Forum Discussion

Anonymous's avatar
Anonymous
2 years ago

Any way to access to 1P SSH Agent on a Headless remote, if local agent can't be forwarded?

Hey all! I've been using 1password for some time now, and working in the software industry I really want to begin by stressing out this software is mighty impressive! I would like to ask for a ...
SSH
floris_1P's avatar
floris_1P
Icon for 1Password Team rank1Password Team
2 years ago

Glad you're liking the product! As for the use case you're describing, OpenSSH actually has a solution for this built in to their tooling, called SSH agent forwarding. You can enable it on a per-host basis in your local ~/.ssh/config file:


Host myserver
ForwardAgent yes

If you then connect to myserver and run ssh-add -l, you should see all your keys from 1Password. And if you then run, say, git fetch on the remote host, you'll get prompted by your local 1Password app!

One important note on agent forwarding: After approving a prompt, any SSH command ran as the same OS user on that host during your SSH connection will be able to use the key you've approved, so make sure you only enable SSH agent forwarding for trusted hosts.