[Bug]: TabularisDB does not work with SSH Key on Yubikey

[robertpenz]

Describe the bug

I'm trying to use my Yubikey to authenticated to the ssh server for a ssh tunnel. But setting BatchMode=yes does not allow the ssh to prompt for the pin code - so it can't connect to server.

The log shows following:

[SSH Test] Testing connection to server:22 as root (UseSystemSSH=true)
[SSH Test] Using system SSH (supports ~/.ssh/config)
[SSH Test] Executing: ssh ["-o", "BatchMode=yes", "-o", "ConnectTimeout=10", "-o", "StrictHostKeyChecking=accept-new", "root@server", "exit"]
[SSH Test Error] SSH connection failed: pin required
C_FindObjectsInit failed: 179
C_FindObjectsFinal failed: 179
C_FindObjectsInit failed: 179
C_FindObjectsFinal failed: 179
root@server: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

To Reproduce

try to use a smartcard/security token to authenticate to the ssh. Normally a windows pops up where I can enter the pin code. it works with meowsql.

OS Version

Fedora 43

Tabularis Version

tabularis_0.12.0_amd64.AppImage

Relevant Log Output

[debba]

Hi @robertpenz !
Thanks for this issue, I don't have ubikey for testing.
Are you able to create a PR for resolving it?

[robertpenz]

I've made some changes. With them, I'm able to get it work, but there is but.

The test call shows a popup querying for the PIN

[SSH Test] Testing connection to server:22 as root (UseSystemSSH=true, AllowPrompt=true)
[SSH Test] Using system SSH (supports ~/.ssh/config)
[SSH Test] Executing: ssh ["-o", "BatchMode=no", "-o", "ConnectTimeout=10", "-o", "StrictHostKeyChecking=accept-new", "root@server", "exit"]
[SSH Test] Connection successful!

but the real connection call ask for the pin on the cli where I started the program

[LOG] [2026-05-27 08:28:17.550] [INFO] tabularis_lib::commands - Testing connection to database: xxxx
[LOG] [2026-05-27 08:28:17.550] [INFO] tabularis_lib::commands - Creating new SSH tunnel for root@server:22
[SSH Tunnel] New Request: Host=server, Port=22, User=root, UseSystemSSH=true, AllowPrompt=true
[SSH Tunnel] Assigned Local Port: 34003
[SSH Tunnel] Executing: ssh ["-N", "-L", "127.0.0.1:34003:localhost:3306", "-o", "StrictHostKeyChecking=accept-new", "-o", "BatchMode=no", "root@server"]
Enter PIN for 'xxxxx: 
[SSH Tunnel] Tunnel established successfully on port 34003

So it works, but the not nicely ... my changes can be found at

main...robertpenz:tabularis:main

But I didn't to a PR as I currently don't know why there is no popup with the real request, but with the test it works. Are there some environment variables different?

[debba]

Hi @robertpenz ,

Probably you need to check here:

tabularis/src-tauri/src/ssh_tunnel.rs

Line 150 in 8fc0f3a

fn new_system_ssh(

Hope could helps, This is the real ssh connection, not the test connection itself.
After you fix it, I will refactor a bit this part, for avoiding this duplication.

If you prefer we have a Discord server for discussing it in depth.

[robertpenz]

ah, with "SSH_ASKPASS_REQUIRE=force ./tabularis_0.12.0_amd64.AppImage" and the patches it works also for connecting, this environment variable just needs to be set when calling ssh.

[debba]

@robertpenz feel free to create a PR and will check carefully

[robertpenz]

Created pull request #262