Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,14 +41,14 @@ Copy files from this repo to various destinations (VM is the first argument). Yo
qvm-copy-to-vm fedora-24 qubes.SshAgent

# On the ssh-vault's template (in this case, fedora-24), run:
sudo mv ~user/QubesIncoming/work/qubes.SshAgent /etc/qubes-rpc/
sudo mv /home/user/QubesIncoming/work/qubes.SshAgent /etc/qubes-rpc/
```
- Create the ssh-vault VM (default name is "ssh-vault" in the scripts below)
* It's recommended to disable network access for this VM to protect it.

- Ssh-vault: Create an ssh private key or copy one in

- Ssh-vault: Copy `ssh-add.desktop_ssh_vault` to `~user/.config/autostart/ssh-add.desktop`
- Ssh-vault: Copy `ssh-add.desktop_ssh_vault` to `/home/user/.config/autostart/ssh-add.desktop`
* You may need to create the .config/autostart directory if it doesn't already exist
* Examine the contents of this file and adjust the ssh-add command on the `Exec` line if desired (e.g you may want to pass a specific SSH key to add to the agent)

Expand Down
2 changes: 1 addition & 1 deletion bashrc_client
Original file line number Diff line number Diff line change
Expand Up @@ -4,5 +4,5 @@
SSH_VAULT_VM="ssh-vault"

if [ "$SSH_VAULT_VM" != "" ]; then
export SSH_AUTH_SOCK=~user/.SSH_AGENT_$SSH_VAULT_VM
export SSH_AUTH_SOCK=/home/user/.SSH_AGENT_$SSH_VAULT_VM
fi
2 changes: 1 addition & 1 deletion rc.local_client
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
SSH_VAULT_VM="ssh-vault"

if [ "$SSH_VAULT_VM" != "" ]; then
export SSH_SOCK=~user/.SSH_AGENT_$SSH_VAULT_VM
export SSH_SOCK=/home/user/.SSH_AGENT_$SSH_VAULT_VM
rm -f "$SSH_SOCK"
sudo -u user /bin/sh -c "umask 177 && ncat -k -l -U '$SSH_SOCK' -c 'qrexec-client-vm $SSH_VAULT_VM qubes.SshAgent' &"
fi
Expand Down