[Remote SSH] Add a parameter allow_agent

[gcoter]

Hello,

For some reason, when I use dvc pull or dvc push with an SSH remote, sometimes I get an error like this:

ERROR: unexpected error - No existing session

This is only on one specific machine that I use. On other machines, I don't have this problem.

To fix it, I have to give the parameter allow_agent=False to paramiko. If I edit manually the line https://github.com/iterative/dvc/blob/master/dvc/remote/ssh/__init__.py#L148 to add it, it works.

I was thinking that DVC could pass it through its config file, similarly to port or ask_password. For instance, I could add the line allow_agent = false in .dvc/config.local. I wanted to make a PR for that but I am too busy currently to do this myself :(

What do you think?

[efiop]

@gcoter Sounds good! Let's do that!

Unfortunately, we don't have the capacity for this right now as well 🙁 So it might have to wait until someone has time for it.

[efiop]

@gcoter Btw, i think you can already do that using your ssh config:

Host example.com
  ForwardAgent no

[gcoter]

Hi @efiop, thanks for your answer! I tried to modify ForwardAgent but it doesn't seem to work in my case...

[gcoter]

I will try to make the PR myself

[efiop]

Hi @efiop, thanks for your answer! I tried to modify ForwardAgent but it doesn't seem to work in my case...

Might be that paramiko doesn't read it by itself from ssh config and we need to extract it ourselves (luckily there is user_ssh_config logic already in the code). Both ways would be a good solution, but probably I would first try to use user_ssh_config and then consider introducing an in-dvc config option, just because it is a much better known mechanism that people might already use. But we would be happy to accept a patch using any approach, whichever suits you best 🙂 Thanks again for looking into it! 🙏

[gcoter]

@efiop Actually, I managed to add a parameter allow_agent and I could make a PR (it was easier than I thought) 🙂 But I understand that using the user's ssh config is a good approach as well. Would it be easy to implement your idea? What do you prefer, should I make a PR with what I have?

[efiop]

@gcoter It is actually extremely easy to implement. Here we have ProxyCommand support

dvc/dvc/remote/ssh/__init__.py

Line 90 in 71c4787

proxy_command = user_ssh_config.get("proxycommand", False)

so all you need is just

self.allow_agent = user_ssh_config.get("forwardagent", False)

and just pass it to the connection.

Would it be easy to implement your idea? What do you prefer, should I make a PR with what I have?

We would be happy with any approach that you actually will use 🙂 But I feel like the proper way is to indeed start with ForwardAgent, just because it is not paramiko-specific and people will likely have it already. So really this is your choice here, we will be happy with one or both, as long as they are tested and used by you or other users 🙂

[gcoter]

@efiop Sorry for my late response, I will try to implement your idea when I have time 🙂