I currently use Kryptonite to handle protecting the private key I use to SSH into hosts. This works well, except when I need to escalate to root.
sudo I have to go copy a randomly generated 20-character string out of my password manager, check that I'm really at the password prompt, and paste it to get my command running.
I'd much rather use my Yubikey to authenticate
sudo. I can find 101 guides on how to do this when
sudoing on on local hosts with the Yubikey plugged into my local hosts, but how can I do this when I want to
sudo on a remote host over SSH with the key plugged into my local machine?
Both local and remote hosts are running recent Linux/GNU distros, specifically RHEL/Fedora if it makes a difference.