I currently use Kryptonite to handle protecting the private key I use to SSH into hosts. This works well, except when I need to escalate to root.
When I sudo
I have to go copy a randomly generated 20-character string out of my password manager, check that I'm really at the password prompt, and paste it to get my command running.
I'd much rather use my Yubikey to authenticate sudo
. I can find 101 guides on how to do this when sudo
ing on on local hosts with the Yubikey plugged into my local hosts, but how can I do this when I want to sudo
on a remote host over SSH with the key plugged into my local machine?
Both local and remote hosts are running recent Linux/GNU distros, specifically RHEL/Fedora if it makes a difference.