[wayland] signign failed: agent refused operation

Do you see anything appear in $HOME/.config/1Password/logs when invoking the SSH request?

Nope, no logs, not even in the subdirectories.

```
logs $ pwd
/home/lupolucio/.config/1Password/logs

logs $ tree
[4.0K] .
├── [4.0K] BrowserSupport
│   ├── [4.0K] KeyringHelper
│   └── [ 880] 1Password_rCURRENT.log
├── [4.0K] KeyringHelper
│   └── [ 130] 1Password_rCURRENT.log
└── [ 101] 1Password_rCURRENT.log

logs $ ssh -T mailto:git@github.com
sign_and_send_pubkey: signing failed for ED25519 "" from agent: agent refused operation
mailto:git@github.com: Permission denied (publickey).

logs $ tree
[4.0K] .
├── [4.0K] BrowserSupport
│   ├── [4.0K] KeyringHelper
│   └── [ 880] 1Password_rCURRENT.log
├── [4.0K] KeyringHelper
│   └── [ 130] 1Password_rCURRENT.log
└── [ 101] 1Password_rCURRENT.log

logs $ cat 1Password_rCURRENT.log
INFO 2022-02-22T13:38:00.466 ThreadId(6) [client:typescript] 1Password is already running, closing.

logs $ cat KeyringHelper/1Password_rCURRENT.log
INFO 2022-02-22T13:38:00.754 main(ThreadId(1)) [1P:foundation/op-linux/src/bin/keyring_helper.rs:133] initalizing keyring helper

logs $ cat BrowserSupport/1Password_rCURRENT.log
INFO 2022-02-22T13:39:58.503 main(ThreadId(1)) [1P:native-messaging/op-browser-support/src/main.rs:148] Starting 1Password-BrowserSupport 8.6.0-6.BETA production build no. 80600006.
INFO 2022-02-22T13:39:58.503 main(ThreadId(1)) [1P:native-messaging/op-browser-support/src/browser_verification/linux.rs:31] Verifying browser "/usr/lib/firefox/firefox"
INFO 2022-02-22T13:39:58.506 main(ThreadId(1)) [1P:native-messaging/op-browser-support/src/browser_verification/linux.rs:45] Browser "/usr/lib/firefox/firefox" verified successfully
INFO 2022-02-22T13:39:58.506 main(ThreadId(1)) [1P:native-messaging/op-browser-support-lib/src/communication_logic.rs:119] Starting SLS communication (attempting connection to desktop app)
INFO 2022-02-22T13:39:58.510 main(ThreadId(1)) [1P:native-messaging/op-browser-support-lib/src/communication_logic.rs:184] Connected to the desktop app
```

Having run into this myself, it's potentially because you do not have a polkit authentication agent installed or running. See https://wiki.archlinux.org/title/Polkit#Authentication_agents for more details.

I ended up picking polkit-gnome and just make sure that I start /usr/lib/polkit-gnome/polkit-gnome-authentication-agent-1 in the background before attempting to use the SSH Agent.

See if starting one of those authentication agents helps your situation.

Thanks for the answer, but I'm actually running that exact polkit agent.

Do you also have the "Unlock using system authentication service" setting under Settings > Security in the 1Password app enabled?

I found that I needed that checked, and that the polkit authorization agent installed before it started to work. Otherwise I noted the same behavior that you did.

"Unlock using system authentication service" was (and is) enabled.
The polkit agent is launched at login, immediately before running 1password --silent.

Sounds like we're configured identically, then! Other than I'm using Sway, rather than River.

Hopefully someone from the 1Password team can help with further debugging steps, since I also noticed that the logs do not seem to provide much help in this scenario.

After the update to 8.6.0_43.BETA-43 I got the following output, even after disabling the agent, deleting the socket file, rebooting and enabling everything again.


$ ssh -T git@github.com -vvv
...
debug2: get_agent_identities: ssh_agent_bind_hostkey: communication with agent failed
debug1: get_agent_identities: ssh_fetch_identitylist: communication with agent failed
...
git@github.com: Permission denied (publickey).


I started seeing this issue around the same time as the beta 8.6.0_43.BETA-43, some time in the middle of the week. Unfortunately reverting to the previous 1P beta #26 did not fix the issue. I still got the following log messages as also reported above.


~ ᐅ ssh -T git@github.com -vvv
...
debug2: get_agent_identities: ssh_agent_bind_hostkey: communication with agent failed
debug1: get_agent_identities: ssh_fetch_identitylist: communication with agent failed
...
git@github.com: Permission denied (publickey).


Since reverting the 1Password update didn't restore the old working state, my troubleshooting lead me to realize that the Arch openssh package was updated from v8.8p1 to v8.9p1 around the same time. Reverting to the version in the Arch repo archives dated 2022/02/22 restored the old working behavior. I haven't taken the time to track down exactly why this downgrade fixes this issue since the workaround of downgrading the package is working for me for the time being.

For those using OpenSSH 8.9: we've made some improvements to the SSH agent which should also fix this issue. It'll be available in the next beta update, but if you want to try it now already, you can switch to the Nightly release channel from the 1Password 8 preferences: .