# tkey-ssh-agent を Homebrew, apk, apt, Nix, winget でインストール

tkey-ssh-agent のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:tkey-ssh-agent
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install tkey-ssh-agent
```

  証拠: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add tkey-ssh-agent
```

  証拠: Alpine Linux edge package indexes: tkey-ssh-agent from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install tkey-ssh-agent
```

  証拠: Debian stable package indexes: tkey-ssh-agent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Nix (92%):

```sh
nix profile install nixpkgs#tkey-ssh-agent
```

  証拠: nixpkgs package indexes: pkgs/by-name/tk/tkey-ssh-agent/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

### Windows

- winget (92%):

```sh
winget install --id Tillitis.TKeySSHAgent -e
```

  証拠: Windows Package Manager source index: Tillitis.TKeySSHAgent from https://cdn.winget.microsoft.com/cache/source.msix

## パッケージ情報

- **パッケージキー:** brew:tkey-ssh-agent
- **パッケージマネージャ:** Homebrew
- **パッケージマネージャページ:** <https://formulae.brew.sh/formula/tkey-ssh-agent>
- **バージョン:** 1.1.1
- **ソース概要:** SSH agent for use with the TKey security stick
- **ホームページ:** <https://tillitis.se/>
- **リポジトリ:** <https://github.com/tillitis/tkey-ssh-agent>
- **上流ドキュメント:** <https://tillitis.se/>
- **ライセンス:** GPL-2.0-only
- **ソースアーカイブ:** <https://github.com/tillitis/tkey-ssh-agent/archive/refs/tags/v1.1.1.tar.gz>
- **最終更新:** 2026-07-26T00:50:42+02:00
- **生成日時:** 2026-08-04T22:13:35+00:00

## 実行可能ファイル

- tkey-ssh-agent (cli)
- tkey-ssh-agent (エイリアス)

## 依存関係

- pinentry-mac

## ビルド依存関係

- go

## インストール挙動

- post-install フック: 未定義
- サービス: declared
- 注意点: To use this SSH agent, set this variable in your ~/.zshrc and/or ~/.bashrc: export SSH_AUTH_SOCK="$HOMEBREW_PREFIX/var/run/tkey-ssh-agent.sock"
- Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## バージョンと鮮度

- ページ生成日: 2026-08-04
- マネージャ版: 1.1.1
- マネージャ更新日: 2026-07-26
- ローカルデータ: OK
- 上流リポジトリ: https://github.com/tillitis/tkey-ssh-agent
- 検出された最新: v1.1.1 (最新)
## プロジェクトの歴史と使われ方

tkey-ssh-agent is an OpenSSH-compatible agent for the Tillitis TKey USB security token. It bridges the standard SSH agent protocol with a small open hardware/software signing device.

### プロジェクトの歴史

The official README describes tkey-ssh-agent as an OpenSSH-compatible agent for use with the Tillitis TKey USB security token. The project embeds a signer device application and warns users to prefer tagged releases because changes to the signer app, user-supplied secret, or user device secret can change the resulting SSH key pair.

The release notes show an early v0.0.1 phase focused on a revised SSH agent for Linux distributions, daemon operation, udev-based TKey detection, and pinentry for the user-supplied secret. Version 1.0.0 separated related apps, libraries, and packages into their own repositories, embedded the binary signer to enable go install, and added release/package builds with GoReleaser.

### 採用の歴史

The project is aimed at TKey users who want SSH authentication without storing private keys on a general-purpose computer. Its packaging path followed both source installs and OS packages: the README mentions operating-system package systems, go install, manual pages, udev rules, and systemd units.

The supplied package-manager facts show availability through Homebrew, Alpine/apk, Debian source packaging, Nix, and winget, which is unusually broad for a hardware-token-specific SSH utility.

### 使われ方

A typical use starts the agent on a chosen socket, optionally selects the serial port, then points SSH_AUTH_SOCK at that socket before using OpenSSH. The README also documents a public-key display mode and USS flags for user-supplied secrets.

For package nerds, the interesting part is that the installed CLI is only half the artifact: udev rules, systemd service files, manual pages, embedded signer binaries, and reproducible release packages all matter for a usable install.

### パッケージ好きにとっての重要性

tkey-ssh-agent sits at the intersection of open hardware, SSH agent ergonomics, and distro packaging. Its release notes make key continuity a packaging concern because changing firmware, signer binaries, or secret handling can change the generated SSH identity.

It is a useful example of a niche security package where version pinning, tagged releases, and release notes are operationally important rather than cosmetic.

### タイムライン

- v0.0.1: Release notes describe the revised SSH agent with daemon operation, udev detection, and pinentry support.
- v1.0.0: Related apps and libraries moved to separate repositories; embedded signer enabled go install; GoReleaser package builds added.
- 2026-03-24: GitHub releases page lists v1.1.1 with updated tkeyclient handling for TKey Unlocked.

### Related projects

- Tillitis TKey is the hardware/software USB security token targeted by the agent.
- OpenSSH is the client ecosystem consuming the SSH agent socket.
- tkey-device-signer, tkeyclient, and tkeysign are related Tillitis components named in the release notes.

### ソース

- <https://github.com/tillitis/tkey-ssh-agent README for purpose, install, usage, USS, and build behavior>
- <https://github.com/tillitis/tkey-ssh-agent/blob/main/docs/release_notes.md for v0.0.1, v1.0.0, and v1.1.0 history>
- <https://github.com/tillitis/tkey-ssh-agent/releases for release chronology and package assets>
- source_facts.package-manager for package availability


## セキュリティノート

broad file, network, media, or database tool signal. formula declares a Homebrew service.

- **Geiger リスク:** orange / 中
- broad file, network, media, or database tool signal
- formula declares a Homebrew service

## ソースデータベース詳細

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** tkey-ssh-agent
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## 他のパッケージマネージャ記録

- Debian apt - golang-github-tillitis-tkey-ssh-agent-dev - 1.0.0+ds-4: normalized package name match | Debian stable package indexes: golang-github-tillitis-tkey-ssh-agent-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | SSH Agent for Tillitis TKey (Go development library) | https://github.com/tillitis/tkey-ssh-agent
- Debian apt - tillitis-tkey-udev - 1.0.0+ds-4: normalized package name match | Debian stable package indexes: tillitis-tkey-udev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Tillitis TKey udev rule | https://github.com/tillitis/tkey-ssh-agent
- Debian apt - tkey-ssh-agent - 1.0.0+ds-4+b2: normalized package name match | Debian stable package indexes: tkey-ssh-agent from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | SSH Agent for Tillitis TKey (application) | https://github.com/tillitis/tkey-ssh-agent
- Nix - tkey-ssh-agent: normalized package name match | nixpkgs package indexes: pkgs/by-name/tk/tkey-ssh-agent/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - tkey-ssh-agent - 1.1.1-r3: normalized package name match | Alpine Linux edge package indexes: tkey-ssh-agent from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSH Agent for TKey, a flexible open hardware/software USB security key | https://www.tillitis.se/
- apk - tkey-ssh-agent-doc - 1.1.1-r3: normalized package name match | Alpine Linux edge package indexes: tkey-ssh-agent-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSH Agent for TKey, a flexible open hardware/software USB security key (documentation) | https://www.tillitis.se/
- apk - tkey-ssh-agent-udev - 1.1.1-r3: normalized package name match | Alpine Linux edge package indexes: tkey-ssh-agent-udev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSH Agent for TKey, a flexible open hardware/software USB security key (udev rules) | https://www.tillitis.se/
- winget - Tillitis.TKeySSHAgent: normalized package name match | Windows Package Manager source index: Tillitis.TKeySSHAgent from https://cdn.winget.microsoft.com/cache/source.msix


## 関連リンク

- [Secret-risk packages](https://pkg.so/ja/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://pkg.so/ja/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [pinentry-mac](https://pkg.so/ja/brew/pinentry-mac/) - Runtime dependency declared by Homebrew.
- [go](https://pkg.so/ja/brew/go/) - Build dependency declared by Homebrew.
- [yubikey-agent](https://pkg.so/ja/brew/yubikey-agent/) - Shares pkgdb curated category or tags: cli, hardware-token, security, ssh-agent.
- [ykman](https://pkg.so/ja/brew/ykman/) - Shares pkgdb curated category or tags: cli, hardware-token, security.
- [skm](https://pkg.so/ja/brew/skm/) - Shares pkgdb curated category or tags: cli, security, ssh.
- [duo_unix](https://pkg.so/ja/brew/duo-unix/) - Shares pkgdb curated category or tags: cli, security, ssh.
- [sshguard](https://pkg.so/ja/brew/sshguard/) - Shares pkgdb curated category or tags: cli, security, ssh.
- [signmykey](https://pkg.so/ja/brew/signmykey/) - Shares pkgdb curated category or tags: cli, security, ssh.
- [terrapin-scanner](https://pkg.so/ja/brew/terrapin-scanner/) - Shares pkgdb curated category or tags: cli, security, ssh.
- [endlessh](https://pkg.so/ja/brew/endlessh/) - Shares pkgdb curated category or tags: cli, security, ssh.
- [gnupg-pkcs11-scd](https://pkg.so/ja/brew/gnupg-pkcs11-scd/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, hardware, hardware-token, security, token.
- [keepkey-agent](https://pkg.so/ja/brew/keepkey-agent/) - Security-sensitive metadata or terminology overlaps. Shared terms: agent, cli, hardware, security, ssh.

## Combined YAML source

View the package source record on GitHub. [combined/tkey-ssh-agent.yml](https://github.com/mxcl/pkgdb/blob/main/combined/tkey-ssh-agent.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph