trustcrypto/onlykey-agent

Feature request : allow unattented ssh connection until a command has finished

Opened this issue · 2 comments

euidzero commented

Trying to use onlykey-agent with ansible to manage multiple hosts in parallel or even serialy :
the agent requires pin chalenge for each host, thus making mass ssh impossible.

I suggess to add a feature to "unlock the ssh key" until a command has ended :

onlykey-agent identity@host --unlock-until-finished -- ansible-playbook play.yml
Enter the 3 digit challenge code on OnlyKey to authorize identity@host
..
ansible runs via  ssh on host1
ansible runs via  ssh on host2
...

basically this means having to enter the challenge once per command, not per host.

onlykey commented

@euidzero You can disable the pin challenge and only require pressing button on device - https://docs.crp.to/onlykey-agent.html#setting-derived-key-user-input-mode

This is currently required for GnuPG as there isn't a way to display the challenge PIN

euidzero commented