Overview#

This guide provides instructions for accessing a shell on your virtual machines (VMs) using two methods: traditional SSH and the Web Terminal feature embedded in the panel. The Web Terminal is the recommended approach as it offers enhanced security and ease of use.

SSH (Secure Shell) is a protocol used to securely connect to remote servers and manage them over an unsecured network. It allows users to execute commands on remote machines, transfer files, and manage network infrastructure.

The Web Terminal is an embedded terminal feature within the panel that allows users to access a shell session without needing to expose port 22. It uses WebSocket technology to create a secure connection through the agent.

Before accessing your VMs, ensure you have the following prerequisites:

• Access to the panel with appropriate permissions.
• For traditional SSH, an SSH client installed on your local machine.

Setup Instructions#

Connecting via SSH#

1. Add your SSH key in the panel: Go to Settings → Profile → SSH keys.
2. Use the following command to SSH into a specific scope:

gritivactl scope shell my-app

3. For multiplexing, use:

gritivactl scope shell my-app --tmux

### Using the Web Terminal
1. Click on the desired VM in the panel.
2. Select **Open Terminal** from the top-right corner.
3. A WebSocket-backed shell session will open, allowing you to interact with your VM without needing to expose port 22.

If you encounter issues while connecting:
- Ensure your SSH key is correctly added and authorized.
- Check your network settings to ensure there are no firewall rules blocking the connection.
- For Web Terminal, verify that your browser supports WebSocket connections.

### FAQs

**Q: What are the limitations of the Web Terminal?**  
A: The Web Terminal session is limited to a maximum duration of 4 hours. Traditional SSH sessions can last as long as your client allows.

**Q: Why should I prefer the Web Terminal?**  
A: The Web Terminal does not require inbound ports on the host, is audit-logged in the panel, supports MFA, and offers session recording for Pro+ users. It also works seamlessly through a Cloudflare tunnel without IP whitelisting.