#!/bin/sh
set -e
_TEMP_DIR_=$(mktemp -d)
cd "$_TEMP_DIR_"
trap 'rm -rf "$_TEMP_DIR_"' EXIT
host=${1:-borges}
ssh-keygen -F "${host#*@}" | grep -v '^#' > ssh_known_hosts 2>/dev/null
touch ssh_known_hosts.stamp -r ssh_known_hosts

ssh()
{
    command ssh \
        -F /dev/null \
        -o GlobalKnownHostsFile=$PWD/ssh_known_hosts \
        -o UserKnownHostsFile=$PWD/ssh_known_hosts \
        -o UpdateHostKeys=yes \
        -o PasswordAuthentication=no \
        -o StrictHostKeyChecking=yes \
        "$@"
}

have=ecdsa-sha2-nistp256
want=rsa-sha2-256
ssh -q -n "$host" || true

cat ssh_known_hosts