name: VPS SSH Bootstrap (Desktop Claude) description: How Desktop Claude sandbox re-connects to VPS 31.131.26.203 after sandbox reset. Private key lives in Windows Credential Manager. type: reference originSessionId: b97c6a13-9f51-49ee-b3ee-49ffdfcc2a3b

Connection details

• Host: root@31.131.26.203 (HOSTiQ kVPS70 Rotterdam)
• Hostname: hqnl0398037.online-vm.com
• Key in use: ed25519, fingerprint SHA256:h2WYv5Xf1L8vzm4Ixa9Gh6+DGAmIPOdBv+/WavO7E+8, comment claude-desktop-2026-04-23
• authorized_keys restriction: from="193.93.78.10" (sandbox egress IP, also whitelisted in fail2ban)
• Rotation due: 2027-04-23

Private key storage

Not on disk. Stored in Windows Credential Manager as generic credential:

• Target: AG-VPS-SSH-Key-Claude-Desktop
• User field: claude-desktop
• Password field: base64(UTF-8(private key file contents))
• Encrypted by DPAPI under Serhii's Windows account.

Bootstrap in a fresh sandbox session

Sandbox is ephemeral — ~/.ssh/ is empty on each start. Procedure:

1. Ask Serhii to run restore-to-sandbox.ps1 (in AG DEV HUB/_ssh-bootstrap-DELETE-AFTER-IMPORT/, kept after initial import). Script reads credential via CredRead P/Invoke, base64-decodes, writes plaintext to AG DEV HUB/.sandbox-ssh/id_ed25519 (hidden dir).
2. In sandbox: cp "/sessions/great-beautiful-mccarthy/mnt/AG DEV HUB/.sandbox-ssh/id_ed25519" ~/.ssh/id_ed25519 && chmod 600 ~/.ssh/id_ed25519
3. Test: ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/id_ed25519 root@31.131.26.203 hostname
4. Optionally have Serhii delete AG DEV HUB/.sandbox-ssh/id_ed25519 once sandbox has the copy.

Server-side registry

• Public key + metadata stored at /srv/passepartout/ssh/claude-desktop-2026-04-23.pub (+ .meta) on the VPS.
• Decisions log + agents_inventory.md on VPS track the key rotation.

When to re-issue

• Rotation deadline (2027-04-23).
• If sandbox egress IP changes (currently 193.93.78.10 — Serhii's home IP).
• If Credential Manager is lost (reinstall, new machine) — regenerate and re-register from scratch.