scripts: bind ~/.ssh over the chroot's ~/.ssh.

enter_chroot.sh

 #!/bin/bash
 
 # Copyright (c) 2009 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # Script to enter the chroot environment
 
 # Load common constants.  This should be the first executable line.
 # The path to common.sh should be relative to your script's location.
@@ skipping 13 matching lines @@
   "The build-bot build number (when called by buildbot only)." "b"
 DEFINE_string chrome_root "" \
   "The root of your chrome browser source. Should contain a 'src' subdir."
 DEFINE_string chrome_root_mount "/home/$USER/chrome_root" \
   "The mount point of the chrome broswer source in the chroot."
 
 DEFINE_boolean official_build $FLAGS_FALSE \
   "Set CHROMEOS_OFFICIAL=1 for release builds."
 DEFINE_boolean mount $FLAGS_FALSE "Only set up mounts."
 DEFINE_boolean unmount $FLAGS_FALSE "Only tear down mounts."
+DEFINE_boolean ssh_agent $FLAGS_TRUE "Import ssh agent."
 
 # More useful help
 FLAGS_HELP="USAGE: $0 [flags] [VAR=value] [-- \"command\"]
 
 One or more VAR=value pairs can be specified to export variables into
 the chroot environment.  For example:
 
    $0 FOO=bar BAZ=bel
 
 If [-- \"command\"] is present, runs the command inside the chroot,
@@ skipping 53 matching lines @@
           die "Could not mount $MOUNTED_PATH"
     fi
 
     MOUNTED_PATH="$(readlink -f "${FLAGS_chroot}/dev")"
     if [ -z "$(mount | grep -F "on $MOUNTED_PATH ")" ]
     then
       sudo mount --bind /dev "$MOUNTED_PATH" || \
           die "Could not mount $MOUNTED_PATH"
     fi
 
+    if [ $FLAGS_ssh_agent -eq $FLAGS_TRUE ]; then
+      TARGET_DIR="$(readlink -f "${FLAGS_chroot}/home/${USER}/.ssh")"
+      if [ -n "${SSH_AUTH_SOCK}" \
+        -a -d "${HOME}/.ssh" ]
+      then
+        mkdir -p "${TARGET_DIR}"
+        cp -r "${HOME}/.ssh/known_hosts" "${TARGET_DIR}"
+        ASOCK="$(dirname "${SSH_AUTH_SOCK}")"
+        mkdir -p "${FLAGS_chroot}/${ASOCK}"
+        sudo mount --bind "${ASOCK}" "${FLAGS_chroot}/${ASOCK}" || \
+          die "Count not mount ${ASOCK}"
+      fi
+    fi
+
     MOUNTED_PATH="$(readlink -f "${FLAGS_chroot}/dev/pts")"
     if [ -z "$(mount | grep -F "on $MOUNTED_PATH ")" ]
     then
       sudo mount none -t devpts "$MOUNTED_PATH" || \
           die "Could not mount $MOUNTED_PATH"
     fi
 
     MOUNTED_PATH="$(readlink -f "${FLAGS_chroot}$CHROOT_TRUNK_DIR")"
     if [ -z "$(mount | grep -F "on $MOUNTED_PATH ")" ]
     then
@@ skipping 150 matching lines @@
     mkdir -p "$MOUNTED_PATH"
     sudo mount --bind "$HOME/.subversion" "$MOUNTED_PATH" || \
       die "Could not mount $MOUNTED_PATH"
   fi
 fi
 
 # Run command or interactive shell.  Also include the non-chrooted path to
 # the source trunk for scripts that may need to print it (e.g.
 # build_image.sh).
 sudo chroot "$FLAGS_chroot" sudo -i -u $USER $CHROOT_PASSTHRU \
-  EXTERNAL_TRUNK_PATH="${FLAGS_trunk}" LANG=C -- "$@"
+  EXTERNAL_TRUNK_PATH="${FLAGS_trunk}" LANG=C SSH_AGENT_PID="${SSH_AGENT_PID}" \
+  SSH_AUTH_SOCK="${SSH_AUTH_SOCK}" -- "$@"
 
 # Remove trap and explicitly unmount
 trap - EXIT
 teardown_env