Expect – Linux tool for automating interactive programs

Post by hiAndrewQuinn » Sat, Aug 31, 2024, 9:12 AM UTC

Borborygymus wrote: post #49

hiAndrewQuinn wrote: post #36

My go-to example for `expect` is password-based SSH. Since we're all enlightened beings these days who surely never use this anymore, there's no risk to it: #!/bin/bash expect -c " spawn ssh user@10.0.0.1 expect \"password:\" send \"12345\r\" interact " `interact` hands you back control to do whatever you want, but you don't actually need to do that. You can have `expect` run every command, fill out every field. The…

You forgot all the other prompts that ssh might produce before the password prompt (e.g. add new host to known hosts yes/no). There are more possible prompts than most people realize.

Post by penguin_booze » Sat, Aug 31, 2024, 10:14 AM UTC

Borborygymus wrote: post #49

hiAndrewQuinn wrote: post #36

My go-to example for `expect` is password-based SSH. Since we're all enlightened beings these days who surely never use this anymore, there's no risk to it: #!/bin/bash expect -c " spawn ssh user@10.0.0.1 expect \"password:\" send \"12345\r\" interact " `interact` hands you back control to do whatever you want, but you don't actually need to do that. You can have `expect` run every command, fill out every field. The…

You forgot all the other prompts that ssh might produce before the password prompt (e.g. add new host to known hosts yes/no). There are more possible prompts than most people realize.

Post by yusyusyus » Sat, Aug 31, 2024, 10:20 AM UTC

oxygen_crisis wrote: post #52

hiAndrewQuinn wrote: post #44

Earlier quoted context omitted.

Definitely, `sshpass` is the more better keyhole tool for this job. I picked it as the most common example I can imagine everyone going "ugh, I have to do this by hand again ?" at.

sshpass is a travesty of security. It has all the pitfalls of putting your front door key under your doormat. Except you're doing it in a world where everyone can materialize a unique key out of thin air, and you can always instantly tell your door which of those keys should or shouldn't be allowed to open it. sshpass is a curse, even calling it a crutch would be improper flattery. It's a dangerous cheat that accompl…

Post by nasso_dev » Sat, Aug 31, 2024, 10:30 AM UTC

Post by [deleted] » Sat, Aug 31, 2024, 10:37 AM UTC

yusyusyus wrote: post #55

oxygen_crisis wrote: post #52

Earlier quoted context omitted.

sshpass is a travesty of security. It has all the pitfalls of putting your front door key under your doormat. Except you're doing it in a world where everyone can materialize a unique key out of thin air, and you can always instantly tell your door which of those keys should or shouldn't be allowed to open it. sshpass is a curse, even calling it a crutch would be improper flattery. It's a dangerous cheat that accompl…

sometimes the device you're connecting to doesnt support ssh keys.