ssh-agent autostart?

474 views
Skip to first unread message

Mike Michel

unread,
Jun 10, 2014, 6:31:34 AM6/10/14
to coreo...@googlegroups.com
Hi,

following the Howto http://coreos.com/blog/coreos-clustering-with-vagrant/ im wondering why i have to start ssh-agent manually via eval `ssh-agent -s` so i can do the mentioned ssh based fleetctl commands. After a reboot i also have to do ssh-add  ~/.ssh/insecure_private_key again. Is this by design?

Best,

Mike

Seán C. McCord

unread,
Jun 10, 2014, 7:43:01 AM6/10/14
to coreo...@googlegroups.com


--
You received this message because you are subscribed to the Google Groups "CoreOS User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to coreos-user...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
Seán C. McCord
ule...@gmail.com
CyCore Systems

Brian Waldon

unread,
Jun 10, 2014, 9:53:09 AM6/10/14
to Mike Michel, coreo...@googlegroups.com

On Jun 10, 2014, at 3:31 AM, Mike Michel <mike.mi...@gmail.com> wrote:

> Hi,
>
> following the Howto http://coreos.com/blog/coreos-clustering-with-vagrant/ im wondering why i have to start ssh-agent manually via eval `ssh-agent -s` so i can do the mentioned ssh based fleetctl commands.

We’re using ssh-agent as a keyring manager so we don’t risk getting it wrong in the fleetctl tool. The “eval `ssh-agent -s`` simply starts an instance of ssh-agent and sets the appropriate environment variables (SSH_AUTH_SOCK, being the important one).

> After a reboot i also have to do ssh-add ~/.ssh/insecure_private_key again. Is this by design?

This is adding the necessary SSH private key to your new instance of ssh-agent. Since you have not created any configuration for ssh-agent, you’re essentially starting from a blank slate every time you boot up.

Mike Michel

unread,
Jun 11, 2014, 3:53:13 AM6/11/14
to coreo...@googlegroups.com, mike.mi...@gmail.com
Ok, i was under the impression that the coreos nodes also need this to communicate to each other for internal stuff. If it is only needed when admins start fleet commands manually, i will check the .bash_profile way  or something else.

Thanks,

Mike
Reply all
Reply to author
Forward
0 new messages