Letting another computer in

A published instance accepts keys only. Passwords are turned off before anything is published.

MSL makes one key for the Mac doing the publishing, so you can get in straight away. That key does not survive a restart, on purpose — it is stored outside your home folder where no instance can read it, and that place is cleared when the Mac restarts.

For any computer you actually intend to use, authorize its key instead.

On the other computer#

Get its public key. If it has none:

ssh-keygen -t ed25519
cat ~/.ssh/id_ed25519.pub

That prints one line starting ssh-ed25519. That line is public — it is safe to email, paste in chat, or put in a ticket.

On this Mac#

msl public authorize Ubuntu ~/their-laptop.pub work-laptop

Or paste it into the app: Reach this from anywhere ▸ Let another computer in…

Who can get in#

msl public keys Ubuntu

Each line shows a name and a fingerprint. Remove one with:

msl public deauthorize Ubuntu work-laptop

This is also how you'd run an instance for a team: one key each, each removable on its own.