Skip to content

fix(claude-code): install openssh-client for SSH-format commit signing #111

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gatezh merged 1 commit into from
Jun 8, 2026
Merged

fix(claude-code): install openssh-client for SSH-format commit signing #111

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions claude-code/.devcontainer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,13 @@ ARG GIT_DELTA_VERSION=0.18.2
# - git: version control
# - jq: JSON processing (firewall script, onboarding patch)
# - less: pager for git delta output
# - openssh-client: provides ssh-keygen, needed for SSH-format commit signing
# (gpg.format=ssh + commit.gpgsign=true, copied in via VS Code's
# dev.containers.copyGitConfig); also restores ssh/ssh-add. git only
# *Recommends* it, so --no-install-recommends drops it unless listed here.
# Hard-depends on libfido2, so FIDO2 hardware keys (YubiKey sk-ssh-ed25519)
# sign too. Must be in base: the sandbox firewall blocks deb.debian.org, so
# it can't be added at runtime (same reasoning as chromium). See issue #110.
# - sudo: privilege escalation for firewall setup
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
--mount=type=cache,target=/var/lib/apt/lists,sharing=locked \
Expand All @@ -67,6 +74,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
git \
jq \
less \
openssh-client \
sudo

# npm global directory with proper permissions for node user
Expand Down
2 changes: 1 addition & 1 deletion claude-code/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ Projects consume these pre-built images and control their own tool versions via
|-------|------|-----|
| OS | `node:24-trixie-slim` + system packages | Node is needed during the build (Playwright, npm globals) |
| Shell | Fish, Starship, fzf | Built-in syntax highlighting, autosuggestions, completions |
| Tools | git-delta, gh CLI, jq, nano, vim, wget, unzip, less, man-db, procps | Standard dev utilities |
| Tools | git-delta, gh CLI, jq, nano, vim, wget, unzip, less, man-db, procps, openssh-client | Standard dev utilities (`openssh-client` provides `ssh`/`ssh-keygen` — enables SSH-format commit signing) |
| Mise | The tool manager itself (not the tools) | Projects run `mise install` at container creation for their tool versions |
| rtk, ralphex | Always-latest from GitHub Releases | Dev infrastructure (like Claude Code) — no version pinning needed in projects |
| Claude Code | npm global install | npm avoids rate limiting that affects the native installer in parallel CI builds |
Expand Down