From fbee4ba437af4529db7429f58b11259c0ed50382 Mon Sep 17 00:00:00 2001
From: David Heinemeier Hansson <david@hey.com>
Date: Fri, 7 Aug 2026 16:03:15 -0700
Subject: [PATCH] Isolate the test harness SSH identity from the local
 ssh-agent

A loaded agent offers its keys before the harness identity and can exhaust
the server's MaxAuthTries before the right key is ever tried; IdentitiesOnly
pins authentication to the per-run key.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 bin/omarchy-iso-test | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bin/omarchy-iso-test b/bin/omarchy-iso-test
index 4084eec..316acec 100755
--- a/bin/omarchy-iso-test
+++ b/bin/omarchy-iso-test
@@ -304,6 +304,7 @@ type_text() {
 ssh_guest() {
   ssh -i "$SSH_KEY" -p "$SSH_PORT" \
     -o BatchMode=yes \
+    -o IdentitiesOnly=yes \
     -o StrictHostKeyChecking=no \
     -o UserKnownHostsFile=/dev/null \
     -o ConnectTimeout=5 \
@@ -672,7 +673,7 @@ drive_oem_setup() {
   capture_console "success-oem-02-password"
   press ret
 
-  wait_for_screen "Must match" 60
+  wait_for_screen "match the password" 60
   type_text "$GUEST_PASSWORD"
   press ret