Help

Where do my hosts come from?

From the Ansible inventories you add (the “+” at the top of the host list: an INI or YAML file, or a folder with group_vars and host_vars) and from ~/.ssh/config. Fleetshell reads them and follows your edits; it never writes to them.

A host asks me to compare a fingerprint

That is the first connection to a server Fleetshell has not seen. Compare the fingerprint with the one whoever runs the server gives you (for example from ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub on the server), then trust it. Settings, Known hosts lists and removes the keys you accepted.

“The server’s key changed”

Fleetshell refuses to connect. A reinstalled server has a new key, but so does someone in the middle. Check with whoever runs the server; if it is expected, remove the old key in Settings, Known hosts (or from your own ~/.ssh/known_hosts) and connect again.

How do I sign in with a key, or a password?

The sign-in button in a host’s details: the SSH agent, one of Fleetshell’s own keys, a key file, or a password kept in the system credential store.

Running a command on a group (Pro)

The run button next to a group in the host list. Answers that are the same are folded into one row. Hosts marked prod ask once more before the command runs.

AWS instances: no Session Manager agent

The instance needs the SSM agent online and an instance profile with AmazonSSMManagedInstanceCore. Your own AWS user or role needs ssm:StartSession on it.

Google Cloud: “IAP could not reach port 22”

Add a firewall rule that lets 35.235.240.0/20 reach TCP 22 on the VM, and make sure sshd is running. The account needs IAP-secured Tunnel User, Compute Viewer and, with OS Login, Compute OS Login or OS Admin Login.

Azure: “No Bastion host reaches this VM”

Fleetshell uses Bastion’s native client tunnel. The Developer SKU has it; Standard and Premium need native client support turned on; Basic does not have it. The service principal needs Reader on the VM, its network interface and the Bastion host.

“Port already in use” for a tunnel

Another program already listens on that local port, often a local database. Pick another one, for example 15432 instead of 5432.

Moving to a new computer

Settings, Backup exports hosts, sign-ins, keys, tunnels, cloud accounts and snippets into one file encrypted with your passphrase. Import it on the other computer.

Contact

support@richardpham.com, usually within two working days. Mention your system and the Fleetshell version.