saaros/paramiko — comment on commit f83510c1c5a337cb8c0c661f2aeae911c65bfd97
File:  line 0
By saaros:

I use it in a software deployment tool which provisions new virtual machines with libvirt. I can set MAC addresses for the systems I deploy from which I can derive their autoconfigured IPv6 addresses, IPv4 addresses are set by DHCP and since I don't necessarily have IPv6 connectivity from the deployer host the tool creates a Paramiko ssh connection to the hypervisor nodes, opens connections to the new virtual machine with open_channel("direct-tcpip") and uses those tunnels with connect_socket() to connect to the newly created virtual machine to look up their IPv4 addresses. The component doing this is a libvirt module for https://github.com/melor/poni and will be published soon.

I think host key checking for already connected sockets must be optional, there's no way for Paramiko to know where the socket is connected and which name it should use for checking the key.