Support encrypted (password-protected) SSH key files

[MonkeeMan1]

I'm currently trying to use the dockerpy sdk to connect to my remote ubuntu server so i can manage my docker containers via python.

I am getting a few issues when attempting to do this.

docker.APIClient(base_url="ssh://user@ip")

When doing the following I am getting the error:

paramiko.ssh_exception.PasswordRequiredException: private key file is encrypted

I can resolve this issue by adding the kwarg: use_ssh_client, but then i am forced to input a password, which limits the potential for automation.

docker.APIClient(base_url="ssh://user:@ip", use_ssh_client=True)

When using the above code, I have also tried to enter my ssh key password into the base_url such as:

docker.APIClient(base_url="ssh://user:pass@ip", use_ssh_client=True)

However, this then greets me with the following error:

docker.errors.DockerException: Invalid bind address format: ssh://root:pass@ip

I have run out of ideas and am confused as to how I am supposed to get around this?

Many thanks in advance...

[milas]

Currently, there's no support for programmatically passing a password for encrypted SSH key files - added the "feature request" label here.

Here's the relevant code that sets up the SSH connection via Paramiko for reference:

docker-py/docker/transport/sshconn.py

Lines 189 to 218 in bc0a5fb

	def _create_paramiko_client(self, base_url):
	logging.getLogger("paramiko").setLevel(logging.WARNING)
	self.ssh_client = paramiko.SSHClient()
	base_url = urllib.parse.urlparse(base_url)
	self.ssh_params = {
	"hostname": base_url.hostname,
	"port": base_url.port,
	"username": base_url.username
	}
	ssh_config_file = os.path.expanduser("~/.ssh/config")
	if os.path.exists(ssh_config_file):
	conf = paramiko.SSHConfig()
	with open(ssh_config_file) as f:
	conf.parse(f)
	host_config = conf.lookup(base_url.hostname)
	if 'proxycommand' in host_config:
	self.ssh_params["sock"] = paramiko.ProxyCommand(
	host_config['proxycommand']
	)
	if 'hostname' in host_config:
	self.ssh_params['hostname'] = host_config['hostname']
	if base_url.port is None and 'port' in host_config:
	self.ssh_params['port'] = host_config['port']
	if base_url.username is None and 'user' in host_config:
	self.ssh_params['username'] = host_config['user']
	if 'identityfile' in host_config:
	self.ssh_params['key_filename'] = host_config['identityfile']
	self.ssh_client.load_system_host_keys()
	self.ssh_client.set_missing_host_key_policy(paramiko.RejectPolicy())

[milas]

Actually closing this as a duplicate of #2416.