Linux cmd Line: Passing Keys using ssh-agent

Affiliate Links

URLS

[scottmuc]

Good video and appreciate mentioning some of the down sides. Just a couple notes:
No need to censor the output from `ssh-add -l`; it just outputs the fingerprints which is totally ok to be out in the open. The private key is kept secret and safe.
As for other users on the system snooping in on your agent forwarded keys; OS audit events can at least capture that. For example, I did the following on my raspberry pi running Raspberry Pi OS:


The following showed up in /var/log/audit.log
Jun 27 20:59:10 pi sudo: pi : TTY=pts/0 ; PWD=/home/pi ; USER=root ; COMMAND=/bin/ls /tmp/ssh-aTEgV7plnj

It doesn't prevent the impersonation like you said, but if a regulated work environment, audit controls may be sufficient.

[dayanandadr]

Loved it,
Thanks for making thing simpler with crystal and clear explanation along with demo.

[armantahery]

I've understand ssh-agent very well thnx

[vincentfernandez]

thank you for your help. It helped me to configure this tool/service.

[lionFodder]

This was excellent! You covered all I needed, with the bonus tip on tab completion, and you gave practical usage insights - all while covering security concerns every step of the way. Well done, and thank you! I suppose I can forgive you for that hideous bash prompt 😉

[keistzenon]

Glad i found this video, great work! :)

[trump]

Clear and helpful explanation, thank you.

[PETAJOULE]

Nice implementation guide of ssh agent forrwarding that can be permamently added via config file.

[toriamfoobar]

hello,

where can we find the completion line for the ssh hosts in the config file ?

thanks in advance,

[DimaStefantsovCom]

Nice video, experience shared is appreciated. Although when I see whole screen censored I'm like "alright, thank you for the info..."

[zbynekba]

Some sequence/interaction diagrams would considerably raise the transparency of the concepts discussed in this video. Drawing instead of talking.

[BradleyHerbst]

I really appreciate this video. That bring said it would be a better video if you just created a temporary hello world private repo to do this tutorial.

[meyimagalot]

Where are Indian guys "hello, Im rajesh, you click here, then here, then here. please subscriube" when you need them?