Files
computer-playbook/roles/desk-ssh
Kevin Veen-Birkenbach 6fa4d00547 Refactor CDN and run_once handling
- Move run_once include from main.yml to 01_core.yml in desk-gnome-caffeine and desk-ssh
- Introduce sys-svc-cdn/01_core.yml to handle shared/vendor dirs once and role dirs per run
- Replace cdn.* with cdn_paths_all.* across inj roles
- Split cdn_dirs into cdn_dirs_role and CDN_DIRS_GLOBAL
- Ensure cdn_urls uses cdn_paths_all

Details: https://chatgpt.com/share/68b58d64-1e28-800f-8907-36926a9e9a9b
2025-09-01 14:11:36 +02:00
..
2025-07-15 17:52:05 +02:00
2025-09-01 14:11:36 +02:00
2025-07-09 03:18:07 +02:00
2025-07-15 17:52:05 +02:00

SSH Agent 🔐

Description

This Ansible role ensures a functional and persistent SSH Agent setup on Arch Linux (Manjaro) systems running GNOME with Wayland. It manages SSH configuration by cloning a remote Git repository into the user's ~/.ssh directory and sets up a systemd user service to start the SSH agent automatically at login.

To understand the broader context of SSH, read more on Wikipedia SSH or visit the official OpenSSH project.

This role was designed and validated in the context of this discussion on configuring SSH agents for KeePassXC compatibility under Wayland sessions.

Overview

This role is intended for Manjaro/Arch systems where gnome-keyring no longer reliably manages ssh-agent due to changes in behavior under Wayland. It works by deploying a systemd --user service, making SSH Agent integration predictable and independent of graphical environment quirks.

Purpose

The purpose of this role is to automate the provisioning of SSH agent capabilities and synchronize the .ssh directory from a Git repository. This enables users to access private repositories or authenticate with remote servers immediately after login.

Features

  • Clones a remote SSH config repository into ~/.ssh using the desk-git role.
  • Deploys and enables a systemd user service for ssh-agent.
  • Ensures environment compatibility by injecting the SSH_AUTH_SOCK variable into either .bash_profile or .profile.
  • Fails gracefully with an optional debug message if the Git repository is unreachable.
  • KeePassXC ready: Ensures compatibility with password managers that support SSH agent integration.

Credits 📝

Developed and maintained by Kevin Veen-Birkenbach.
Learn more at www.veen.world

Part of the Infinito.Nexus Project
License: Infinito.Nexus NonCommercial License