68

I am using the program synergy together with an ssh tunnel

It works, i just have to open an console an type these two commands:

ssh -f -N -L localhost:12345:otherHost:12345 otherUser@OtherHost
synergyc localhost

because im lazy i made an Bash-Script which is run with one mouseclick on an icon:

#!/bin/bash
ssh -f -N -L localhost:12345:otherHost:12345 otherUser@OtherHost
synergyc localhost

the Bash-Script above works as well, but now i also want to kill synergy and the ssh tunnel via one mouseclick, so i have to save the PIDs of synergy and ssh into file to kill them later:

#!/bin/bash

mkdir -p /tmp/synergyPIDs || exit 1
rm -f /tmp/synergyPIDs/ssh || exit 1
rm -f /tmp/synergyPIDs/synergy || exit 1

[ ! -e /tmp/synergyPIDs/ssh ] || exit 1
[ ! -e /tmp/synergyPIDs/synergy ] || exit 1

ssh -f -N -L localhost:12345:otherHost:12345 otherUser@OtherHost
echo $! > /tmp/synergyPIDs/ssh
synergyc localhost
echo $! > /tmp/synergyPIDs/synergy

But the files of this script are empty.

How do I get the PIDs of ssh and synergy?
(I try to avoid ps aux | grep ... | awk ... | sed ... combinations, there has to be an easier way.)

12 Answers 12

88

With all due respect to the users of pgrep, pkill, ps | awk, etc, there is a much better way.

Consider that if you rely on ps -aux | grep ... to find a process you run the risk of a collision. You may have a use case where that is unlikely, but as a general rule, it's not the way to go.

SSH provides a mechanism for managing and controlling background processes. But like so many SSH things, it's an "advanced" feature, and many people (it seems, from the other answers here) are unaware of its existence.

In my own use case, I have a workstation at home on which I want to leave a tunnel that connects to an HTTP proxy on the internal network at my office, and another one that gives me quick access to management interfaces on co-located servers. This is how you might create the basic tunnels, initiated from home:

$ ssh -fNT -L8888:proxyhost:8888 -R22222:localhost:22 officefirewall
$ ssh -fNT -L4431:www1:443 -L4432:www2:443 colocatedserver

These cause ssh to background itself, leaving the tunnels open. But if the tunnel goes away, I'm stuck, and if I want to find it, I have to parse my process list and home I've got the "right" ssh (in case I've accidentally launched multiple ones that look similar).

Instead, if I want to manage multiple connections, I use SSH's ControlMaster config option, along with the -O command-line option for control. For example, with the following in my ~/.ssh/config file,

host officefirewall colocatedserver
    ControlMaster auto
    ControlPath ~/.ssh/cm_sockets/%r@%h:%p

the ssh commands above, when run, will leave spoor in ~/.ssh/cm_sockets/ which can then provide access for control, for example:

$ ssh -O check officefirewall
Master running (pid=23980)
$ ssh -O exit officefirewall
Exit request sent.
$ ssh -O check officefirewall
Control socket connect(/home/ghoti/.ssh/cm_socket/[email protected]:22): No such file or directory

And at this point, the tunnel (and controlling SSH session) is gone, without the need to use a hammer (kill, killall, pkill, etc).

Bringing this back to your use-case...

You're establishing the tunnel through which you want syngergyc to talk to syngergys on TCP port 12345. For that, I'd do something like the following.

Add an entry to your ~/.ssh/config file:

Host otherHosttunnel
    HostName otherHost
    User otherUser
    LocalForward 12345 otherHost:12345
    RequestTTY no
    ExitOnForwardFailure yes
    ControlMaster auto
    ControlPath ~/.ssh/cm_sockets/%r@%h:%p

Note that the command line -L option is handled with the LocalForward keyword, and the Control{Master,Path} lines are included to make sure you have control after the tunnel is established.

Then, you might modify your bash script to something like this:

#!/bin/bash

if ! ssh -f -N otherHosttunnel; then
    echo "ERROR: couldn't start tunnel." >&2
    exit 1
else
    synergyc localhost
    ssh -O exit otherHosttunnel
fi

The -f option backgrounds the tunnel, leaving a socket on your ControlPath to close the tunnel later. If the ssh fails (which it might due to a network error or ExitOnForwardFailure), there's no need to exit the tunnel, but if it did not fail (else), synergyc is launched and then the tunnel is closed after it exits.

You might also want to look in to whether the SSH option LocalCommand could be used to launch synergyc from right within your ssh config file.

4
  • 2
    @GeorgiosPolitis, Thanks! I would not object! :-) Alas, my answer came 5 years after the question was asked. Perhaps more people will up-vote this over time.
    – ghoti
    Commented Nov 20, 2014 at 15:00
  • @ghoti - I think this answer may also suffer from TL;DR syndrome. I'd suggest reworking your answer to move the "Bringing this back to your use case" section up to the top, perhaps just under the 2nd paragraph (showing this is a better way to go)
    – Randall
    Commented Dec 6, 2016 at 20:55
  • Additionally, while you certainly can have all those options in the .ssh/config file, as a minimalist approach to the OP's question, only ControlMaster and ControlPath are needed in the config. It just changes the -O check for the OP to ssh -l otherUser -O check OtherHost
    – Randall
    Commented Dec 6, 2016 at 21:03
  • 5
    @Randall, I disagree. While the original question would have been served by a minimalist answer addressing just the Synergy client and server, my answer was written almost 5 years after the OP last logged in. The use case is unimportant, as it won't help the OP. A question like this serves the community better by providing something more generic, from which a wider audience can derive benefit.
    – ghoti
    Commented Dec 28, 2016 at 0:11
74

Quick summary: Will not work.

My first idea is that you need to start the processes in the background to get their PIDs with $!.

A pattern like

some_program &
some_pid=$!
wait $some_pid

might do what you need... except that then ssh won't be in the foreground to ask for passphrases any more.

Well then, you might need something different after all. ssh -f probably spawns a new process your shell can never know from invoking it anyway. Ideally, ssh itself would offer a way to write its PID into some file.

4
  • Yes, right. He can't make a process fork off itself out of the control of the shell, and expect a filled $!
    – TheBonsai
    Commented Dec 1, 2009 at 5:47
  • 10
    As mentioned by author, it doesn't work with ssh -f, because it spawns a new process. I don't know, why people keep upvoting this. Commented Mar 5, 2013 at 15:23
  • 38
    I imagine it's because people (like me) google for how to get the PID of the last started process in bash, find this page, skip down to the first answer, and go "Oh right, $!, I forgot". Then we upvote and leave not knowing or caring what the author wanted. Commented Dec 2, 2013 at 23:39
  • 2
    @JoePinsonault I blame the question's title.
    – Gray Fox
    Commented Aug 4, 2014 at 9:47
21

just came across this thread and wanted to mention the "pidof" linux utility:

$ pidof init
1
2
  • So this looks for all processes called "init" or the first process, or what?
    – rogerdpack
    Commented Jun 18, 2013 at 23:12
  • 2
    man: "Pidof finds the process id's (pids) of the named programs". By default it will look for all matching processes, but you can use "-s" option to select just the first one matched. Another useful option is "-x" (scripts too) which will look also for pids of shells running named scripts. And the exit code tells you if the utility has found anything at all.
    – zrathen
    Commented Jul 22, 2013 at 9:38
16

You can use lsof to show the pid of the process listening to port 12345 on localhost:

lsof -t -i @localhost:12345 -sTCP:listen

Examples:

PID=$(lsof -t -i @localhost:12345 -sTCP:listen)
lsof -t -i @localhost:12345 -sTCP:listen >/dev/null && echo "Port in use"
0
13

well i dont want to add an & at the end of the commands as the connection will die if the console wintow is closed ... so i ended up with an ps-grep-awk-sed-combo

ssh -f -N -L localhost:12345:otherHost:12345   otherUser@otherHost
echo `ps aux | grep -F 'ssh -f -N -L localhost' | grep -v -F 'grep' | awk '{ print $2 }'` > /tmp/synergyPIDs/ssh
synergyc localhost
echo `ps aux | grep -F 'synergyc localhost' | grep -v -F 'grep' | awk '{ print $2 }'` > /tmp/synergyPIDs/synergy

(you could integrate grep into awk, but im too lazy now)

1
  • 1
    Just want to add that I think you could use something like pgrep -f -x 'ssh -f -N -L localhost', if you have pgrep available. Commented Mar 25, 2011 at 14:49
9

You can drop the -f, which makes it run it in background, then run it with eval and force it to the background yourself.

You can then grab the pid. Make sure to put the & within the eval statement.

eval "ssh -N -L localhost:12345:otherHost:12345 otherUser@OtherHost & " 
tunnelpid=$!
2
  • 1
    This solution is actually what I wanted, when got to this question in order to use more than one ssh tunnel at a time. But if you use it, don't forget to add sleep 5 after eval to give ssh 5 seconds to establish connection Commented Mar 5, 2013 at 15:21
  • 8
    Sorry, why do you need the eval again? Wouldn't $! simply grab the last background process? thx
    – inger
    Commented Nov 9, 2013 at 20:38
4

Another option is to use pgrep to find the PID of the newest ssh process

ssh -fNTL 8073:localhost:873 otherUser@OtherHost
tunnelPID=$(pgrep -n -x ssh)
synergyc localhost
kill -HUP $tunnelPID
4

This is more of a special case for synergyc (and most other programs that try to daemonize themselves). Using $! would work, except that synergyc does a clone() syscall during execution that will give it a new PID other than the one that bash thought it has. If you want to get around this so that you can use $!, then you can tell synergyc to stay in the forground and then background it.

synergyc -f -n mydesktop remoteip &
synergypid=$!

synergyc also does a few other things like autorestart that you may want to turn off if you are trying to manage it.

3

Based on the very good answer of @ghoti, here is a simpler script (for testing) utilising the SSH control sockets without the need of extra configuration:

#!/bin/bash
if ssh -fN -MS /tmp/mysocket -L localhost:12345:otherHost:12345 otherUser@otherHost; then
    synergyc localhost
    ssh -S /tmp/mysocket -O exit otherHost
fi

synergyc will be only started if tunnel has been established successfully, which itself will be closed as soon as synergyc returns. Albeit the solution lacks proper error reporting.

2

You could look out for the ssh proceess that is bound to your local port, using this line:

netstat -tpln | grep 127\.0\.0\.1:12345 | awk '{print $7}' | sed 's#/.*##'

It returns the PID of the process using port 12345/TCP on localhost. So you don't have to filter all ssh results from ps.

If you just need to check, if that port is bound, use:

netstat -tln | grep 127\.0\.0\.1:12345 >/dev/null 2>&1

Returns 1 if none bound or 0 if someone is listening to this port.

1

There are many interesting answers here, but nobody mentioned that the manpage of SSH does describe this exact case! (see TCP FORWARDING section). And the solution they offer is much simpler:

ssh -fL 12345:localhost:12345 user@remoteserver sleep 10
synergyc localhost

Now in details:

  1. First we start SSH with a tunnel; thanks to -f it will initiate the connection and only then fork to background (unlike solutions with ssh ... &; pid=$! where ssh is sent to background and next command is executed before the tunnel is created). On the remote machine it will run sleep 10 which will wait 10 seconds and then end.
  2. Within 10 seconds, we should start our desired command, in this case synergyc localhost. It will connect to the tunnel and SSH will then know that the tunnel is in use.
  3. After 10 seconds pass, sleep 10 command will finish. But the tunnel is still in use by synergyc, so SSH will not close the underlying connection until the tunnel is released (i.e. until synergyc closes socket).
  4. When synergyc is closed, it will release the tunnel, and SSH in turn will terminate itself, closing a connection.

The only downside of this approach is that if the program we use will close and re-open connection for some reason then SSH will close the tunnel right after connection is closed, and the program won't be able to reconnect. If this is an issue then you should use an approach described in @doak's answer which uses control socket to properly terminate SSH connection and uses -f to make sure tunnel is created when SSH forks to the background.

1
  • This is a great solution! Very clean and simple, and doesn't involve any global configuration. Commented Oct 16, 2021 at 15:40
0

As I'm a noob, here is a solution that is probably an overkill, but works pretty well: use tmux

  1. Create your tunnel session in tmux:
tmux new -s my_tunnel ssh :8282:host02:22 -N user01@host01

If you set-up an ssh key, you can even add -d to the command to tell tmux to detach immediately afterward. (if you have a password, then you'll need to detach manually using Ctrl+b followed by d)

  1. your tunnel runs in the background with a human-readable name linked to the tmux session : my_tunnel that you can log to as follows:
tmux a -t my_tunnel

you can connect through it using : ssh user01@host01 -p 8282 or using any port forwarding to host01:8282 from your rooter.

  1. you can kill it as simply as:
tmux kill-session -t my_tunnel

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.