EXTENSIONS

exe.dev VM lifecycle model. Wraps the exe.dev HTTPS API to manage VMs as

Comprehensive libvirt/virsh management — VMs, networks, storage pools,

Drive a herdr terminal-agent runtime from swamp.

FreeBSD system primitives via SSH — pkg(8) package management, sysrc(8) rc.conf key-value management, service(8) enable/disable + lifecycle, kldload(8)/kldstat(8) kernel module management with /boot/loader.conf persistence, and pw(8) user/group management.

Manage an illumos/Helios host over SSH from swamp.

Run commands, copy files, and open port forwards across a declared set of

General-purpose SSH operations — exec, upload, wait for connection (https://github.com/keeb/swamp-ssh)

Manage a Cisco IOS switch (e.g. Catalyst 2960) over SSH after console bootstrap — capture running-config and device facts, run verification commands, and push idempotent baselines: secure-access hardening, SNMPv2c, and Layer-3/VLAN/access-port config. Shells out to OpenSSH; vault-resolved credentials; live reachability pre-flight check.

Swamp-native OpenSSH CA lifecycle management for every environment: one OpenSSH CA keypair per model, host/user certificate issuance, @cert-authority/TrustedUserCAKeys generation, KRL generation, revocation data, and inventory reporting.

Reach inside a systemd-nspawn machine over SSH+nsenter: snapshot state, run an argv, read/write files atomically (with backup), and restart/inspect units — a reusable container transport.

Manage a NETGEAR M4250 (AV Line) managed switch over its SSH CLI — capture running-config and device facts, run verification show-commands (VLANs, ports, PoE, MAC table, LLDP, IGMP snooping), apply IGMP-querier and multicast-containment config, and force/restore a port's speed-duplex. Prompt-paced I/O for the M4250's interactive shell, vault-resolved credentials, shells out to OpenSSH.

Tailscale TCP serve rule management via SSH — sync, set, unset

Host-to-host VM disk migration primitives for swamp.

Sync a Ruckus Unleashed wireless controller into swamp as queryable data. The extension SSHes into the Unleashed master, drives its interactive CLI through a prompt-matching state machine (Unleashed accepts SSH `none` auth and prompts for app-level login on the remote pty, so no `sshpass` or pty wrapper is required), and writes one resource per controller, access point, and WLAN.

SSH-based configuration management for Linux and macOS.