How to add SSH private key to fnox ?

[zeroware]

SSH private key needs to have a new line at the end of the file but the new line is not preserved when using an env var.
I tried to set the base64 encode but same issue. Do I need to use the as-file option ?

[0xshubhs]

as_file = true.

[env]
SSH_PRIVATE_KEY = { provider = "...", value = "...", as_file = true }

temp_file_secrets.rs:42 does write_all(value.as_bytes()), so nothing gets appended or stripped, and it chmods 0600 which ssh needs anyway. The env var holds the path.

That only helps if the newline is still in the stored value. Check with fnox get SSH_PRIVATE_KEY | xxd | tail -1 and see if it ends in 0a. If not, it's being lost at import and base64 won't fix it either.

[jdx]

Yes, as_file = true is the right delivery mode when the consumer expects a file path, but it only writes the value that was stored; it cannot restore a newline that was already removed.

I found two ways the final newline can be lost:

• fnox set SSH_PRIVATE_KEY < ~/.ssh/id_ed25519 currently trims stdin before storing it.
• fnox set SSH_PRIVATE_KEY "$(cat ~/.ssh/id_ed25519)" loses trailing newlines through shell command substitution.

That is also why --base64-encode did not help when fnox read the original key from stdin: trimming happened before encoding.

I opened #730 to add an exact file-input path. After it lands, the intended workflow is:

fnox set SSH_PRIVATE_KEY --from-file ~/.ssh/id_ed25519

Then configure the secret with as_file = true; fnox will inject the path to a restricted temporary file whose contents match the source file byte-for-byte.

Until then, for a normal SSH key with one final newline, this preserves it explicitly in bash/zsh:

key="$(cat ~/.ssh/id_ed25519)"
fnox set SSH_PRIVATE_KEY "${key}"$'\n'

AI-assisted — Tool: Codex; model: openai/gpt-5; version: unavailable.