Skip to main content

Usage

zwrm ssh [machine-id]
Open an SSH session to a running VM.

Arguments

ArgumentTypeDescription
machine-idstring (optional)Machine to connect to (prefix matching supported)

Flags

FlagTypeDefaultDescription
--appstringfrom zwrm.tomlApplication name
--app-idstringApplication UUID
--machinestringMachine ID (alternative to positional argument)
--directboolfalseConnect directly to the VM IP
--userstringSSH user override

Connection modes

Proxy mode (default)

The default mode connects through ZWRM’s SSH proxy using short-lived certificates. This works from anywhere — no direct network access to the VM is required.
zwrm ssh
zwrm ssh abc123
ZWRM automatically:
  1. Creates a dedicated SSH key at ~/.ssh/zwrm_ed25519 (if it doesn’t exist).
  2. Requests a short-lived certificate from the server.
  3. Connects through the proxy.

Direct mode

Direct mode connects straight to the VM’s IP address. This is only available when you have host-level network access.
zwrm ssh --direct

Examples

SSH into the first available machine:
zwrm ssh
SSH into a specific machine by ID prefix:
zwrm ssh abc123
Connect directly (host access required):
zwrm ssh --direct --machine abc123