Duoconnect and linux securing ssh without X


I’ve got Duo Network Gateway running and protecting HTTPS-based apps and SSH for users who have Windows, Mac and Linux laptops, where the linux machines are running X and have a local browser.

I have one more use case: I have a set of headless linux VM’s (no X) that need to login through Duo Network Gateway, via DuoConnect. Is this possible? Can they somehow interact with the local DuoConnect install via ssh agent or something else?

I suppose I could also setup a policy allowing inbound requests from these headless VM’s without 2F, but I’d like to understand more about what DC can do before I do that.

Anyone know?