Use host yubikey-agent inside a docker container

[junze-smg]

Use host yubikey-agent inside a docker container

[gmmephisto]

Hi! If you don't use default osx ssh-agent, you can remap it socket to yubikey-agent socket with such launch agent:

$ cat ~/Library/LaunchAgents/link-ssh-auth-sock.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>Label</key>
  <string>link-ssh-auth-sock</string>
  <key>ProgramArguments</key>
  <array>
    <string>/bin/sh</string>
    <string>-c</string>
    <string>/bin/ln -sf /usr/local/var/run/yubikey-agent.sock $SSH_AUTH_SOCK</string>
  </array>
  <key>RunAtLoad</key>
  <true/>
</dict>
</plist>

Then, force to launch it with launchctl load -F ~/Library/LaunchAgents/link-ssh-auth-sock.plist and run docker container:

$ docker run -ti --rm -v /run/host-services/ssh-auth.sock:/ssh-agent -e SSH_AUTH_SOCK="/ssh-agent"

So, /run/host-services/ssh-auth.sock socket in docker virtual machine point to default osx ssh-agent which linked to yubikey-agent socket.

docker/for-mac#4242 (comment)