CLI command
skarbiec ssh
Keep SSH keys in the vault and use them from there: make one (new), bring one in from a file (import), load one into an agent (add), and sign a public key with a certificate authority the vault keeps (sign).
Invocation#
skarbiec ssh new <id> [--comment <text>] [--name <display name>] [--tags <tag,...>]
skarbiec ssh import <private-key-file> <id> [--name <display name>] [--tags <tag,...>] [--remove]
skarbiec ssh add <item-id> | ssh add --tag <tag> [--lifetime <seconds>] [--agent <socket>]
skarbiec ssh sign <ca-id> <public-key-file> --identity <name> --principals <name,...> --validity <window> [--host]Purpose#
Keep SSH keys in the vault and use them from there: make one (new), bring one in from a file (import), load one into an agent (add), and sign a public key with a certificate authority the vault keeps (sign).
Required inputs and options#
- A verb, then that verb's arguments, as its page names them.
Output and state effects#
- Runs the verb; no private key reaches standard output, a file outside an owner-only directory removed before the answer, or the journal.
Refusals#
- No verb, or a verb ssh has no form for, exits 2 with `ssh <words> is not a form of ssh; usage: …` naming every form, before anything is read.