Cyberduck Mountain Duck CLI

Version 95 (modified by dkocher, on Aug 31, 2018 at 7:36:15 AM) (diff)


Cyberduck Help / Howto / Command Line Interface (CLI)

Cyberduck with a command line interface (CLI) is available for Mac, Windows & Linux. It is installed as duck.




Available as a Homebrew package. Use

brew install duck

to install.


(Note: The port file is maintained by a third party)

Use sudo port install duck to install.

Snaphsot Builds

brew install iterate-ch/cyberduck/duck


Download the latest installer package.



Available as a Chocolatey package. Use

choco install duck

to install.

MSI Installer

Download the latest setup.


RPM Package Repository

To add the duck repository to your system you need to put a file duck.repo with following content into /etc/yum.repos.d/.

Snaphsot Builds

Copy and paste

echo -e "[duck-nightly]\n\
gpgcheck=0" | sudo tee /etc/yum.repos.d/duck-snapshot.repo > /dev/null

to add the configuration.

Stable Builds
echo -e "[duck-stable]\n\
gpgcheck=0" | sudo tee /etc/yum.repos.d/duck-stable.repo > /dev/null

To install Cyberduck CLI use

sudo yum install duck

DEB Package Repository

Add the duck repositories to your /etc/apt/sources.list manually:

deb nightly main
deb stable main

or using

echo -e "deb stable main" | sudo tee /etc/apt/sources.list.d/cyberduck.list > /dev/null

You need to download the GPG public key from to verify the integrity of the packages:

sudo apt-key adv --keyserver --recv-keys FE7097963FEFBE72

Synchronize the repository using

sudo apt-get update

To install or upgrade Cyberduck CLI use

sudo apt-get install duck

Note: You may get a conflict with another package named duck. As a workaround, install with a specific version number like sudo apt-get install duck=

Arch Linux Package

Manual installation

Packages can also be found for download.


Run --help to get the option screen.

Usage:duck [options...]

URLs must be fully qualified. Paths can either denote a remote file (ftps:// or folder (ftps:// with a trailing slash. You can reference files
relative to your home directory with /~ (ftps://
Supported protocols
Windows Azure Storage
Backblaze B2 Cloud Storage
DRACOON (Email Address)
FTP (File Transfer Protocol)
Google Drive
Google Cloud Storage
hubiC (OVH)
Microsoft OneDrive
Amazon S3
DigitalOcean Spaces (nyc3)
Oracle Cloud Infrastructure
SFTP (SSH File Transfer Protocol)
Spectra S3 (HTTPS)
Rackspace Cloud Files (US)
Swift (OpenStack Object Storage)

You can install additional connection profiles in ~/Library/Group Containers/ Support/duck/Profiles

    --application <path>                  External editor application
 -c,--mkdir <url>                         Make directory
    --chmod <<mode>>                      Set explicit permission from octal mode value for uploaded file
    --copy <url> <url>                    Copy between servers
 -D,--delete <url>                        Delete
 -d,--download <url> <[file]>             Download file or folder. Denote a folder with a trailing '/'
 -e,--existing <action>                   Transfer action for existing files
                                          Options for downloads and uploads:
                                          	Resume	Append existing files (resume)
                                          	Overwrite	Overwrite all files (overwrite)
                                          	Rename	Rename transferred files with a timestamp appended to the filename (similar)
                                          	Rename existing	Rename existing files with timestamp appended to filename (rename)
                                          	Skip	Skip transfer of files that already exist (skip)
                                          	Compare	Skip files that match size, modification date or checksum (compare)
                                          	Cancel	 (cancel)
                                          Options for synchronize:
                                          	Download	Download changed and missing files (download)
                                          	Upload	Upload changed and missing files (upload)
                                          	Mirror	Download and Upload (mirror)
                                          	Cancel	 (cancel)
    --edit <url>                          Edit file in external editor
 -h,--help                                Print this help
 -i,--identity <private key file>         Selects a file from which the identity (private key) for public key authentication is read
 -L,--longlist <url>                      Long list format with modification date and permission mask
 -l,--list <url>                          List files in remote folder
    --nokeychain                          Do not save passwords in keychain
 -P,--preserve                            Preserve permissions and modification date for transferred files
 -p,--password <password or secret key>   Password
    --parallel <connections>              Number of concurrent connections to use for transfers
 -q,--quiet                               Suppress progress messages
 -r,--retry <count>                       Retry failed connection attempts
    --region <location>                   Location of bucket or container
    --synchronize <url> <directory>       Synchronize folders
    --throttle <bytes per second>         Throttle bandwidth
 -u,--username <username or access key>   Username
    --udt                                 Use UDT protocol if applicable
    --upload <url> <file>                 Upload file or folder recursively
 -V,--version                             Show version number and quit
 -v,--verbose                             Print transcript
 -y,--assumeyes                           Assume yes for all prompts


The <url> argument for --copy, --download, --upload and --synchronize must be fully qualified URIs with protocol, hostname and absolute remote path such as ftp://<hostname>/<folder>/<file> for a file or ftp://<hostname>/<folder>/ for a directory. For cloud storage providers, reference the target container (aka bucket) name in the URI like s3://bucketname/key.

Generic options


Retry requests with I/O failures once per default. Useful on connection timeout or latency issues.


Print protocol transcript for requests and responses. This includes the HTTP headers.


You can pass username as part of the URI prepending to the hostname with username@host. Alternatively use the --username option. You can give the password with the --password option or you will be prompted before the connection is opened by the program if no password matching the host is found in your login keychain (OS X) or user configuration shared with Cyberduck (Windows).

Private Key

When connecting with SFTP you can give a file path to a private key with --identity for use with public key authentication.

Tenant Name

When connecting with OpenStack Swift you can set the tenant name (OpenStack Identity Service, Keystone 2.0) or project (OpenStack Identity Service, Keystone 3.0) with --username <tenant>:<user>.

Downloads with --download

Glob pattern support for selecting files to transfer

You can transfer multiple files with a single command using a glob pattern for filename inclusion such as duck --download ftps://<hostname>/directory/*.css .

Uploads with --upload

Glob pattern support for selecting files to transfer

If your shell supports glob expansion you can use a wildcard pattern to select files for upload like duck --upload ftps://<hostname>/directory/ ~/*.jpg.

Use of ~

You can use the tilde to abbreviate the remote path pointing to the remote home folder as in s It will be expanded when constructing absolute paths.

Remote directory listings with --list

Use the -L option to print permission mask and modification date in addition to filename.

Edit with --edit

You can edit remote files with your preferred editor on your local system using the --edit command. Use the optional --application option to specify the absolute path to the external editor you want to use.

Multiple transfer connections with --parallel

Transfer files with multiple concurrent connections to a server.


Access to your Cryptomator vaults from the command line. When accessing a vault using --download, --list or --upload, you will be prompted to provide the passphrase for the vault if not found in the keychain.


Watching changes in directory with fswatch and upload

fswatch is a file change monitor; an application to watch for file system changes. Refer to their documentation.

fswatch -0 ~/Sites/mywebsite/ | xargs -0 -I {} -t sh -c 'f="{}"; duck --upload ftps://<hostname>/sandbox`basename "${f}"` "${f}" -existing overwrite'

Upload build artifacts from continuous integration (Jenkins) to CDN

Use a post build script action.

cd ${WORKSPACE}; find build -name '*.tar' -print0 | xargs -0 -I {} -t sh -c 'f="{}"; duck --quiet --retry --existing skip --region DFW --upload rackspace://<container>/ "${f}"'

Upload files matching glob pattern to Windows Azure

duck --username kahy9boj3eix --upload azure://<containername>/ *.zip

Download files matching glob pattern from FTP

duck -v --download*.gz ~/Downloads

Download file from Amazon S3 public bucket

duck --verbose --download s3:// ~/Downloads/

Application Support Directory


The directory location is printed with --help following the list of supported protocols.


The support directory is ~/Library/Group Containers/ Support/duck/ on Mac. You can install third party profiles in ~/Library/Group Containers/ Support/duck/Profiles.


Install additional profiles in %AppData%\Cyberduck\Profiles on Windows.


The support directory is ~/.duck/ on Linux. You can install third party profiles in ~/.duck/profiles/.


You can override default preferences by setting environment variables in your shell.

env "" duck

Thirdparty References

Attachments (1)

Download all attachments as: .zip