#10208·jj

"jj git clone" requires two security key touches

Author: Christoph-DCreated Sep 16, 2026Updated Sep 17, 2026

Description

With FIDO2 security keys, a common setup is that each ssh channel setup requires user presence, that is, touching the physical security key.

The jj git clone command requires two security key touches, indicating that it establishes two distinct ssh connections to the same remote repository when one should be enough.

In constrast, git clone requires only one touch.

Steps to Reproduce the Problem

  1. Set up a remote git repository with security key based SSH access, e.g. [email protected] ..., without no-touch-required.
  2. Run jj git clone "$repo".

Expected Behavior

I need to touch the physical security key once.

Actual Behavior

I need to touch the physical security key twice. It looks like fetching the repo data works after the first touch, and then fetching the bookmarks/tags only completes after the second touch.

Specifications

  • Platform: Ubuntu 26.04
  • Version: 0.44