ssh-agent is messed up

Peter Zijlstra <[email protected]>
Newsgroups gmane.linux.debian.alioth.pkg-gnupg.general,gmane.linux.debian.devel.ssh
Message-ID <[email protected]>
Hi,

Thanks for wasting many hours of my time, time I should have spend
reviewing linux kernel patches, by breaking ssh-agent.

I have a number of debian/testing systems, and on some of them gcr took
over ssh-agent, and this sorta works because its just a shim around the
actual ssh-agent. Now, I don't use GNOME, I despise GNOME, so 'apt
remove gcr' cured this.

Other machines, and the machines I've removed gcr from, magically end up
using gpg-agent, even though .gnupg/gpg-agent.conf does *NOT* have
'enable-ssh-support'. This is a *BUG*, this must not be!

The reason seems to be some gpg-agent-ssh.socket nonsense in systemd
that forces this. It also seems to race with the gcr thing, that also
wants to claim SSH_AUTH_SOCK.

Furthermore, it appears someone hobbled ssh-agent.service by removing
the [Install] section, so I can't even use that.

Anyway, gpg-agent doesn't act like a normal ssh-agent, it wants to
import the keys I add with ssh-add and store them in the gpg key
storage. This is *NOT* what an agent should do, it should just keep the
thing in RAM. I don't want extra copies of keys around, encrypted or
not.

Unfucking all this, on multiple machines (at leaset 3) is a major pain
in the arse. *AND* unasked for. You wrecked a perfectly working system.
All pain, no gain.

At least put in some of this fuckery in Debconf or so, and let the user
pick which actual agent to use. My preference is libpam-ssh to start
ssh-agent from the local user session (not the remote ones, that will
cause pain).


Yours, very grumpy,

Peter
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.