SSH agent forwarding MacOS

[BillyBouman-2B-IT]

Hi,

I've been experimenting with Warden lately and am currently running into issues regarding SSH-agent forwarding.

Mounting the sock

The only way I've been able to get SSH-agent forwarding somewhat working is by adding a volume.

x-volumes: &volumes
  - $SSH_AUTH_SOCK:/agent.sock

Also see:

• Run composer update with private packages #225
• Mount local ssh keys #318
• Problem accessing private repos when composer is executed inside php-fpm #283

Permission issues

At this point I ran into permission issues because the owner of this sock is my host UID. This can be solved by running the following two commands (id's may differ on your machine). After executing please exit the shell and enter again warden env shell to apply the changes.

sudo groupmod -g 501 www-data
sudo usermod -u 501 www-data

Now the SSH-agent is properly forwarded and will work, however, when trying to add keys to known_hosts permission issues arise.

Also see:

• On Linux Containers Expect UID/GID of 1000 Otherwise Cause Permissions Trouble #155

Environment

I'm using OrbStack (Version 1.5.1 (16857)) and running it on a Apple MacBook Pro M2 using MacOS 14.4.1 (23E224).

Help

Can somebody explain to me how the SSH-agent is supposed to work in relation to Warden?

Thanks!