ssh-agent: program always prompts for passphrase

[rieje]

I successfully set up ssh-agent but it only works when I don't use the firejail version (i.e. /usr/bin/ssh). If I use firejail ssh, it will just prompt for passphrase as if I'm ssh-agent is not used.

When I set up ssh-agent, the it also involved defining the env variables SSH_AUTH_SOCK="$XDG_RUNTIME_DIR/ssh-agent.socket" and SSH_ASKPASS="lxqt-openssh-askpass" and uses /usr/bin/ssh-agent and /usr/bin/lxqt-openssh-askpass. I tried whitelisting/private-bin the paths/variables but it results in Error: no suitable /usr/bin/ssh executable found.

EDIT: Solved with whitelist ${RUNUSER}/ssh-agent.socket

[glitsj16]

Some related threads that might provide more insights/things you can try:

• ssh with gpg-agent
• discussion in ssh-agent: hardening

Please provide more detailed examples and logs of your attempts with firejailing ssh-agent. We're pretty blind without those. Or consider creating an issue from this discussion.

[kmk3]

@rieje on Jun 3, 2023:

EDIT: Solved with whitelist ${RUNUSER}/ssh-agent.socket