Super fast SSH2 protocol library. This ssh2-python3 package provides Python bindings for libssh2.

This is a forked and modified version of the original, ssh2-python.

Notable changes:

• Supports Python 3 only.
• Uses exclusively the embedded libssh2 (also modified to support Unix tunnel targets).
• Compiles libbsh2 to use Python's memory allocator.
• Some new methods that support:
  • Unix domain socket tunnel target on server host.
  • The "signal" protocol message.
  • Generic message constructor.
  • Bug fixes. Notably, a segfault during garbage collection in certain situations.

Any new bugs are the result of myself and not the orignal author (Panos Kittenis). Many thanks for his fine work to get this started.

Binary wheel packages are provided for Linux, all recent Python versions. Wheel packages have no dependencies.

You may need to update pip to install recent binary wheel packages - pip install -U pip.

pip install ssh2-python3

At this time all of the libssh2 API has been implemented up to version 1.9.1-embedded.

In addition, as ssh2-python3 is a thin wrapper of libssh2 with Python 3 semantics, its code examples can be ported straight over to Python with only minimal changes.

The library uses Cython based native code extensions as wrappers for libssh2.

Extension features:

• Thread safe - GIL is released as much as possible
• Very low overhead
• Super fast as a consequence of the excellent C library it uses and prodigious use of native code
• Object oriented - memory freed automatically and safely as objects are garbage collected by Python, and uses Python's memory allocator.
• Use Python semantics where applicable, such as context manager and iterator support for opening and reading from SFTP file handles
• Raise errors as Python exceptions
• Provide access to libssh2 error code definitions

Both byte and unicode strings are accepted as arguments and encoded appropriately. To change default encoding, utf-8, change the value of ssh2.utils.ENCODING. Output is always in byte strings.

Contributions are most welcome!

Connect and get available authentication methods.

from ssh2.session import Session

sock = <create and connect socket>

session = Session()
session.handshake(sock)
print(session.userauth_list())

Output will vary depending on SSH server configuration. For example:

['publickey', 'password', 'keyboard-interactive']

session.agent_auth(user)

channel = session.open_session()
channel.execute('echo Hello')

   size, data = channel.read()
   while(size > 0):
       print(data)
       size, data = channel.read()

Hello

print("Exit status: %s" % (channel.get_exit_status()))

   Exit status: 0

session.userauth_publickey_fromfile(username, 'private_key_file')

Passphrase can be provided with the passphrase keyword param.

   session.userauth_password(username, '<my password>')

from ssh2.sftp import LIBSSH2_FXF_READ, LIBSSH2_SFTP_S_IRUSR

sftp = session.sftp_init()
with sftp.open(<remote file to read>,
      LIBSSH2_FXF_READ, LIBSSH2_SFTP_S_IRUSR) as remote_fh, \
       open(<local file to write>, 'wb') as local_fh:
   for size, data in remote_fh:
       local_fh.write(data)

A simple usage example looks very similar to libssh2 usage examples.

As mentioned, ssh2-python3 is intentionally a thin wrapper over libssh2 and directly maps most of its API.

Clients using this library can be much simpler to use than interfacing with the libssh2 API directly.

import os
import socket

from ssh2.session import Session

host = 'localhost'
user = os.getlogin()

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.connect((host, 22))

session = Session()
session.handshake(sock)
session.agent_auth(user)

channel = session.open_session()
channel.execute('echo me; exit 2')
size, data = channel.read()
while size > 0:
   print(data)
   size, data = channel.read()
channel.close()
print("Exit status: %s" % channel.get_exit_status())

Output:

me

Exit status: 2

• SSH channel operations (exec,shell,subsystem) and methods
• SSH agent functionality
• Public key authentication and management
• SFTP operations
• SFTP file handles and attributes
• SSH port forwarding and tunnelling, for both TCP and Unix sockets.
• Non-blocking mode
• SCP send and receive
• Listener for port forwarding
• Subsystem support
• Host key checking and manipulation
• Signal remote process.

And more, as per libssh2 functionality.