Bug#1103522: openssh-client: ssh-agent socket created in an unpredictable path

Daniel Kahn Gillmor <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <87frhgf4lk.fsf__37696.9705963106$1746656859$gmane$org@fifthhorseman.net>
Hi Antoine--

On Fri 2025-04-18 16:26:36 +0200, Antoine Le Gonidec wrote:
> Since the 1:10.0p1-1 → 1:10.0p1-2 upgrade, the user socket for ssh-agent
> is no longer created in ${XDG_RUNTIME_DIR}/openssh_agent, but at an
> unpredictable path under /tmp.

Can you share the output of the following command (run as your normal
user):

   systemctl --user cat ssh-agent.socket ssh-agent.service


Here's what i'm seeing on my system:

```
0 dkg@bob:~$ systemctl --user cat ssh-agent.socket ssh-agent.service
# /usr/lib/systemd/user/ssh-agent.socket
[Unit]
Description=OpenSSH Agent socket
Documentation=man:ssh-agent(1)
Before=graphical-session-pre.target

[Socket]
SocketMode=0600
ListenStream=%t/openssh_agent
ExecStartPost=/usr/bin/systemctl --user set-environment SSH_AUTH_SOCK=%t/openssh_agent
ExecStopPre=/usr/bin/systemctl --user unset-environment SSH_AUTH_SOCK

[Install]
WantedBy=sockets.target

# /usr/lib/systemd/user/ssh-agent.service
[Unit]
Description=OpenSSH Agent
Documentation=man:ssh-agent(1)

[Service]
Environment=SSH_ASKPASS_REQUIRE=force
# If you need to pass extra arguments to ssh-agent, you can use "systemctl
# --user edit ssh-agent.service" to add a drop-in unit with contents along
# these lines:
#   [Service]
#   ExecStart=
#   ExecStart=/usr/bin/ssh-agent -D -t 1200
ExecStart=/usr/bin/ssh-agent -D
0 dkg@bob:~$
```

If your output looks the same as above, can you share the output of:

    systemctl --user status ssh-agent.socket ssh-agent.service

That would let me see what your local process supervisor believes is
going on with this service.

> (the path changes each time the ssh-agent user service is restarted)

How are you restarting the ssh-agent user service?

Regards,

    --dkg
signature.asc (application/pgp-signature, 227 B)
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRjrBGOWy5dZsiKhad4C4VO2cK0lgUCaBvb+AAKCRB4C4VO2cK0
lhBJAP4vhqFDgKbnW8qrgSqbl7GyeP3JBDNHVUJeBlgH4DZRfgD8CPDI7vaTqIn2
8YHKXQ7ASwR3GhYQ3APm7n4l/3Vj2gI=
=ATR5
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.