diff --git a/containers/ws/label-run b/containers/ws/label-run
index 0b925e06f6b9..da887647e638 100755
--- a/containers/ws/label-run
+++ b/containers/ws/label-run
@@ -42,8 +42,10 @@ else
 
     /usr/libexec/cockpit-certificate-ensure
 
-    if [ -z "$SSH_AUTH_SOCK" ]; then
+    if [ -z ${SSH_AUTH_SOCK+x} ]; then
         eval "$(ssh-agent)"
+    else
+        echo Agent sock ${SSH_AUTH_SOCK}
     fi
     exec /usr/libexec/cockpit-ws --local-ssh "$@"
 fi