6

I have a deployment user that's running a cronjob tuning in every minute.

On the remote server (the deployment target) I didn't have my public keys available but instead got a Could not open a connection to your authentication agent on my deployment server on ssh-add.

I ended up putting this line to my .bashrc:

ps -u $(whoami) | grep ssh-agent &> /dev/null || (eval $(ssh-agent) && ssh-add)

Despite it shouldn't in my understanding, the cronjob opens a new ssh-agent everytime. After 14-16 hours the server runs out of memory after creating a kern log with lots of entries like this:

Aug 12 21:50:58 tools kernel: [64021.568750] [25668]  1000 25668     2654       81       9        0             0 ssh-agent

... and I have to restart it.

How can I limit the number of running ssh-agent processes to one or kill the process after ending the cronjob?

UPDATE The given answer works perfectly fine, I just found out that that i had another eval ssh-add within the crontab. I'm going to reward the given question with the bounty.

  • I'm curious that if that line in your .bashrc works for you? (It does not work for me) – P.-H. Lin Aug 13 '15 at 10:42
  • It does work, yes it adds new ssh agents. – shredding Aug 13 '15 at 12:03
  • 1
    If the answer is solved, accept the answer. But don't add SOLVED into the title ;) – A.B. Aug 18 '15 at 8:57
6
+100

To kill the ssh-agent process, you can just simply use the ssh-agent -k command.

However, you might get the following error message:

SSH_AGENT_PID not set, cannot kill agent

It's related to the subshell that invoked by your command within parentheses. The parent shell can't see the variables that were generated in the subshell, making the SSH_AGENT_PID empty.

You can change the one-liner into:

ps -u $(whoami) | grep ssh-agent &> /dev/null
if [ $? -ne 0 ];then
    eval $(ssh-agent)
    ssh-add
fi
trap 'ssh-agent -k; exit' 0

The last line will kill the agent for you when you log out the system.

But please note that this only works with one session, let's say, if you login with second session, then the second session won't be blessed by the ssh-agent that you authorized in the first session. You will need to workaround it by exporting the SSH_AGENT_PID and SSH_AUTH_SOCK in the second session to make it work. You can do it by printing these two variable into a temporary file, and load it in .bashrc, a quick example:

ps -u $(whoami) | grep ssh-agent &> /dev/null
if [ $? -ne 0 ];then
    eval $(ssh-agent)
    ssh-add
    echo "export SSH_AGENT_PID=$SSH_AGENT_PID" > ~/.agent-profile
    echo "export SSH_AUTH_SOCK=$SSH_AUTH_SOCK" >> ~/.agent-profile
else
    source ~/.agent-profile
fi
trap 'ssh-agent -k; exit' 0

Have fun.

Edit:
Don't forget to kill all your ssh-agents before you try this in your .bashrc, otherwise it will fail to call ssh-agent as there is already a running one.

  • I did as you say and it works if I log in / out via terminal and ssh-agent -k produces said error message without. However, the cronjob still increases the number of ssh-agents by one per minute :( – shredding Aug 13 '15 at 12:18
  • 1. which one did you use, the first solution or the second solution? 2. when did you try the ssh-agent -k command, after login and authorize your ssh-agent? 3. did you kill all agents before trying this? 4. maybe you can tell us what your cron job did (you can update it in your question) – P.-H. Lin Aug 13 '15 at 14:33
  • 1. I used the last solution you mentioned, with the agent-profile (that gets filled and works) 2. Yes, after login and authorize 3. Yes, i restarted the entire server 4. it's running a more or less standarized capistrano tasks, logging into a remote server, check out the project from git (requires the ssh key from deployer) and a few tasks on the remote server. – shredding Aug 13 '15 at 15:03
  • FYI this works best for me on a mac, if you place it into ~/.bash_logout file – JayRizzo Jun 15 '18 at 2:01
0

I used solution2(source ~/.agent-profile) It worked for me before killing ssh-agent processes. After two days I killed all past ssh-agent processes. getting the below error and number of ssh-agent processes increasing for each login.

[username@i3-dljump01 ~]$ logout kill: No such process

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.