# trezor-agent を Homebrew, Nix でインストール trezor-agent のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:trezor-agent ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install trezor-agent ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#trezor-agent ``` 証拠: nixpkgs package indexes: trezor-agent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix ## パッケージ情報 - **パッケージキー:** brew:trezor-agent - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 0.13.0 - **ソース概要:** Hardware SSH/GPG agent for Trezor and Ledger - **ホームページ:** - **リポジトリ:** - **ライセンス:** LGPL-3.0-only - **ソースアーカイブ:** - **最終更新:** 2026-05-15T11:13:55Z - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - age-plugin-trezor (cli) - trezor-agent (cli) - trezor-gpg (cli) - trezor-gpg-agent (cli) - trezor-signify (cli) - trezor_agent.py (cli) - age-plugin-trezor (エイリアス) - trezor-agent (エイリアス) - trezor-gpg (エイリアス) - trezor-gpg-agent (エイリアス) - trezor-signify (エイリアス) - trezor_agent.py (エイリアス) ## 依存関係 - certifi - cryptography - hidapi - libsodium - libusb - python@3.14 ## ビルド依存関係 - pkgconf - rust ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 0.13.0 - マネージャ更新日: 2026-05-15 - ローカルデータ: OK - 上流リポジトリ: https://github.com/romanz/trezor-agent - 情報: No cached GitHub release or tag data was available. ## プロジェクトの歴史と使われ方 trezor-agent is a hardware-backed SSH, GPG, and age agent that grew out of early Trezor firmware support for using a hardware wallet as an identity and signing device. In package-manager culture it sits in the security-tools niche: a small CLI package that lets developers keep authentication and signing keys on a hardware device while still using familiar Unix tools. ### プロジェクトの歴史 Trezor firmware 1.3.4, announced in September 2015, credited Roman Zeyde's work and introduced NIST P-256 support so a Trezor could be used for SSH login. The official instructions in that announcement installed `trezor_agent`, generated a public key with `trezor-agent`, and used the result in `authorized_keys`. Firmware 1.3.6 extended the same idea beyond SSH by adding GPG key generation for signing email or documents and by pointing users to Trezor Agent for the user-space tooling. The repository later generalized the model into a shared `libagent` plus device-specific agents for Trezor, Blockstream Jade, and OnlyKey. ### 採用の歴史 The project was adopted by users who wanted hardware-backed developer identity without changing their normal SSH, Git, GPG, or password-store workflows. Its README lists signing email, Git commits, and software packages, managing passwords with `pass` or `passage`, and authenticating web tunnels and file transfers as representative uses. Package-manager availability through Homebrew and Nix made it installable in the same way as other command-line security tools, which mattered because trezor-agent is usually used from shells, SSH subprocesses, Git commands, GPG, and systemd user units rather than as a standalone application. ### 使われ方 For SSH, users derive a public key from an identity string, add that public key to remote access controls, and run commands or shells with `SSH_AUTH_SOCK` pointed at the agent. The official SSH guide also documents Git and Mercurial repository access, Git commit signing through SSH signatures, and optional systemd socket activation. For GPG, users initialize a dedicated `GNUPGHOME` such as `~/.gnupg/trezor`, then continue using normal GPG-aware software while the agent asks the hardware device to sign or decrypt. The GPG guide covers commit and tag signing, password-store integration, file signing/decryption, and email use. ### パッケージ好きにとっての重要性 trezor-agent is interesting to package nerds because it turns a cryptocurrency hardware wallet into a Unix authentication primitive. It bridges hardware-wallet APIs into the ecosystem of `ssh-agent`, GnuPG, Git signing, `pass`, systemd user sockets, and age plugins. The package is also a good example of Homebrew packaging for a tool whose value is not a daemon or GUI, but a collection of small executables that plug into existing developer workflows: `trezor-agent`, `trezor-gpg`, `trezor-gpg-agent`, `trezor-signify`, and `age-plugin-trezor`. ### タイムライン - 2015: Trezor firmware 1.3.4 announcement documents SSH login with `trezor-agent`. - 2016: Trezor firmware 1.3.6 announcement adds GPG signing support and references Trezor Agent. - 2022: Official SSH guide documents Git commit signing with SSH signatures. - 2026: GitHub repository lists `libagent/0.16.1` as the latest release on March 1, 2026. ### Related projects - Related components include `libagent`, `jade_agent`, `onlykey-agent`, GnuPG, OpenSSH, age, pass, and Trezor firmware features for SSH/GPG operations. ### ソース - - - - - ## セキュリティノート trezor-agent に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、パッケージメタデータはここに公開されています。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.ssh/agent.conf, ~/.gnupg/trezor ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** trezor-agent - **Version Scheme:** 0 - **Revision:** 2 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 他のパッケージマネージャ記録 - Nix - trezor-agent: normalized package name match | nixpkgs package indexes: trezor-agent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix ## 関連リンク - [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/ja/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [python@3.14](https://pkg.so/ja/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [hidapi](https://pkg.so/ja/brew/hidapi/) - Runtime dependency declared by Homebrew. - [pkgconf](https://pkg.so/ja/brew/pkgconf/) - Build dependency declared by Homebrew. - [rust](https://pkg.so/ja/brew/rust/) - Build dependency declared by Homebrew. - [keepkey-agent](https://pkg.so/ja/brew/keepkey-agent/) - Shares the same upstream source repository. - [keychain](https://pkg.so/ja/brew/keychain/) - Shares pkgdb curated category or tags: cli, gpg-agent, security, ssh-agent. - [onlykey-agent](https://pkg.so/ja/brew/onlykey-agent/) - Shares pkgdb curated category or tags: cli, gpg-agent, security, ssh-agent. - [trezor-bridge](https://pkg.so/ja/brew/trezor-bridge/) - Shares pkgdb curated category or tags: cli, hardware-wallet, security, trezor. - [yubikey-agent](https://pkg.so/ja/brew/yubikey-agent/) - Shares pkgdb curated category or tags: cli, security, ssh-agent. - [tkey-ssh-agent](https://pkg.so/ja/brew/tkey-ssh-agent/) - Shares pkgdb curated category or tags: cli, security, ssh-agent. - [openssl@3](https://pkg.so/ja/brew/openssl-3/) - Shares pkgdb curated category or tags: cli, security. - [gnutls](https://pkg.so/ja/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security. - [pwntools](https://pkg.so/ja/brew/pwntools/) - Both packages touch the same language runtime or ecosystem. Shared terms: certifi, cli, cryptography, libsodium, python. ## Combined YAML source View the package source record on GitHub. [combined/trezor-agent.yml](https://github.com/mxcl/pkgdb/blob/main/combined/trezor-agent.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph