1Password integration

[mikefoley]

Hi,

1Password now has support for ssh keys. There are a number of other terminal emulator/SSH clients that are now integrated. Any chance of this showing up in Tabby?

More details here. https://developer.1password.com/docs/ssh/

[pro-sumer]

Seems to already work with some effort from users:

export SSH_AUTH_SOCK=~/.ssh/.1password/agent.sock ; open -a /Applications/Tabby.app

If I do that and configure SSH connections to use the "Agent" authentication method, I can log in to all servers configured in ~/.ssh/config using the 1Password SSH Agent.

Even agent forwarding (using the 1Password SSH Agent) works if you enable that in the advanced settings of a connection.

[samurai00]

It seems not work on my machine.

And it seems not elegant. I need to use another terminal app to open Tabby.

[Xosten]

Hi @mikefoley,

It works already on Windows without enabling agent forwarding. On macOS, it seems to not work (even with agent forwarding in the advanced tab of a connection) and I opened issue #6480 regarding this. Hopefully, it will get integrated pretty quickly 😄!

[Xosten]

Hey, 1Password just updated their documentation on how to configure SSH_AUTH_SOCK globally for every client. I just tried it and it works with Tabby. It's a great temporary fix! Here's the link.

https://developer.1password.com/docs/ssh/agent/compatibility#configure-ssh_auth_sock-globally-for-every-client

For the lazy ones, in a terminal run the following command :

MacOS:

cat << EOF > ~/Library/LaunchAgents/com.1password.SSH_AUTH_SOCK.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>Label</key>
  <string>com.1password.SSH_AUTH_SOCK</string>
  <key>ProgramArguments</key>
  <array>
    <string>/bin/sh</string>
    <string>-c</string>
    <string>/bin/ln -sf $HOME/Library/Group\ Containers/2BUA8C4S2C.com.1password/t/agent.sock \$SSH_AUTH_SOCK</string>
  </array>
  <key>RunAtLoad</key>
  <true/>
</dict>
</plist>
EOF
launchctl load -w ~/Library/LaunchAgents/com.1password.SSH_AUTH_SOCK.plist

Linux:
Run the following snippet to create a login script in /etc/profile.d/:
echo "export SSH_AUTH_SOCK=~/.1password/agent.sock" | sudo tee /etc/profile.d/1password-ssh-auth-sock.sh
If your system launches the GNOME keyring SSH agent automatically, you can disable that by running the following command:

mkdir -p ~/.config/autostart \
  && cp /etc/xdg/autostart/gnome-keyring-ssh.desktop ~/.config/autostart/gnome-keyring-ssh.desktop \
  && echo "Hidden=true" >> ~/.config/autostart/gnome-keyring-ssh.desktop

If you choose not to do this, the GNOME setting (/run/user/1000/keyring/ssh) may take precedence over the 1Password setting, depending on your operating system.

[mikefoley]

I get the following when trying to load the plist on my M1 Mac.

➜ ~ launchctl load -w ~/Library/LaunchAgents/com.1password.SSH_AUTH_SOCK.plist
Load failed: 5: Input/output error
Try running launchctl bootstrap as root for richer errors.

[rico]

@mikefoley I have the same problem - did you find a solution?

[adamf-sendblocks]

there's a good chance that error indicates that a previous load succeeded, but with a bad plist file. try launchctl unload <file> followed by launchctl load <file>

[gianmarco-mameli]

Hi, at this time the solution documented on 1password is working only if you open the app from a terminal after exporting of the env variable, if I try the solution with the plist the var is not correct

❯ echo $SSH_AUTH_SOCK
/private/tmp/com.apple.launchd.MYisrukuRL/Listeners

I'm on a Mac Mini M2 Pro with Sonoma 14.3, client ssh Tabby

[iutx]

Use ssh to jumpserver via tabby does not seem to wake up sshagent. Is there any good solution for ssh OTP？:>