I am working remotely on a school server via SSH from home. I would like to access a private GitHub repository from the remote system with SSH.
If I create a new public/private key pair on the remote system and use a strong passphrase for it, would the system admins, who have sudo access, be able to access and use the private key?
In general, I'm not assuming any malicious intent on behalf of the sysadmins, but I know there is always a chance that one of them is less-than-honest. I'd like to know what kind of risk I would be exposing myself to for both the malicious sysadmin and non-malicious cases.
I'm not worried about the admins seeing the contents of my GitHub repository. I'm concerned about them being about to use the private key to impersonate me and wipe our repo or clone other private repositories that aren't already copied onto the server. In other words, would using key authentication expose me to any more risk than I already am?