How can I configure Mrsk to not ask for a passphrase every time?

[milushov]

Every time I run any Mrsk command that establishes a connection with the server, it requests a passphrase:

╰─$ mrsk details 
  INFO [f9b706ca] Running docker ps --filter name=^traefik$ on 209.38.*.*
  INFO [2d0fc16a] Running docker ps --filter name=^traefik$ on 178.128.*.*
Enter passphrase for /root/.ssh/id_rsa:Enter passphrase for /root/.ssh/id_rsa:

But I can ssh into the machine with no entering passphrase:

╰─$ ssh 'root@209.38.*.*' -- date
Thu Jul 13 22:05:32 UTC 2023

╰─$ mrsk version
0.14.0

╰─$ which mrsk
mrsk: aliased to docker run --rm -it -v $HOME/.ssh:/root/.ssh -v /var/run/docker.sock:/var/run/docker.sock -v ${PWD}/:/workdir  ghcr.io/mrsked/mrsk

My config/deploy.yml

service: awesome

image: milushov/awesome

servers:
  - 209.38.*.*
  - 178.128.*.*

registry:
  server: registry.gitlab.com
  username: milushov

  password:
    - MRSK_REGISTRY_PASSWORD

env:
  secret:
    - RAILS_MASTER_KEY

builder:
  dockerfile: Dockerfile.production

mrsk config

---
:roles:
- web
:hosts:
- 209.38.*.*
- 178.128.*.*
:primary_host: 209.38.*.*
:version: 728d2e0fcc179bb991388d13f10ddb6f464ebae1_uncommitted_bc72ae5d7afddfff
:repository: registry.gitlab.com/milushov/awesome
:absolute_image: registry.gitlab.com/milushov/awesome:728d2e0fcc179bb991388d13f10ddb6f464ebae1_uncommitted_bc72ae5d7afddfff
:service_with_version: awesome-728d2e0fcc179bb991388d13f10ddb6f464ebae1_uncommitted_bc72ae5d7afddfff
:env_args:
- "-e"
- RAILS_MASTER_KEY=[REDACTED]
:volume_args: []
:ssh_options:
  :user: root
  :auth_methods:
  - publickey
:builder:
  dockerfile: Dockerfile.production
:logging:
- "--log-opt"
- max-size="10m"
:healthcheck:
  path: "/up"
  port: 3000
  max_attempts: 7

[djmb]

Could you try this without using docker (i.e. installing the gem directly on your machine) and see if that works?

The docker container that runs the mrsk command won't have access to your local ssh agent.

[milushov]

@djmb thank you for reply. The docker container that runs the mrsk should have access to local ssh agent with-v $HOME/.ssh:/root/.ssh, no?

╰─$ which mrsk
mrsk: aliased to docker run --rm -it -v $HOME/.ssh:/root/.ssh -v /var/run/docker.sock:/var/run/docker.sock -v ${PWD}/:/workdir  ghcr.io/mrsked/mrsk

---

UPD: yes, this alias does not support local ssh-agent

[milushov]

Owh I just updated the alias with

alias mrsk="docker run -it --rm -v '${PWD}:/workdir' -v '${SSH_AUTH_SOCK}:/ssh-agent' -v /var/run/docker.sock:/var/run/docker.sock -e 'SSH_AUTH_SOCK=/ssh-agent' ghcr.io/mrsked/mrsk:latest"

And now I have:

╰─$ mrsk deploy
Acquiring the deploy lock...
  Finished all in 0.6 seconds
  ERROR (Net::SSH::AuthenticationFailed): Exception while executing on host 209.38.*.*: Authentication failed for user root@209.38.*.*

╰─$ ssh 'root@209.38.*.*' -- date                                                1 ↵
Fri Jul 14 13:05:20 UTC 2023

[milushov]

Solved issue by setting proper alias for macOS

alias mrsk="docker run -it --rm -v '${PWD}:/workdir' -v /run/host-services/ssh-auth.sock:/run/host-services/ssh-auth.sock -e SSH_AUTH_SOCK=/run/host-services/ssh-auth.sock -v /var/run/docker.sock:/var/run/docker.sock ghcr.io/mrsked/mrsk:latest"

Thanks bohdan-shulha

[bogdankharchenko]

Thank you!

[aitoehigie]

@milushov this doesnt work for me as I am using the exact above command and still get:
ERROR (Net::SSH::AuthenticationFailed): Exception while executing on host ...: Authentication failed for user ubuntu@...

[aitoehigie]

Answering my own question, this alias worked for me:
"docker run -it --rm -v '${PWD}:/workdir' -v $(echo $SSH_AUTH_SOCK):/ssh-agent -e SSH_AUTH_SOCK=/ssh-agent -v /var/run/docker.sock:/var/run/docker.sock ghcr.io/basecamp/kamal:latest"

[milushov]

Be aware about $PWD in the alias if you have more than one project

~/.zshrc

define_mrsk() {
  unalias mrsk 2>/dev/null
  alias mrsk="docker run -it --rm -v '${PWD}:/workdir' -v /run/host-services/ssh-auth.sock:/run/host-services/ssh-auth.sock -e SSH_AUTH_SOCK=/run/host-services/ssh-auth.sock -v /var/run/docker.sock:/var/run/docker.sock ghcr.io/mrsked/mrsk:latest"
}

define_mrsk

cd() {
  builtin cd "$@"
  define_mrsk
}

[meglio]

For me, ssh-add did the job.