# OpenSSH Server

OpenSSH Server is a containerized Secure Shell (SSH) server that provides limited, sandboxed access to mapped folders and processes for homelab users who need controlled remote access without full host login. It is open source and self-hosted, installable on Kubernetes (Helm), Docker Hub, ZimaOS and Unraid.

Canonical page: https://ourlocalhost.com/app/426/openssh-server

## Description

OpenSSH Server is a containerized Secure Shell (SSH) server that provides limited, sandboxed access to mapped folders and processes for homelab users who need controlled remote access without full host login.

## Platform availability

Available on 3 of 9 platforms: Unraid, ZimaOS, Helm.

## Health score

31/100 (Low), based on 3 of 4 factors.
- Maintained: 0 (GitHub repository no longer exists)
- Easy to install: 55 (3 install platforms, install notes, Docker image)
- Light to run: 80 (1 GB minimum RAM, runs on ARM)

## Links

- Documentation: https://www.openssh.com/manual.html
- GitHub: https://github.com/linuxserver/docker-openssh-server
- Kubernetes (Helm): https://artifacthub.io/packages/helm/djjudas21/openssh-server
- Docker Hub: https://hub.docker.com/r/linuxserver/openssh-server
- ZimaOS: https://github.com/bigbeartechworld/big-bear-casaos/tree/master/Apps/openssh-server
- Unraid: https://ca.unraid.net/apps/openssh-server-0qtwjxf0t2rxj3?q=openssh-server
- Official website: https://www.openssh.com

## Common questions

### Where does the SSH server check to approve a public key for login?

It checks the account's authorized_keys file, commonly ~/.ssh/authorized_keys. A missing or wrong entry means the key is rejected.

### Where are the default SSH server settings on Mint, and what port is often targeted?

The default settings are in /etc/ssh/sshd_config. Port 22 is the default listening port, and many mass attacks assume SSH is running there.

### Should a new self-hoster expose SSH directly to the internet?

The advice is to use a VPN until you fully understand your attack surface. If you expose SSH, bots will attempt access regardless of the port.

### Why can ssh or scp appear to make connections from low-numbered ports?

This can happen with rhosts and rhosts-rsa authentication because the server needs to trust the username provided by the client.

## Alternatives

- KiTTY: KiTTY is an opensource terminal emulator, forked from PuTTY , that adds many extra features to the original software.
- Mosh: Mosh (mobile shell), the mobile SSH replacement.
- PuTTY: PuTTY is a free and open-source terminal emulator, serial console, and network file transfer application that supports protocols such as SS…
- Royal TSX: Royal TS provides easy and secure access to your remote systems Unlock the power to remotely manage your systems on multiple platforms!
- SecureCRT: SecureCRT combines rock-solid terminal emulation with the strong encryption, data integrity, and authentication options of the Secure Shell…
- Termix: Termix is a free, open-source, self-hosted server management platform providing SSH terminals, remote desktop (RDP, VNC, Telnet) access, fi…
- WindTerm: A professional SSH/Telnet/Serial/Shell/Sftp client for DevOps.
- Xshell: Xshell is a powerful SSH1, SSH2, SFTP, TELNET, RLOGIN and SERIAL terminal emulator for Windows platforms.
- ZOC: ZOC is a powerful and well-established terminal emulator and telnet client, well known for its outstanding user interface with tabbed multi…
- crushftp: CrushFTP is a self-hosted FTP file-transfer solution that serves your storage over FTP, FTPS, and SFTP, and includes a web interface for ma…

---
Source: Our Local Host (https://ourlocalhost.com/app/426/openssh-server), the self-hosted and open-source app directory.