What Does –– (double dash) Mean In SSH Shell Command?

I see lots of seasoned admins and cloud provider wrapper scripts use ssh client command as follows in shell:

ssh nixcraft@server1.sxi.io --

What the double -- (dash) does here? Why it is used in this shell command and why not just use the following?

ssh nixcraft@server1.sxi.io

The double dash “--” means “end of command line flags” i.e. it tells ssh command not to try to parse what comes after command line options. You will see something as follows when you use gcutil ssh vmNameHere python wrapper. It will display and execute ssh as follows:

ssh -o UserKnownHostsFile=/dev/null -o CheckHostIP=no -o StrictHostKeyChecking=no -i /Users/vivek/.ssh/google_compute_engine -A -p 22 nixcraft@server1.sxi.io --

This syntax ensures that you can run commands on the remote server without ssh parsing them:
ssh nixcraft@server1.sxi.io -- command1 --arg1 --arg2

The above syntax tell ssh not try to parse --arg1 and --arg2 after -- command line options. This ensures that command1 will accept --arg1 and --arg2 as arguments.

## safe examples ##
ssh nixcraft@server1.sxi.io -- --commandName --arg1 --arg2

This kind of behavior is mostly defined and handled by the ssh command and not by your bash/ksh/csh shell. This is also true for many other commands. For example you can not create or view a file named --file or -f using cat command

## fail ##
cat --file
cat -f

Instead try passing double dash “--” to instruct cat command not to try to parse what comes after command line options:

## works ##
cat -- --file
cat -- -f
See also

You may also want to read the following faq:

Posted by: SXI ADMIN

The author is the creator of SXI LLC and a seasoned sysadmin, DevOps engineer, and a trainer for the Linux operating system/Unix shell scripting. Get the latest tutorials on SysAdmin, Linux/Unix and open source topics via RSS/XML feed or weekly email newsletter.

Comments are closed, but trackbacks and pingbacks are open.