From 8a70691fea469396cb235fd9dd5e82bb22be38ba Mon Sep 17 00:00:00 2001
From: CroneKorkN <i@ckn.li>
Date: Fri, 23 Oct 2026 11:29:35 +0200
Subject: [PATCH] feat(users): add mwiegand-agent login for agent sessions

Every linux node gets the user with the ssh-grant agent key and
passwordless sudo; the key only works while a grant is active.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
---
 groups/os/linux.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/groups/os/linux.py b/groups/os/linux.py
index 21f82a3..1f48308 100644
--- a/groups/os/linux.py
+++ b/groups/os/linux.py
@@ -51,9 +51,16 @@
                     'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMVroYmswD4tLk6iH+2tvQiyaMe42yfONDsPDIdFv6I ckn',
                 },
             },
+            # agent sessions (ssh-grant): the key only works while a grant is active
+            'mwiegand-agent': {
+                'authorized_keys': {
+                    'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDeU8FKtjN1+VjhxKZTzyvJ51GzPevrScXgou08hFmjb mwiegand-agent',
+                },
+            },
         },
         'sudoers': {
             'ckn': {'ALL'},
+            'mwiegand-agent': {'ALL'},
         },
     },
 }