cli ssh-agent

Hey

I'm trying to use the ssh-agent feature only in the command line. Is that possible?
I tried to add to the config file

[SSHAgent]
Enabled=true

but that doesn't work.

My goal is to use Ansible only in the terminal. I use Ansible already with keepassxc on my Desktop which works fine but I'm going to set up another vm as "backup" solution.
To avoid other softwares like keychain ... and extra work I thought it would be great to have that as cli mode as well.

[droidmonkey]

This is not a feature of the cli tool

[marvinav]

This is not a feature of the cli tool

It will be nice to see this feature in cli.

[joanbm]

A horrible workaround to achieve this is to set up keepassxc to automatically start the SSH agent and add the keys to it at startup, then when you want to load the keys from the CLI, launch the keepassxc GUI inside a headless X or Wayland server, e.g. with cage like so:

WLR_BACKENDS=headless cage -- keepassxc /path/to/my/db.kdbx --pw-stdin < /path/to/my/keyfile.txt &

[Farzat07]

Is it only me or does the cli version seem to be missing too many features?

[RaafatTurki]

Same issue, different use case.
I'm storing all my keys in keepassxc and it's annoying to have to open the GUI app every time I want to push something to github.
I'd much prefer to lock/unlock the db with a keybind.

[droidmonkey]

You either need to configure your ssh keys to NOT unload after locking the database or leave your database unlocked while using git. I'm not sure what other method you expect to be made available? The cli is really not a good solution to ssh agent since it is one-time-use and not persistent like the gui.

[RaafatTurki]

Even if I did want either of these I'd still not be able to tell keepassxc to load my keys without having to use the gui app.

[joanbm]

Prototype implementation here: joanbm@4f50c3f

It implements support for adding/removing keys to ssh-agent from keepassxc-cli, no display server required.

Sample usage:

foo@bar:~$ keepassxc-cli ssh-agent-populate my_database.kdbx
Enter password to unlock my_database.kdbx: [...]
Key(s) added to SSH agent, waiting for exit signal...
^Z
[1]+  Stopped                 keepassxc-cli ssh-agent-populate my_database.kdbx
foo@bar:~$ ssh some_server_where_i_need_an_ssh_key echo HelloWorld
HelloWorld
foo@bar:~$ fg
keepassxc-cli ssh-agent-populate my_database.kdbx
^C
Key(s) removed from SSH agent

[RaafatTurki]

@joanbm That looks great!, could it also unload the keys with maybe keepassxc-cli ssh-agent-depopulate sample.kdbx?