logoalt Hacker News

A GTK4 SSH-askpass in Zig

25 pointsby surprisetalktoday at 3:40 PM6 commentsview on HN

Comments

gen2braintoday at 4:22 PM

Nice, I just use lxqt-openssh-askpass, but I am on X11. A lighter alternative (for single-text input) would be FLTK. Version 1.4 is really nice, with Wayland support, and they even draw custom window decorations on GNOME. Both Cairo and FLTK should be able to compile with -X; not sure, though, about the status of the Zig bindings.

hparadiztoday at 4:27 PM

These implementations really need to also include fingerprint sensor support

show 1 reply
porridgeraisintoday at 4:53 PM

I wrap `pinentry` (which is in the dependency trees of gnupg, pacman, gvfs, udisks2 and other software that you can de-facto depend on on desktops) inside my own simple askpass.

  $ cat ~/scripts/pinentry-askpass
  #!/usr/bin/env bash
  
  pinentry <<INPUT | grep '^D ' | cut -c 3-
  SETPROMPT Password:
  GETPIN
  INPUT

  $ cat ~/.bashrc | grep ASKPASS
  export SUDO_ASKPASS="$HOME/scripts/pinentry-askpass"
  export SSH_ASKPASS="$SUDO_ASKPASS"
It automatically launches the GTK, TTY, or QT version depending on your environment.

It's also useful for agents to use sudo, you can write in instructions to tool-call `sudo -A` and you get a GUI popup to enter the password, and the agent continues from there. And since the "prompt" in pinentry can be customised... you can get the agent to set up a temporary askpass, which replaces "Password:" in the prompt with questions like "Can I delete this old log file in /var?" and you enter your password to authorise.

bfleschtoday at 4:24 PM

Love the tab title shenanigans when switching to and from the tab.

WD-42today at 4:14 PM

Would love to see more projects using gtk and zig. Always nice to have another language option.