disclaimer: I am not a security expert. Reader beware! If you're using ssh-agent, maybe you could bind-mount your host's $(dirname $SSH_AUTH_SOCK) into the con

disclaimer: I am not a security expert. Reader beware! If you're using ssh-agent, maybe you could bind-mount your host's $(dirname $SSH_AUTH_SOCK) into the container, and then set the SSH_AUTH_SOCK environment variable to point at it when you run the Docker container. That way you're not even sharing the private key with the container. I imagine you could do the same with gpg-agent, too.