: SSH

This document belongs to the SSH workshop and describes environment-cloud as training material, reference documentation and review basis.

Open document ↗
English · 60.9 KB

Bare Metal Environment: SSH

This document belongs to the SSH workshop and describes environment-native-baremetal as training material, reference documentation and review basis.

Open document ↗
English · 60.8 KB

VM Environment: SSH

This document belongs to the SSH workshop and describes environment-native-vm as training material, reference documentation and review basis.

Open document ↗
English · 60.9 KB

WSL Environment: SSH

This document belongs to the SSH workshop and describes environment-wsl as training material, reference documentation and review basis.

Open document ↗
English · 60.9 KB

Operations: SSH

This document belongs to the SSH workshop and describes operations as training material, reference documentation and review basis.

Open document ↗
English · 61.1 KB

Security: SSH

This document belongs to the SSH workshop and describes security as training material, reference documentation and review basis.

Open document ↗
English · 61.4 KB

Troubleshooting: SSH

This document belongs to the SSH workshop and describes troubleshooting as training material, reference documentation and review basis.

Open document ↗

Workshop levels

4

Exercises

4

Assessments and solutions

9
English · 55.3 KB

SSH Fundamentals: Assessment (EN)

Scope: Protokollmodell, erster Login, Host Keys, Public Keys, Dateirechte und sichere Grundbefehle.

Open document ↗
English · 56.6 KB

SSH Fundamentals: Solution (EN)

Scope: Protokollmodell, erster Login, Host Keys, Public Keys, Dateirechte und sichere Grundbefehle.

Open document ↗
English · 55.3 KB

SSH Intermediate: Assessment (EN)

Scope: Client- und Serverkonfiguration, Agent, Debugging, Forwarding, SFTP und Auth-Fehler.

Open document ↗
English · 56.6 KB

SSH Intermediate: Solution (EN)

Scope: Client- und Serverkonfiguration, Agent, Debugging, Forwarding, SFTP und Auth-Fehler.

Open document ↗
English · 55.3 KB

SSH Professional: Assessment (EN)

Scope: Bastion Hosts, ProxyJump, Multiplexing, SSH-Zertifikate, Git/CI und Betriebsmodelle.

Open document ↗
English · 56.6 KB

SSH Professional: Solution (EN)

Scope: Bastion Hosts, ProxyJump, Multiplexing, SSH-Zertifikate, Git/CI und Betriebsmodelle.

Open document ↗
English · 55.3 KB

SSH Advanced Security: Assessment (EN)

Scope: Hardening, Algorithmuspflege, FIDO2, KRL, Forensik, Logging und Incident Response.

Open document ↗
English · 56.6 KB

SSH Advanced Security: Solution (EN)

Scope: Hardening, Algorithmuspflege, FIDO2, KRL, Forensik, Logging und Incident Response.

Open document ↗
English · 48.7 KB

Official Certificates and Exam Alignment: SSH (EN)

This document does not invent an official OpenSSH or SSH core certificate. SSH skill is relevant in Linux, cloud, DevOps, SRE and security exams, but this workshop treats SSH as a practical core capability and not as a replacement for…

Open document ↗

Practice modules

31 modules as one continuous learning path.

The sequence remains unchanged: from the lab skeleton through technical foundations and operating models to final troubleshooting. The technical directory names are deliberately preserved.

00 lab-skeleton

2

01 first-client-login-model

2

02 ed25519-key-generation

2

03 known-hosts-tofu

2

04 authorized-keys-options

2

05 file-permissions-ssh-dir

2

06 client-config-host-blocks

2

07 verbose-debugging

2

08 ssh-agent-workflow

2

09 agent-forwarding-risk

2

10 sftp-scp-rsync-model

2

11 local-port-forwarding

2

12 remote-port-forwarding

2

13 dynamic-socks-forwarding

2

14 proxyjump-bastion

2

15 proxycommand-netcat

2

16 controlmaster-multiplexing

2

17 git-over-ssh

2

18 ci-deploy-key-model

2

19 sftp-only-chroot-model

2

20 user-ca-certificates

2

21 host-ca-certificates

2

22 key-revocation-list

2

23 fido2-security-key-model

2

24 algorithm-policy-review

2

25 sshd-hardening-baseline

2

26 login-rate-limit-fail2ban-model

2

27 audit-auth-logs

2

28 host-key-rotation

2

29 break-glass-access

2

30 incident-response-key-leak

2

SSH · Orthevs Academy

31 modules as one continuous learning path.

The sequence remains unchanged: from the lab skeleton through technical foundations and operating models to final troubleshooting. The technical directory names are deliberately preserved.

Orthevs – Engineering the foundation for what comes next.

Orthevs as an app

Install Orthevs

The Orthevs web app can be installed on supported mobile devices and desktop browsers.

iPhone and iPad

Open Orthevs in Safari. Tap Share, then Add to Home Screen. Enable Open as Web App if offered, then tap Add.

Android

For the web app, open the browser menu and choose Install app or Add to Home screen. Confirm the installation.

Desktop browser

Open the browser menu or the install icon in the address bar, then choose Install app or Add to Dock.

Web app installation depends on your browser. If no install prompt appears, follow the browser steps shown above.