pathetic piss kitten (@kitten)

@lunareclipse@snug.moe

9mo

EDIT: this is about using ssh keys stored in a FIDO2 security key, and specifically when you set them to require a PIN on each use

currently losing my mind because there isn't a single fucking piece of tooling around SSH that ever considered the possibility that you may need to enter a password at time of key use to use it, ssh-agent and gcr-ssh-agent both just explode and git can't sign a commit without an ssh-agent with the key unlocked

luna the doggie

@lunareclipse@snug.moe

9mo

this means that if you made an -sk key with the option that requires user verification to use it, well, it will not work for half of your shit have fun

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse that is not my experience, although I don't use my keys for signing

I use ssh-agent with the SSH_ASKPASS envvar for authentication

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse it was tricky to figure out at the beginning, that's for sure

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten I tried using SSH_ASKPASS but gcr-ssh-agent doesn't support it so then I tried swapping that out for ssh-agent but no luck, "ssh agent refused operation"

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse have you added the key to the agent with ssh-add -K first?

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse (and do the ssh-agent logs say anything? I can share you my specific setup if your want)

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten I'm honestly not sure if I have logs, I am interested in a working setup though yes

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse give me one

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse not sure if I'm missing something, but I think I just have

this in .config/autostart/ssh-add.desktop:

[Desktop Entry]
Exec=ssh-add -q /home/elizabeth/.ssh/id_ed25519
Name=ssh-add
Type=Application

this in .config/environment.d/ssh-agent.conf:

SSH_AUTH_SOCK=$XDG_RUNTIME_DIR/ssh-agent.socket
SSH_ASKPASS=/usr/bin/ksshaskpass
SSH_ASKPASS_REQUIRE=prefer

and enable systemctl --user enable ssh-agent

and have ksshaskpass installed of course

💜1

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten thank you I will try this

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten set up something similar though not identical and sadly still the same outcome, it seems to just be a bug when you have created the key with UV required

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten -K? I pointed it to the file on disk

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten ooh okay that option doesn't require you to have that part on disk

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse oh wait true in Linux I do have it set up just like that