Skip to main content


Fun yak shaving stack unwinded: needed to push my cap-std PR from the VM I have on an external drive ← needed to fsck the drive since it was refusing to mount ← needed to package exfat tools in @chimera_linux ← needed to patch some signed overflows out because we use UBSan to catch them by default.

Oh and the whole excursion into gcr-ssh-agent yesterday, also with undefined behavior involvedβ€”as it turns out, known issue but patch not landedβ€”was also motivated by having to do that push. Because I needed some GUI agent to be able to use the agent-forwarded FIDO2 ssh key. Kinda have that working with a janky (for now) gcr patch, but there's a simpler way too…

in reply to Val Packett πŸ§‰

So, this is the simplest ssh-askpass for current #GNOME (make sure to have gcr 4 installed):
#!/usr/bin/gjs -m<br>import System from 'system';<br>import GLib from 'gi://GLib';<br>import Gcr from 'gi://Gcr?version=4';<br>const prompt = Gcr.SystemPrompt.open(-1, null);<br>prompt.set_message(ARGV.join(''));<br>const res = prompt.password(null);<br>if (!res) System.exit(-1);<br>print(res);<br>

Save into a file, chmod +x, set SSH_ASKPASS_REQUIRE=force and SSH_ASKPASS=path/to/prompt.js (where you saved it) when running ssh (and ssh-agent itself?), enjoy working GUI prompt that allows unlocking fido2 security keys when using agent-forwarding.
⇧