Has anyone looked into supporting the SSH Agent with the Chromebook Linux environment?

@kriscarle Great to hear that it works now!

Good news @deinspanjer and @eh1921890 the ssh agent just started working for me with beta version 8.10.5 (81005010) on Chrome OS 113.0.5672.21 beta. I opened 1Password and unlocked my vault, then when running ssh in the terminal I got a popup window from 1Password to authorize.

Hi @kriscarle:

Thanks for sharing your SSH diagnostics. I'll share them with the team as we continue to investigate support for 1Password SSH agent on Chromebooks.

Jack

I also followed the instructions from @MartonS1P and got the ssh-diagnostics by installing the beta version: 8.10.0 (81000020)

Here are the two files generated in the ssh-diagnostics folder, doesn't seem very interesting in this case, but in case it helps.

```
{
"sid": 838,
"processes": [
{
"pid": 1589,
"command_line": [
"ssh",
"root@redacted:host"
],
"executable_path": "/usr/bin/ssh",
"integrity": {
"is_root_owned": true
},
"tty": "pts/1"
},
{
"pid": 838,
"command_line": [
"-bash"
],
"executable_path": "/usr/bin/bash",
"integrity": {
"is_root_owned": true
},
"tty": "pts/1"
},
{
"pid": 835,
"command_line": [
"/opt/google/cros-containers/bin/../lib/ld-linux-x86-64.so.2",
"--argv0",
"/opt/google/cros-containers/bin/vshd",
"--library-path",
"/opt/google/cros-containers/bin/../lib",
"--inhibit-rpath",
"/opt/google/cros-containers/bin/vshd.elf",
"--inherit_env",
"--forward_to_host_port=3255544555"
],
"executable_path": "/opt/google/cros-containers/lib/ld-linux-x86-64.so.2",
"integrity": {
"is_root_owned": false
}
},
{
"pid": 591,
"command_line": [
"/opt/google/cros-containers/bin/../lib/ld-linux-x86-64.so.2",
"--argv0",
"/opt/google/cros-containers/bin/garcon",
"--library-path",
"/opt/google/cros-containers/bin/../lib",
"--inhibit-rpath",
"/opt/google/cros-containers/bin/garcon.elf",
"--server"
],
"executable_path": "/opt/google/cros-containers/lib/ld-linux-x86-64.so.2",
"integrity": {
"is_root_owned": false
}
},
{
"pid": 207,
"command_line": [
"/lib/systemd/systemd",
"--user"
],
"executable_path": "/usr/lib/systemd/systemd"
}
]
}

```


{
"pid": 835,
"tty_pid": 838,
"executable_path": "/opt/google/cros-containers/lib/ld-linux-x86-64.so.2",
"command_line": [
"/opt/google/cros-containers/bin/../lib/ld-linux-x86-64.so.2",
"--argv0",
"/opt/google/cros-containers/bin/vshd",
"--library-path",
"/opt/google/cros-containers/bin/../lib",
"--inhibit-rpath",
"/opt/google/cros-containers/bin/vshd.elf",
"--inherit_env",
"--forward_to_host_port=3255544555"
],
"application_name": "ld-linux-x86-64.so.2"
}


Jack_P_1P looks like ChromeOS uses Wayland with a custom interface called Sommelier, they explain the implementation here https://chromeos.dev/en/posts/integrating-steam-into-chromeos and https://chromium.googlesource.com/chromiumos/platform2/+/HEAD/vm_tools/sommelier/

Hope that helps! I'm getting the "agent refused operation" as well.
1Password for Linux 8.9.14 (80914009)
ChromeOS: 110.0.5481.41 (beta) with Linux VM: Ubuntu 20.04.4 LTS

Hi @eh1921890:

As my colleague Marton mentioned, are you able to share which window manager you're using?

Jack

I'm also encountering similar but with just doing an op vault ls.

```

INFO 2023-01-02T22:11:57.555 tokio-runtime-worker(ThreadId(2)) [1P:native-messaging/op-native-core-integration/src/lib.rs:305] Extension connecting.
INFO 2023-01-02T22:11:57.555 tokio-runtime-worker(ThreadId(2)) [1P:native-messaging/op-native-core-integration/src/lib.rs:307] Extension connection accepted.
INFO 2023-01-02T22:11:57.584 op_executor:invocation_loop(ThreadId(13)) [1P:foundation/op-sys-info/src/process_information/linux.rs:367] no GUI info available to determine top level parent
WARN 2023-01-02T22:11:57.585 op_executor:invocation_loop(ThreadId(13)) [1P:foundation/op-sys-info/src/process_information/linux.rs:247] binary permission verification failed for /opt/google/cros-containers/lib/ld-linux-x86-64.so.2
WARN 2023-01-02T22:11:57.585 op_executor:invocation_loop(ThreadId(13)) [1P:foundation/op-sys-info/src/process_information/linux.rs:247] binary permission verification failed for /opt/google/cros-containers/lib/ld-linux-x86-64.so.2
ERROR 2023-01-02T22:11:57.586 tokio-runtime-worker(ThreadId(2)) [1P:native-messaging/op-native-core-integration/src/connection_handler.rs:60] message from b5x was None: EndConnection
ERROR 2023-01-02T22:11:57.586 tokio-runtime-worker(ThreadId(2)) [1P:native-messaging/op-native-core-integration/src/connection_handler.rs:31] Dropping connection with b5x due to error handling incoming message: EndConnection

```

Hi @deinspanjer! We have not yet tested the SSH agent in a Chromebook Linux environment. Thanks for trying it out and for reporting your findings. It seems that the error you're encountering is caused by the 1Password desktop app not being able to obtain the required process information about the app requesting SSH access. The app needs this information to enforce the authorization model described in the docs.

Unfortunately there is probably not a lot you can do to address this issue. For us, it would be interesting to know what window manager is being used in your Chromebook Linux environment. Moreover could you submit an SSH prompting diagnostics report as described here: https://developer.1password.com/docs/ssh/agent/troubleshooting/ ?

I can't promise an easy fix, but given this information we can better assess what it takes to add support for this and we can consider doing so in the future.