Sys-svc-ssh Role

Description: OpenSSH client package for secure remote shell access and key-based authentication

Variables

  • author: Kevin Veen-Birkenbach

  • description: OpenSSH client package for secure remote shell access and key-based authentication

  • license: Infinito.Nexus Community License (Non-Commercial)

  • company: Kevin Veen-Birkenbach https://www.veen.world

  • min_ansible_version: 2.9

  • platforms: [{‘name’: ‘ArchLinux’, ‘versions’: [‘all’]}, {‘name’: ‘Debian’, ‘versions’: [‘all’]}, {‘name’: ‘EL’, ‘versions’: [‘all’]}, {‘name’: ‘Fedora’, ‘versions’: [‘all’]}, {‘name’: ‘Ubuntu’, ‘versions’: [‘all’]}]

  • galaxy_tags: [‘ssh’, ‘openssh’, ‘security’, ‘networking’, ‘system’, ‘client’, ‘infrastructure’]

  • issue_tracker_url: https://s.infinito.nexus/issues

README

SSH Service (Client)

Description

This role installs the SSH client packages required to enable secure remote access and key-based authentication on Linux systems. It ensures that the appropriate SSH client is installed depending on the target distribution and that the installation is executed only once.

The role provides the foundation for SSH-based workflows and is designed to be used as a dependency by other roles that require SSH functionality.

Overview

Optimized for portability and idempotency, this role performs the following tasks:

  • Installs the SSH client using the system package manager

  • Automatically selects the correct package name for the target Linux distribution

  • Ensures the installation runs only once using a shared run-once mechanism

  • Serves as a reusable system-level SSH dependency for other roles

Cosmos

The diagram places SSH Service (Client) in the Infinito.Nexus cosmos: the components it deploys (capabilities), the central services it consumes (dependencies), and its outward reach (federation and bridged external networks).

flowchart LR
    subgraph role [sys-svc-ssh 💻]
        svc_svc_ssh["svc-ssh"]
    end

Solid 1:1 edges are fixed relationships; dashed 0..1 edges are conditional (enabled only in matching deployments); red 0..0 edges are turned off in this role. Node markers show the role’s deploy modes (💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly turned off, and ⚙️ an Ansible role dependency declared in meta/main.yml.

Purpose

The primary purpose of this role is to guarantee that an SSH client is available on the system before executing any SSH-related operations, such as key generation, remote access, or automated provisioning.

It is intentionally lightweight and does not configure the SSH server or modify SSH configuration files.

Supported Distributions

The role installs the correct SSH client package for the following platforms:

  • Debian / Ubuntu → openssh-client

  • Arch Linux → openssh

  • Fedora / Red Hat / CentOS → openssh-clients

  • Alpine Linux → openssh-client

Features

  • Distribution-aware package selection

  • Idempotent execution using a run-once flag

  • Minimal scope (client-only, no server configuration)

  • Reusable dependency role for higher-level SSH workflows

  • Best practices compliant with modern SSH usage

Credits

Implemented by Kevin Veen-Birkenbach. Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).