Matthew Garrett on Nostr: It's been another day of dealing with the fallout of people unconditionally running ...
It's been another day of dealing with the fallout of people unconditionally running
eval $(ssh-agent)
in their shell startup. Please don't:
1) If you run it on remote systems, it breaks ssh agent forwarding - everything now talks to the remote agent, not the forwarded one
2) You end up with a per-shell agent, so keys loaded form one shell aren't available to others
3) It overrides any per-session agent started by your desktop
At minimum, check if SSH_AUTH_SOCK is already set before doing it!
eval $(ssh-agent)
in their shell startup. Please don't:
1) If you run it on remote systems, it breaks ssh agent forwarding - everything now talks to the remote agent, not the forwarded one
2) You end up with a per-shell agent, so keys loaded form one shell aren't available to others
3) It overrides any per-session agent started by your desktop
At minimum, check if SSH_AUTH_SOCK is already set before doing it!