SSH Workflows
Built-in Terminal Actions: Practical zsh Examples for Remote Mac Admins
HearthGate Terminal Actions turn a trusted SSH session into a guided Mac admin surface. Here are practical zsh examples for moving files, checking logs, finding ports, inspecting storage, and deciding when the screen is actually needed.
At a glance
- Terminal Actions are not a separate terminal app. They are a guided command palette inside a trusted HearthGate SSH session.
- The workflow is intentionally review-first: choose an action, fill the blanks, then decide whether to run the generated command.
- Many everyday remote support jobs need a command, not a screen: move a file, inspect disk space, tail a log, find a process, or check whether a port is listening.
- Keep routine screen-sharing keys VNC-only. Use a separate full-access key when terminal work, SFTP, SCP, rsync, port forwarding, or Terminal Actions are part of the job.
Quick comparison
Eight Mac remote-access methods at a glance
| Everyday task | Terminal Action idea | Example command | Why it beats opening the screen |
|---|---|---|---|
| Move a downloaded file into place | Move a file | mv ~/Downloads/report.pdf ~/Documents/Reports/ | Fast, precise, and no remote desktop latency. |
| Copy a project folder before testing | Copy a file or folder | cp -R ~/Projects/app ~/Projects/app-backup | You can make a quick safety copy before changing anything. |
| Create a clean work folder | Create a folder | mkdir -p ~/Work/client-a/logs | Useful before receiving files, exporting logs, or running a script. |
| Find a file by name | Find files by name | find ~/Documents -iname "*invoice*" | Search the Mac directly instead of hunting through Finder over VNC. |
| Watch a changing log | Tail a log file | tail -f ~/Library/Logs/example.log | The terminal shows state as it changes, without dragging a screen viewer into the workflow. |
| Check storage pressure | Free disk space | df -h | A single command answers the question before you open System Settings. |
| See what is listening | Listening ports | lsof -nP -iTCP -sTCP:LISTEN | Perfect for development servers, dashboards, local AI tools, and stuck ports. |
| Check whether a host responds | Ping a host | ping -c 4 example.com | A quick network sanity check before blaming the app. |
On smaller screens, swipe horizontally to compare every column.
The point is not to replace your terminal
You can still use Terminal, iTerm2, Windows PowerShell, a Linux shell, FreeBSD, or any standard SSH client. HearthGate Terminal Actions are different: they put a curated command palette inside the SSH session you already opened.
That matters when you are supporting a Mac you do not want to treat like a random shell playground. The action picker gives you common Mac admin tasks without forcing you to remember every flag at the moment of stress.
The slash prompt model
Connect with a full-access HearthGate key, press / on an empty SSH prompt, choose an action, fill the blanks, and review the generated command. HearthGate does not auto-run it for you. The command lands on the prompt, and you decide whether to press Enter.
This keeps the experience practical without turning remote administration into autopilot. A useful command is suggested; the operator remains responsible.
- Press / on an empty SSH prompt.
- Pick a task such as Move a file, Tail a log file, Free disk space, Listening ports, DNS lookup, or Keep Mac awake.
- Fill in the required path, host, port, or duration.
- Review the command before running it.
- Use VNC only when the problem is visual.
Everyday examples that save a screen session
A surprising amount of remote support starts with small, boring questions: where did the file go, why is the disk full, is a local server running, what changed in the log, which process is eating memory, can the Mac reach the network?
Those questions are often better answered from SSH than from a screen viewer. Terminal Actions make that SSH-first habit easier for operators who know what they need but do not want to keep a private cheat sheet open.
A good boundary still matters
Terminal Actions are for trusted full-access keys. A routine VNC support key should stay screen-only. That split is the security lesson: not every person who can see the screen should automatically receive shell, SFTP, SCP, rsync, or port-forwarding power.
This is where HearthGate fits the work. The Mac can expose a VNC-only path for visual help, a full SSH path for an admin, and a server-level SSH hardening floor underneath both.
When to open the viewer anyway
The terminal is not always enough. If the job is a login prompt, a System Settings dialog, an app permission prompt, a GUI-only installer, or a visual check, open the VNC viewer. The point is not terminal purity. The point is using the narrowest tool that solves the problem.
That is the HearthGate rhythm: SSH first when state can be inspected by command, VNC when the Mac needs eyes and hands.
Continue by need
Turn the comparison into a working setup
Built-in Terminal Actions
The product help page for the SSH command palette and Terminal + tunnel packages.
Open guideSSH Hardening
How HearthGate separates VNC-only keys, full-access keys, and server-level SSH lockdown.
Open guideSSH-first Mac remote access
Why the terminal should often come before the screen.
Open guideWant the Mac-side gateway for this model?
HearthGate packages secure VNC over SSH, restricted keys, firewall VNC lockdown, connection bundles, and session visibility into one native Mac app.
Explore HearthGate