Re: "Tramp failed to connect" to an ssh server (gpg as an ssh agent)

[Daniel Krajnik]

> check where Tramp is started from, by 'M-x locate-library RET tramp'.

Thank you, this confirmed that the tramp version is shipped by the emacs system pacakge (/usr/share/emacs/29.1/lisp/net/tramp.elc) and not the doom framework (~/.config/emacs) like I originally thought (I might have looked at the "other versions" field in the "doom/help-packages" buffer by mistake).

> sign_and_send_pubkey: signing failed for ED25519 "cardno:000F73AE79E9" from agent: agent refused operation

I've switched temporarily back to pinentry (non-gtk) version and run tramp in emacs -Q. Log at level 10 and backtrace attached. It yielded the same error (quoted above) as on the terminal. GTK3 version pinentry still works fine though (both on emacs -Q and doom).

On 09/09/2023 08:37, Michael Albinus wrote:

> Daniel Krajnik <krajnik.dan@gmail.com> writes:
>
> Hi Daniel,
>
> > Thank you, I've upgraded doom's packages to the latest version, which
> > bumped tramp up to version 2.6.1.1.
> >
> > I've tried looking for a way to upgrade it to 2.6.1.2 (package is
> > managed by straight.el and doom's documentation doesn't mention that
> > you can use release number instead of the hash commit), but this broke
> > emacs and I had to revert back (thankfully all is backed by btrfs'
> > snapshots).
> >       
> Well, the difference between 2.6.1.1 and 2.6.1.2 is small. If you have
> 2.6.1.1 it would be OK.
>
> > After restarting emacs daemon, I've tried to connect again (thinking
> > that it's on version 2.6.1.1) and initially this time it worked.
> >
> > It did however produce the same backtrace errors, which revealed that
> > tramp is still on version 2.6.0.29.1.
> >       
> You can check the Tramp version by 'C-h v tramp-version'. You can also
> check where Tramp is started from, by 'M-x locate-library RET tramp'.
>
> > > It is the "prompting PIN" text I'm interested in.
> > >         
> > Because, ~/.gnupg/gpg-agent.conf was configured to use
> >
> > pinentry-program /usr/bin/pinentry-gnome3
> >
> > gtk3 for pinentry (it's necessary when working with gpg in
> > thunderbird) there was not output in the terminal - just the typical
> > graphical window appears and login succeeds.
> >       
> I see. In this case, Tramp is not involved, and I don't need to see
> anything :-)
>
> > Interestingly though if you change it to /usr/bin/pinentry (and
> > restart gpg-agent) it fails:
> >
> > sign_and_send_pubkey: signing failed for ED25519 "cardno:000F
> > 73AE79E9" from agent: agent refused operation
> >
> > I'm not sure why though?
> >       
> Again, show the debug buffer produced with tramp-verbose 10.
>
> Best regards, Michael.
>

backtrace
Description: Text document

debug tramp-ssh user1@128.40.123.56
Description: Text document

OpenPGP_0xCFC60FFCAAEC3A7D.asc
Description: OpenPGP public key

OpenPGP_signature.asc
Description: OpenPGP digital signature