enable remote ssh connection

Author: sfc-gh-zzhu

src/snowflake/cli/_plugins/remote/commands.py

@@ -69,6 +69,16 @@ def start(
         "--image",
         help="Custom image to use (can be full path like 'repo/image:tag' or just tag like '1.7.1')",
     ),
+    ssh: bool = typer.Option(
+        False,
+        "--ssh",
+        help="Set up SSH configuration for connecting to the remote environment. This is a blocking command that keeps SSH connections alive.",
+    ),
+    no_ssh_key: bool = typer.Option(
+        False,
+        "--no-ssh-key",
+        help="When used with --ssh, skip SSH key generation and use token-only authentication (less secure)",
+    ),
     **options,
 ) -> None:
     """
@@ -83,9 +93,16 @@ def start(
     - Resume existing service: snow remote start myproject
     - Create new service: snow remote start --compute-pool my_pool
     - Create named service: snow remote start myproject --compute-pool my_pool
+    - Start with SSH setup: snow remote start myproject --ssh
+    - Start with SSH (no key): snow remote start myproject --ssh --no-ssh-key
 
     The --compute-pool parameter is only required when creating a new service. For resuming
     existing services, the compute pool is not needed.
+
+    SSH Options:
+    - Use --ssh to set up SSH configuration for secure terminal access
+    - Use --no-ssh-key with --ssh for token-only authentication (less secure)
+    - SSH setup is a blocking command that continuously refreshes authentication tokens
     """
     try:
         manager = RemoteManager()
@@ -96,6 +113,9 @@ def start(
             external_access=eai_name,
             stage=stage,
             image=image,
+            generate_ssh_key=(
+                ssh and not no_ssh_key
+            ),  # Only generate SSH key if --ssh and not --no-ssh-key
         )
 
         # Display appropriate success message based on what happened
@@ -132,6 +152,10 @@ def start(
         if image:
             log.debug("Using custom image: %s", image)
 
+        # Handle SSH setup if requested - this is a blocking operation
+        if ssh:
+            manager.setup_ssh_connection(service_name)
+
     except ValueError as e:
         cc.warning(f"Error: {e}")
         raise typer.Exit(code=1)

src/snowflake/cli/_plugins/remote/constants.py

@@ -47,7 +47,7 @@ class ComputeResources:
 ENABLE_REMOTE_DEV_ENV_VAR = "IS_REMOTE_DEV"
 MEMORY_VOLUME_NAME = "dshm"
 USER_WORKSPACE_VOLUME_NAME = "user-workspace"
-USER_WORKSPACE_VOLUME_MOUNT_PATH = "/root/workspace"
+USER_WORKSPACE_VOLUME_MOUNT_PATH = "/root/user-default"
 USER_VSCODE_DATA_VOLUME_NAME = "user-vscode-data"
 USER_VSCODE_DATA_VOLUME_MOUNT_PATH = "/root/.vscode-server"
 
@@ -84,7 +84,7 @@ class ServiceResult(enum.Enum):
 DEFAULT_IMAGE_REPO = "/snowflake/images/snowflake_images"
 DEFAULT_IMAGE_CPU = "st_plat/runtime/x86/runtime_image/snowbooks"
 DEFAULT_IMAGE_GPU = "st_plat/runtime/x86/generic_gpu/runtime_image/snowbooks"
-DEFAULT_IMAGE_TAG = "1.7.1"
+DEFAULT_IMAGE_TAG = "1.7.2"
 
 # Percent of container memory to allocate for /dev/shm volume
 MEMORY_VOLUME_SIZE = 0.3
@@ -98,6 +98,16 @@ class ServiceResult(enum.Enum):
 WEBSOCKET_SSH_ENDPOINT_NAME = "websocket-ssh"
 RAY_DASHBOARD_ENDPOINT_NAME = "ray-dashboard"
 
+# SSH Configuration
+DEFAULT_SSH_REFRESH_INTERVAL = 300  # 5 minutes
+SSH_RETRY_INTERVAL = 30  # 30 seconds
+SSH_COUNTDOWN_INTERVAL = 30  # Show countdown every 30 seconds
+SSH_DIR_NAME = ".ssh"
+SSH_KEY_SUBDIR_NAME = "snowflake-remote"
+SSH_CONFIG_FILENAME = "config"
+SSH_DEFAULT_PORT = 22
+SSH_DEFAULT_USER = "root"
+
 # ML runtime health check settings
 ML_RUNTIME_HEALTH_CHECK_PORT = "5001"
 ENABLE_HEALTH_CHECKS = "false"