Is your feature request related to a problem?
I don't want applications running in Dev Container to be able to use host SSH keys
Which solution do you suggest?
devpod ssh <something> correctly reads the SSH_AGENT_FORWARDING context option, but the ssh config has hardcoded ForwardAgent yes (it's always yes).
I think it's good to separate the two, and create a new context configuration option, e.g. SSH_CONFIG_AGENT_FORWARDING.
This way we will be able to keep SSH_AGENT_FORWARDING=true to allow DevPod to clone private dotfiles repository during setup phase, while keeping ForwardAgent no for general use.
|
newLines = append(newLines, " ForwardAgent yes") |
Is your feature request related to a problem?
I don't want applications running in Dev Container to be able to use host SSH keys
Which solution do you suggest?
devpod ssh <something>correctly reads theSSH_AGENT_FORWARDINGcontext option, but the ssh config has hardcodedForwardAgent yes(it's always yes).I think it's good to separate the two, and create a new context configuration option, e.g.
SSH_CONFIG_AGENT_FORWARDING.This way we will be able to keep
SSH_AGENT_FORWARDING=trueto allow DevPod to clone privatedotfilesrepository during setup phase, while keepingForwardAgent nofor general use.devpod/pkg/ssh/config.go
Line 71 in 5a0efcb