Bug#1103522: openssh-client: ssh-agent socket created in an unpredictable path
Daniel Kahn Gillmor <[email protected]>
| Newsgroups | gmane.linux.debian.devel.ssh |
|---|---|
| Message-ID | <87frhgf4lk.fsf__37696.9705963106$1746656859$gmane$org@fifthhorseman.net> |
Hi Antoine--
On Fri 2025-04-18 16:26:36 +0200, Antoine Le Gonidec wrote:
> Since the 1:10.0p1-1 → 1:10.0p1-2 upgrade, the user socket for ssh-agent
> is no longer created in ${XDG_RUNTIME_DIR}/openssh_agent, but at an
> unpredictable path under /tmp.
Can you share the output of the following command (run as your normal
user):
systemctl --user cat ssh-agent.socket ssh-agent.service
Here's what i'm seeing on my system:
```
0 dkg@bob:~$ systemctl --user cat ssh-agent.socket ssh-agent.service
# /usr/lib/systemd/user/ssh-agent.socket
[Unit]
Description=OpenSSH Agent socket
Documentation=man:ssh-agent(1)
Before=graphical-session-pre.target
[Socket]
SocketMode=0600
ListenStream=%t/openssh_agent
ExecStartPost=/usr/bin/systemctl --user set-environment SSH_AUTH_SOCK=%t/openssh_agent
ExecStopPre=/usr/bin/systemctl --user unset-environment SSH_AUTH_SOCK
[Install]
WantedBy=sockets.target
# /usr/lib/systemd/user/ssh-agent.service
[Unit]
Description=OpenSSH Agent
Documentation=man:ssh-agent(1)
[Service]
Environment=SSH_ASKPASS_REQUIRE=force
# If you need to pass extra arguments to ssh-agent, you can use "systemctl
# --user edit ssh-agent.service" to add a drop-in unit with contents along
# these lines:
# [Service]
# ExecStart=
# ExecStart=/usr/bin/ssh-agent -D -t 1200
ExecStart=/usr/bin/ssh-agent -D
0 dkg@bob:~$
```
If your output looks the same as above, can you share the output of:
systemctl --user status ssh-agent.socket ssh-agent.service
That would let me see what your local process supervisor believes is
going on with this service.
> (the path changes each time the ssh-agent user service is restarted)
How are you restarting the ssh-agent user service?
Regards,
--dkg
signature.asc
(application/pgp-signature, 227 B)
-----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRjrBGOWy5dZsiKhad4C4VO2cK0lgUCaBvb+AAKCRB4C4VO2cK0 lhBJAP4vhqFDgKbnW8qrgSqbl7GyeP3JBDNHVUJeBlgH4DZRfgD8CPDI7vaTqIn2 8YHKXQ7ASwR3GhYQ3APm7n4l/3Vj2gI= =ATR5 -----END PGP SIGNATURE-----