CR-2026-03-25: SSH Agent Timeout — Implementation

Implementation Plan

Phase 1: Disable Failed ssh-agent Service

# Stop and disable conflicting service
systemctl --user disable ssh-agent.socket ssh-agent.service
systemctl --user stop ssh-agent.socket

# Verify disabled
systemctl --user status ssh-agent.service

Phase 2: Increase gpg-agent SSH TTL

# Backup current config
cp ~/.gnupg/gpg-agent.conf ~/.gnupg/gpg-agent.conf.bak

# Edit config - increase to 8 hours default, 24 hours max

Updated gpg-agent.conf

# SSH key cache TTL (8 hours default, 24 hours max)
default-cache-ttl-ssh 28800
max-cache-ttl-ssh 86400

Phase 3: Reload gpg-agent

# Kill and restart agent
gpgconf --kill gpg-agent
gpg-connect-agent /bye

# Verify SSH socket
echo $SSH_AUTH_SOCK
# Expected: /run/user/1000/gnupg/S.gpg-agent.ssh

# Add key (will now cache for 8 hours)
ssh-add ~/.ssh/id_ed25519