keychain VS envoy

Compare keychain vs envoy and see what are their differences.

envoy

A ssh/gpg-agent wrapper leveraging cgroups and systemd/socket activation (by vodik)
Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
keychain envoy
3 1
727 215
1.4% -
0.0 10.0
about 2 years ago about 8 years ago
Shell C
GNU General Public License v3.0 only GNU General Public License v3.0 only
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

keychain

Posts with mentions or reviews of keychain. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-09-23.
  • Am I the only one who's nervous when SSH-agent forwarding?
    2 projects | /r/sysadmin | 23 Sep 2022
    (*) https://github.com/funtoo/keychain. Not updated since 2018 but does the trick very well.
  • The struggle with SSH key management under Linux
    5 projects | dev.to | 10 Mar 2022
    Jon Cairns wrote a similar article about this problem and presented a solution: A script that tries to find and reuse existing ssh-agents. There are multiple scripts with similar approaches all written in bash: ssh_find_agent, zsh-ssh-agent, and the most popular one: keychain. (And later I also discovered envoy). But being bash scripts, they are hard to read, not really fast, and make debugging a hell. I had used keychain successfully until I encountered a problem that I wasn't able to understand. Also, those tools depend heavily on ssh-agent and ssh-add instead of using the socket directly.
  • Help Managing many linux servers
    3 projects | /r/sysadmin | 1 Jul 2021
    For ssh keys, that's what ssh-agent and keychain are for.

envoy

Posts with mentions or reviews of envoy. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-03-10.
  • The struggle with SSH key management under Linux
    5 projects | dev.to | 10 Mar 2022
    Jon Cairns wrote a similar article about this problem and presented a solution: A script that tries to find and reuse existing ssh-agents. There are multiple scripts with similar approaches all written in bash: ssh_find_agent, zsh-ssh-agent, and the most popular one: keychain. (And later I also discovered envoy). But being bash scripts, they are hard to read, not really fast, and make debugging a hell. I had used keychain successfully until I encountered a problem that I wasn't able to understand. Also, those tools depend heavily on ssh-agent and ssh-add instead of using the socket directly.

What are some alternatives?

When comparing keychain and envoy you can also consider the following projects:

zsh-ssh-agent - Ssh-agent management for zsh

ssh-find-agent - Tool to find already running ssh-agent compatible agents

mtail - extract internal monitoring data from application logs for collection in a timeseries database

dotfiles

yubikey-agent - yubikey-agent is a seamless ssh-agent for YubiKeys.

loki - Like Prometheus, but for logs.