A streamlined solution for accessing Kaggle computational resources via SSH and VS Code, powered by Zrok for secure tunneling.
KaggleLink allows you to connect to Kaggle environments via SSH, enabling you to leverage Kaggle's computational resources
To use KaggleLink, you need:
- Zrok Token: A Zrok token is essential for establishing the secure tunnel. Create an account at myZrok.io to obtain your token. Ensure your account is on the Starter plan to utilize NetFoundry's public Zrok instance, which offers 2 environment connections (one for your local machine, one for the Kaggle instance).
- Public SSH Key: Your public SSH key needs to be accessible via a URL, either from a GitHub repository or another public file hosting service.
Execute the following one-line command in a Kaggle notebook cell. This script will set up Zrok and SSH on your Kaggle instance.
!curl -sS https://bhdai.github.io/setup | bash -s -- -k <public_key_url> -t <zrok_token>Note
Replace <public_key_url> with the URL of your public SSH key file and <zrok_token> with your Zrok token.
Wait for the setup to complete. You should see output similar to this upon successful configuration:
Tip
Avoiding Session Timeouts: Kaggle's interactive notebook sessions have idle timeouts. For long-running remote development, use the "Save & Run All" feature by clicking the Save Version button (top right) and selecting "Save". This runs your notebook as a background job, avoiding timeout interruptions. You can still get the zrok share token from the log screen(click active event at bottom left -> Open Logs in Viewer)
-
Generate an SSH key pair on your local machine (if you haven't already). Use a descriptive filename, for example:
ssh-keygen -t rsa -b 4096 -C "kaggle_remote_ssh" -f ~/.ssh/kaggle_rsa
-
Upload your public key (
~/.ssh/kaggle_rsa.pub) to a public GitHub repository or a similar public file hosting service. -
Obtain the Raw URL: Navigate to your uploaded public key file in your repository and click the "Raw" button.
Copy the URL from your browser's address bar. It typically looks like
https://raw.githubusercontent.com/<username>/<repo_name>/refs/heads/main/<file_path>.
- If you don't have one, create your Zrok account at myZrok.io.
- Go to the billing page and ensure your plan is set to Starter.
- Create a new token.
- Visit https://api-v1.zrok.io to retrieve and manage your Zrok tokens.
For automated pipelines or power users, you can configure KaggleLink using environment variables instead of CLI flags.
| Variable | CLI Equivalent | Description |
|---|---|---|
KAGGLELINK_KEYS_URL |
-k |
URL to your public SSH key |
KAGGLELINK_TOKEN |
-t |
Your Zrok token |
Note
CLI arguments (-k, -t) always override environment variables if both are present.
The most secure way to pass these credentials is using Kaggle Secrets.
- Add your secrets in the Kaggle notebook sidebar (Add-ons -> Secrets).
- Use the following Python snippet in a cell before running the setup script:
from kaggle_secrets import UserSecretsClient
import os
user_secrets = UserSecretsClient()
# Set environment variables from secrets
# Ensure you have added 'KAGGLELINK_TOKEN' and 'KAGGLELINK_KEYS_URL' (optional) to your secrets
os.environ['KAGGLELINK_TOKEN'] = user_secrets.get_secret("KAGGLELINK_TOKEN")
# You can also set the URL directly if it's public and not stored as a secret
os.environ['KAGGLELINK_KEYS_URL'] = "https://raw.githubusercontent.com/your/repo/main/key.pub"Once the environment variables are set, you can run the setup script without arguments:
!curl -sS https://bhdai.github.io/setup | bashAfter completing the Kaggle setup, your Kaggle instance is ready for connection. The script will output a Zrok private token at the end which you'll use to connect from your local machine.
-
Install Zrok locally: Follow the official Zrok installation guide. For Arch-based distributions, you can use:
yay -S zrok-bin
-
Enable Zrok: Enable Zrok on your local machine using your personal Zrok token:
zrok enable <your_personal_zrok_token>
-
Access the private tunnel: Use the Zrok
private_tokenobtained from the Kaggle setup output to establish the connection:zrok access private <the_private_token_from_kaggle_setup>
This command will open a dashboard in your terminal, displaying your connection details, including a local address like
127.0.0.1:9191.
Connect to your Kaggle instance via SSH using the local address and port provided by Zrok (e.g., 127.0.0.1:9191).
ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ~/.ssh/kaggle_rsa -p 9191 root@127.0.0.1Note
The port (e.g., 9191) generally remains consistent across sessions, so you typically won't need to adjust it for each new instance.
To simplify future connections, add the following configuration to your ~/.ssh/config file:
Host Kaggle
HostName 127.0.0.1
UserKnownHostsFile /dev/null
StrictHostKeyChecking no
IdentityFile ~/.ssh/kaggle_rsa
Port 9191
User root
With this configuration, you can simply use ssh Kaggle to connect.
Transfer files between your local machine and Kaggle instance using rsync:
# From local to remote
rsync -e "ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ~/.ssh/kaggle_rsa -p 9191" <path_to_local_file> root@127.0.0.1:<remote_destination_path>
# or if you have you SSH config set up (see above)
rsync -avz <path_to_local_file> Kaggle:<remote_destination_path>
# From remote to local
rsync -e "ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ~/.ssh/kaggle_rsa -p 9191" root@127.0.0.1:<path_to_remote_file> <local_destination_path>
# or if you have you SSH config set up (see above)
rsync -avz Kaggle:<path_to_remote_file> <local_destination_path>Important
The Zrok Starter plan limits you to two environment connections. While the script automatically releases the Kaggle instance's connection upon shutdown, it's good practice to verify your active connections at https://api-v1.zrok.io/ before rerunning the script, ensuring your local machine is the primary active connection.
We welcome contributions to KaggleLink! If you're interested in improving this project, please follow these steps:
- Fork the repository.
- Create a new branch for your feature or bug fix (
git checkout -b feature/your-feature-nameorbugfix/issue-description). - Make your changes, adhering to the existing coding style and standards.
- Write and run tests to ensure your changes work as expected and don't introduce regressions.
- Commit your changes with clear and concise commit messages.
- Push your branch to your forked repository.
- Open a Pull Request to the main branch, providing a detailed description of your changes.
This project is licensed under the Apache License 2.0 - see the LICENSE file for details.


