The leading native Python SSHv2 protocol library.
Python Groff
Latest commit 0ae019c Jun 21, 2016 @bitprophet bitprophet Merge branch '2.0'
Failed to load latest commit information.
demos Use modern api to check if event is set. Dec 17, 2014
images [project @ Arch-1:robey@lag.net--2005-master-shake%paramiko--dev--1--… Apr 18, 2005
paramiko Cut 2.0.1 Jun 21, 2016
sites Cut 2.0.1 Jun 21, 2016
tests Merge branch '1.17' into 2.0 Jun 12, 2016
.bzrignore [project @ robey@lag.net-20080706223938-fn82xx2k0zvklazm] Jul 6, 2008
.gitignore Merge branch 'master' into gssapi-py3-support Mar 26, 2014
.travis.yml Enabling caching of pip downloads and wheels Apr 25, 2016
ChangeLog.0 [project @ Arch-1:robey@lag.net--2005-master-shake%paramiko--dev--1--… May 21, 2005
ChangeLog.1 [project @ Arch-1:robey@lag.net--2005-master-shake%paramiko--dev--1--… May 21, 2005
LICENSE Fix FSF address Sep 23, 2012
MANIFEST.in [project @ robey@lag.net-20061031185035-b57ad8184c39063a] Oct 31, 2006
NEWS Nuke sphinx-changelogg'd material Jan 30, 2014
NOTES [project @ Arch-1:robey@lag.net--2003-public%secsh--dev--1.0--patch-33] Mar 9, 2004
README.rst Merge branch '1.17' Apr 29, 2016
TODO Take ownership of TODO file Sep 23, 2012
dev-requirements.txt Update tasks to use Invoke/Invocations 0.13 Jun 10, 2016
setup.cfg Revert "Revert "Add a setup.cfg identifying this package as universal"" Mar 23, 2014
setup.py Use a more recent cryptography and call a function Apr 28, 2016
setup_helper.py Restore Python 2.6 compatibility for `python setup.py {s,b}dist' Sep 9, 2015
tasks.py Update tasks to use Invoke/Invocations 0.13 Jun 10, 2016
test.py Make NoValidConnectionsError picklable correctly Apr 24, 2016
tox-requirements.txt Use a more recent cryptography and call a function Apr 28, 2016
tox.ini removed references to python 3.2, which has basically no usage Aug 1, 2015

README.rst

Paramiko

https://travis-ci.org/paramiko/paramiko.svg?branch=master https://coveralls.io/repos/paramiko/paramiko/badge.svg?branch=master&service=github
Paramiko:Python SSH module
Copyright:Copyright (c) 2003-2009 Robey Pointer <robeypointer@gmail.com>
Copyright:Copyright (c) 2013-2016 Jeff Forcier <jeff@bitprophet.org>
License:LGPL
Homepage:http://www.paramiko.org/
API docs:http://docs.paramiko.org
Development:https://github.com/paramiko/paramiko

What

"Paramiko" is a combination of the Esperanto words for "paranoid" and "friend". It's a module for Python 2.6+/3.3+ that implements the SSH2 protocol for secure (encrypted and authenticated) connections to remote machines. Unlike SSL (aka TLS), SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. You may know SSH2 as the protocol that replaced Telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across the encrypted tunnel (this is how SFTP works, for example).

It is written entirely in Python (though it depends on third-party C wrappers for low level crypto; these are often available precompiled) and is released under the GNU Lesser General Public License (LGPL).

The package and its API is fairly well documented in the docs folder that should have come with this archive.

Installation

For most users, the recommended method to install is via pip:

pip install paramiko

For more detailed instructions, see the Installing page on the main Paramiko website.

Portability Issues

Paramiko primarily supports POSIX platforms with standard OpenSSH implementations, and is most frequently tested on Linux and OS X. Windows is supported as well, though it may not be as straightforward.

Bugs & Support

Bug Reports:Github
Mailing List:paramiko@librelist.com (see the LibreList website for usage details).
IRC:#paramiko on Freenode

Kerberos Support

Paramiko ships with optional Kerberos/GSSAPI support; for info on the extra dependencies for this, see the GSS-API section on the main Paramiko website.

Demo

Several demo scripts come with Paramiko to demonstrate how to use it. Probably the simplest demo of all is this:

import paramiko, base64
key = paramiko.RSAKey(data=base64.decodestring('AAA...'))
client = paramiko.SSHClient()
client.get_host_keys().add('ssh.example.com', 'ssh-rsa', key)
client.connect('ssh.example.com', username='strongbad', password='thecheat')
stdin, stdout, stderr = client.exec_command('ls')
for line in stdout:
    print '... ' + line.strip('\n')
client.close()

This prints out the results of executing ls on a remote server. The host key 'AAA...' should of course be replaced by the actual base64 encoding of the host key. If you skip host key verification, the connection is not secure!

The following example scripts (in demos/) get progressively more detailed:

demo_simple.py:Calls invoke_shell() and emulates a terminal/TTY through which you can execute commands interactively on a remote server. Think of it as a poor man's SSH command-line client.
demo.py:Same as demo_simple.py, but allows you to authenticate using a private key, attempts to use an SSH agent if present, and uses the long form of some of the API calls.
forward.py:Command-line script to set up port-forwarding across an SSH transport.
demo_sftp.py:Opens an SFTP session and does a few simple file operations.
demo_server.py:An SSH server that listens on port 2200 and accepts a login for 'robey' (password 'foo'), and pretends to be a BBS. Meant to be a very simple demo of writing an SSH server.
demo_keygen.py:A key generator similar to OpenSSH ssh-keygen(1) program with Paramiko keys generation and progress functions.

Use

The demo scripts are probably the best example of how to use this package. There is also a lot of documentation, generated with Sphinx autodoc, in the doc/ folder.

There are also unit tests here:

$ python ./test.py

Which will verify that most of the core components are working correctly.