max-rh/sshelf v0.13.0

0.13.0 — 2026-08-21

on GitHub

Release Notes

Added

• sshelf doctor — one command that checks the things that quietly break connections and
  names the fix for each: the OpenSSH version (8.4+ is what stored passwords ride on), whether
  your secret backend actually opens, whether hosts.toml parses and has no duplicate names or
  ids, hosts pointing at a site that no longer exists, stored secrets whose host is gone, a
  missing or stale $SSH_AUTH_SOCK when hosts use agent auth, and an exported ssh_config
  fragment that has drifted from your hosts. Each line is ok / warn / fail with one
  runnable next action; it exits 1 if anything failed, so sshelf doctor && … works in a
  script. Local and read-only throughout — it never contacts a host, and the only write is a
  throwaway keyring entry it deletes again. Full page:
  Checking your setup. No new dependencies.

Fixed

• Global flags now work before a subcommand. sshelf --config FILE list used to be read as
  "connect to a host named list", and sshelf --config FILE set-password web failed to parse
  at all — despite --config being documented as global. Both now work, on either side of the
  subcommand, as does --transfer-log. (Combining a host name and a subcommand —
  sshelf prod-web list — is now refused explicitly instead of silently running the subcommand
  and dropping the host.)

Changed

• Every user-facing error now names the thing, the cause, and the next action. A failed save
  names the file it couldn't write instead of just "save failed"; an unknown host, a duplicate
  site, and an empty --password-stdin each say what to run instead; a failed ssh launch asks
  whether OpenSSH is on your PATH; a forward that can't authenticate says what to check; an
  undecryptable vault names the environment variable to fix.
• The FAQ answers that used to end in a shrug now end in sshelf doctor.

Install sshelf 0.13.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/max-rh/sshelf/releases/download/v0.13.0/sshelf-installer.sh | sh

Install prebuilt binaries via Homebrew

brew install max-rh/tap/sshelf

Download sshelf 0.13.0