[PATCH] ssh-add: support parser-friendly operation

Jochen Bern Jochen.Bern at binect.de
Fri Jan 10 20:35:17 AEDT 2025


On 10.01.25 00:33, Corey Hickey wrote:
> I took the approach of preserving current behavior by default, but 
> another approach would be to:
> * print "The agent has no identities." to stderr instead of stdout
> * exit with a status of 0 instead of 1

Please don't. If you want to ever get people to load their privkeys into 
the agent *with a limited lifetime*, having a trivial, *universal* way 
to check whether they have expired by now is an asset.

> workplace$ egrep ' ssh(|add)=' .bashrc 
> alias sshadd='( echo -n "`tput dim`" ; ssh-add -c -t 1800 ; echo -n "`tput sgr0`" )'
> alias ssh='ssh-add -l >/dev/null || sshadd ; ssh'


> jumphost$ grep -A 9 '^ssh' .bashrc
> ssh() {
>         if [ -z "$SSH_AUTH_SOCK" ]; then
>                 # No forwarded agent. Someone wants to learn many passwords by heart ...
>                 /usr/bin/ssh "$@"
>         elif ssh-add -l >/dev/null 2>&1 ; then
>                 /usr/bin/ssh "$@"
>         else
>                 echo "`tput setaf 0``tput setab 1` Please (re)load your keypairs into the agent first `tput sgr0`"
>         fi
> }

Kind regards,
-- 
Jochen Bern
Systemingenieur

Binect GmbH
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4336 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20250110/da69264c/attachment-0001.p7s>


More information about the openssh-unix-dev mailing list