Utilizar SSH Agent

Es necesario usar ssh-agent para poder hacer conexiones SSH dentro de
Hainish compartiendo las mismas llaves.  Si montáramos ~/.ssh, el
cliente SSH insiste en expandir ~ al home externo en lugar del interno y
no encontramos documentación al respecto.

haini.sh

@@ -57,6 +57,7 @@ correr() {
     JEKYLL_ENV="${JEKYLL_ENV:-development}" \
     EDITOR="nano" \
     PAGER="less -niSFX" \
+    SSH_AUTH_SOCK="${SSH_AUTH_SOCK}" \
     bwrap \
     --die-with-parent \
     --unshare-user \
@@ -70,7 +71,7 @@ correr() {
     --ro-bind /etc/hosts /etc/hosts \
     --ro-bind /etc/resolv.conf /etc/resolv.conf \
     --ro-bind /etc/localtime /etc/localtime \
-    --ro-bind ~/.ssh /home/suttier/.ssh \
+    --bind "${SSH_AUTH_SOCK}" "${SSH_AUTH_SOCK}" \
     --dev-bind /dev /dev \
     --dev-bind /sys /sys \
     --dev-bind /proc /proc \
@@ -205,6 +206,10 @@ crear_entorno() {
     install -m 755 "$script" "$ENTORNO/usr/local/bin/${script##*/}"
   done
 
+  # Configurar SSH
+  install -m 644 "$DIR/ssh/known_hosts" "$ENTORNO/root/known_hosts"
+  install -m 644 "$DIR/ssh/config" "$ENTORNO/etc/ssh_config"
+
   test -f "$ENTORNO/etc/ssl/certs/sutty.local.crt" || generar_certificado
   test -f "$ENTORNO/usr/local/share/ca-certificates/ca-sutty.crt" || mv "$ENTORNO/etc/ssl/certs/ca-sutty.crt" "$ENTORNO/usr/local/share/ca-certificates/ca-sutty.crt"
 }
@@ -228,6 +233,12 @@ esac
 if test "$HAIN_ENV"; then
   ${*:-$DEFAULT}
 else
+  if test -z "${SSH_AUTH_SOCK}"; then
+    echo "Iniciando un ssh-agent temporal, te recomendamos instalarlo en tu terminal." >&2
+    eval "$(ssh-agent)"
+    ssh-add
+  fi
+
   crear_entorno
   stdin=/dev/stdin correr "${*:-$DEFAULT}"
 fi

ssh/config

@@ -0,0 +1,2 @@
+Host *
+  UserKnownHostsFile /root/known_hosts

ssh/known_hosts

@@ -0,0 +1,3 @@
+0xacab.org,198.252.153.239 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKdh69MJNIA4hZNdplalK1BOD4QZEKn8msMwsEzA7nrr
+athshe.sutty.nl,172.96.172.58 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBIDqJl9IW6WXAxrtZXMzvMnIpTjIZB+Tp+dDUpSaOrqdjqdMVjHVQSFnVh0MLHbvdjKKtxaKDAuT3JXGrSp8wyA=
+anarres.sutty.nl,54.39.161.205 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBGw9aXovdiR44WzGfaitjlGiAO7I5OP/XgxFEc+t6HWeS0oqIVaEo17y7j29hLZbTRpN8vWoGSMa+UtquQZ6JG8=