Skip to content

Instantly share code, notes, and snippets.

@JustinGrote
Created December 28, 2018 01:44
Show Gist options
  • Star 4 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save JustinGrote/72d7baaa6cc99691b7c4cb3caad54891 to your computer and use it in GitHub Desktop.
Save JustinGrote/72d7baaa6cc99691b7c4cb3caad54891 to your computer and use it in GitHub Desktop.
Enable Powershell Core 6 SSH Remoting on Windows
#Requires -RunAsAdministrator
<#
.SYNOPSIS
Enabled Powershell Remoting Over SSH.
.NOTES
Currently assumes you have installed openssh and powershell core, preferably via chocolatey as such:
choco install powershell-core -y
choco install openssh -y -params '"/SSHServerFeature /PathSpecsToProbeForShellEXEString:$env:programfiles\PowerShell\*\pwsh.exe"'
#>
[CmdletBinding()]
param (
#Path to your Powershell Core Installation. Defaults to Powershell Core 6
$PWSHPath= "$env:PROGRAMFILES\Powershell\6",
#A path with no spaces that will be used for the SSHD Link. Default is generally fine.
$noSpacesPath = "$env:windir\System32\WindowsPowershell\6",
#Path to your SSHD config file
$sshdConfigFile = "$env:PROGRAMDATA\ssh\sshd_config"
)
#Sanity Checks
if (-not (test-path $sshdConfigFile)) {throw "SSHD Configuration not found at $sshdConfigFile. Did you install OpenSSH first?"}
$sshdConfig = gc -raw $sshdConfigFile
if ($sshdConfig -match 'Subsystem\s*powershell') {throw "Powershell SSH Remoting config already detected. Delete the Subsystem Powershell section to reinstall"}
if (-not (get-service sshd)) {throw "SSHD is not configured as a windows service. Did you install OpenSSH with /SSHServerFeature?"}
if (-not (Test-path (join-path $pwshpath 'pwsh.exe'))) {throw "pwsh.exe not found at PWSH Path $PWSHPath"}
if (Test-Path $noSpacesPath) {throw "NoSpacesPath $noSpacesPath already exists, please delete so that a link may be created"}
#Make the link
& cmd /C mklink /D $noSpacesPath $PWSHPath
#Verify the link was created
if (-not (test-path $noSpacesPath)) {throw "Failed to create the nonspaced link at $noSpacesPath"}
#Append the nonspaced SSHD config
[Environment]::NewLine + "Subsystem powershell $noSpacesPath\pwsh.exe -sshs -NoLogo -NoProfile" | Out-File -Append -Encoding utf8 $sshdConfigFile
$sshdConfig = gc -raw $sshdConfigFile
if ($sshdConfig -match 'Subsystem\s*powershell') {
write-host -foreground Green "Powershell over SSH Remoting Enabled. Restarting SSHD"
} else {
throw "Powershell over SSH Remoting Config Failed. Re-run script for cleanup steps"
}
#Restart the sshd service
Restart-Service sshd
@peetrike
Copy link

Line 29 could be written:
#Requires -Version 5.0
New-Item -ItemType SymbolicLink -Path $noSpacesPath -Value $PWSHPath

@praveen4463
Copy link

On Line 35, appending 'subsystem' after a 'Match' block is an error. sshd won't start because of that. This line should be added before the start of 'Match' block to let sshd work.
reference: https://unix.stackexchange.com/questions/67334/openssh-how-to-end-a-match-block

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment