Last active
June 18, 2021 15:06
-
-
Save makmanalp/a95aa39f4b3171baeb5b to your computer and use it in GitHub Desktop.
SSH agent forwarding tester for ansible / vagrant
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
- hosts: all | |
sudo: no | |
tasks: | |
- shell: echo "Client= [$SSH_CLIENT] Sock= [$SSH_AUTH_SOCK]" | |
register: myecho | |
- debug: msg="{{myecho.stdout}}" | |
- shell: ssh-add -l | |
register: myecho | |
- debug: msg="{{myecho.stdout}}" | |
- shell: ssh -T -vvvv [email protected] | |
register: myecho | |
- debug: msg="{{myecho.stdout}}" |
More info about sudo and how it affects ssh agent forwarding: ansible/ansible#7235
- See if
$SSH_AUTH_SOCK
looks empty. If it is, that means it's not getting set up. - Try setting sudo=yes to see if that works if you run your playbook with sudo - you may need to pass
sudo_flags=-HE
If so, the above link to the github issue helps. - OSX is sometimes dumb and won't set up agent forwarding even when you see a key as added, in which case you may have to do
ssh-add -K
.
ssh-add -k (it's lower case k by the way) solved all my problems, thanks for that @makmanalp!
@smowdeb yep helped me too. same symptoms.
OSX is sometimes dumb and won't set up agent forwarding even when you see a key as added, in which case you may have to do ssh-add -K.
Still didn't work for me, after setting up the -HE
flag and become: false
for the task that required the agent.
For me setting an explicit --ssh-extra-args '-o UserKnownHostsFile=/dev/null'
for the ansible-playbook invocation solved the issue. Thanks to this SO answer https://stackoverflow.com/a/23704069
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Pretty handy if you want to set up ssh agent forwarding and you need to see if it worked. With vagrant, you can do: