podman: ssh-agent mount failure on macOS 12.3

**OS: ** macOS 12.3 “Monterey”

Description I can’t pull from internal GitHub repos on macOS. Other coworkers using Fedora have indicated they don’t have any issues. Basically, I have this person on stack overflow’s exact problem

Create a dockerfile

FROM registry.access.redhat.com/ubi8/s2i-core:latest
RUN --mount=type=ssh yum install -y openssh-clients && ssh-add -l

Run podman build . --ssh default Result:

Could not open a connection to your authentication agent.
Error: error building at STEP "RUN --mount=type=ssh yum install -y openssh-clients && ssh-add -l": error while running runtime: exit status 2

Output of podman version if reporting a podman build issue:

Client:       Podman Engine
Version:      4.0.3
API Version:  4.0.3
Go Version:   go1.18
Built:        Fri Apr  1 08:28:59 2022
OS/Arch:      darwin/amd64

Server:       Podman Engine
Version:      4.0.3
API Version:  4.0.3
Go Version:   go1.18
Built:        Fri Apr  1 11:21:54 2022
OS/Arch:      linux/amd64

Output of cat /etc/*release:

zsh: no matches found: /etc/*release

Output of uname -a:

Darwin foobar.home 21.4.0 Darwin Kernel Version 21.4.0: Mon Feb 21 20:34:37 PST 2022; root:xnu-8020.101.4~2/RELEASE_X86_64 x86_64

Output of cat /etc/containers/storage.conf:

cat: /etc/containers/storage.conf: No such file or directory

About this issue

  • Original URL
  • State: open
  • Created 2 years ago
  • Reactions: 4
  • Comments: 25 (4 by maintainers)

Most upvoted comments

A friendly reminder that this issue had no activity for 30 days.

Docker for Mac has an ssh-auth.sock that is located at /run/host-services/ssh-auth.sock that forwards the requests to the users ssh-agent running on the macOS host.

See https://docs.docker.com/desktop/networking/#ssh-agent-forwarding

I think problem is that SSH_AUTH_SOCK which ssh-agent uses to communicate exists on host and not on machine. I’m just curious if this ever worked on podman machine before.

I think we would need to mount SSH_AUTH_SOCK from host->machine

Maybe this issue can be moved to podman, since this has to implemented on podman side. This might need mount to work between host and machine on macOS.