Forward the host SSH agent socket into the container

INCATools / ontology-development-kit

Bootstrap an OBO Library ontology

http://incatools.github.io/ontology-development-kit/

BSD 3-Clause "New" or "Revised" License

224 stars 54 forks source link

Forward the host SSH agent socket into the container #853

Closed gouttegd closed 1 year ago

gouttegd commented 1 year ago

This PR:

binds the SSH agent socket (as found in $SSH_AUTH_SOCK) from the host to a predictable location inside the container;
sets the SSH_AUTH_SOCK variable in the container to point to said predictable location.

This allows processes running inside the container to communicate with the host's SSH agent and therefore to use the user's SSH keys without having to expose the keys directly to the container.

closes #852

matentzn commented 1 year ago

Thanks @gouttegd I will look at this after biocuration unless there is a reason to rush?

gouttegd commented 1 year ago

No emergency as far as I am concerned. This may solve #848, if the user here is using a SSH agent (which they probably do).

gouttegd commented 1 year ago

Ping @matentzn. This is very simple change that does not alter the behaviour of the ODK, except that it makes it possible to use SSH with agent-provided keys from within the container.