与Github对话:权限被拒绝(公钥)

问题描述

我试图用Ansible理解GitHub ssh的配置(我正在研究Ansible:启动和运行书).我遇到两个问题.

I'm trying to understand the GitHub ssh configuration with Ansible (I'm working on the Ansible: Up & Running book). I'm running into two issues.

权限被拒绝(公钥)-第一次运行ansible-playbook mezzanine.yml剧本时，我被拒绝了权限:

Permission denied (publickey) -When I first ran the ansible-playbook mezzanine.yml playbook, I got a permission denied:

failed: [web] => {"cmd": "/usr/bin/git ls-remote '' -h refs/heads/HEAD", "failed": true, "rc": 128}
stderr: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

msg: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

FATAL: all hosts have already failed -- aborting

好的，很公平，我看到几个人遇到了这个问题.因此，我跳到附录A，了解如何使用SSH运行Git，并说它运行ssh-agent并添加id_rsa公钥:

Ok, fair enough, I see several people have had this problem. So I jumped to appendix A on running Git with SSH and it said to run the ssh-agent and add the id_rsa public key:

eval `ssh-agent -s`
ssh-add ~/.ssh/id_rsa

输出:Identity Added我运行了ssh-agent -l进行检查并得到了长字符串:2048 e3:fb:...但是我得到了相同的输出.因此，我检查了有关ssh密钥生成和故障排除的Github文档，这些文档建议更新主机上的ssh配置文件:

Output: Identity AddedI ran ssh-agent -l to check and got the long string: 2048 e3:fb:... But I got the same output. So I checked the Github docs on ssh key generations and troubleshooting which recommended updating the ssh config file on my host machine:

Host github.com
    User git
    Port 22
    Hostname github.com
    IdentityFile ~/.ssh/id_rsa
    TCPKeepAlive yes
    IdentitiesOnly yes

但是这仍然提供相同的错误.因此，在这一点上，我开始认为这是我的rsa文件，这使我想到了第二个问题.

But this still provides the same error. So at this point, I start thinking it's my rsa file, which leads me to my second problem.

密钥生成问题-我试图生成一个额外的证书以供使用，因为Github测试引发了另一个权限被拒绝(公钥)"错误.

Key Generation Issues - I tried to generate an additional cert to use, because the Github test threw another "Permission denied (publickey)" error.

Warning: Permanently added the RSA host key for IP address '192.30.252.131' to the list of known hosts.
Permission denied (publickey).

我从头开始遵循Github指令，并生成了一个具有不同名称的新密钥.

I followed the Github instructions from scratch and generated a new key with a different name.

ssh-keygen -t rsa -b 4096 -C "[e-mail]"

我没有输入密码，而是将其保存到名称为git_rsa.pub的.ssh文件夹中.我运行了相同的测试，并得到了以下内容:

I didn't enter a passphrase and saved it to the .ssh folder with the name git_rsa.pub. I ran the same test and got the following:

$ ssh -i ~/.ssh/git_rsa.pub -T [e-mail]
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/Users/antonioalaniz1/.ssh/git_rsa.pub' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: ~/.ssh/github_rsa.pub
Permission denied (publickey).

我检查了权限，并在文件上做了chmod 700，但仍然得到Permission denied (publickey).我什至尝试将密钥输入我的Github帐户，但首先收到一条消息，要求密钥文件必须以ssh-rsa开头.因此，我开始进行研究和黑客入侵.从仅在文件中输入长字符串开始(它以--BEGIN PRIVATE KEY--开头，但是在失败后我省​​略了该部分)；但是，Github不接受它，说它是无效的.

I checked on the permissions and did a chmod 700 on the file and I still get Permission denied (publickey). I even attempted to enter the key into my Github account, but first got a message that the key file needs to start with ssh-rsa. So I started researching and hacking. Started with just entering the long string in the file (it started with --BEGIN PRIVATE KEY--, but I omitted that part after it failed); however, Github's not accepting it, saying it's invalid.

这是我在YAML文件中的Ansible命令:

This is my Ansible command in the YAML file:

- name: check out the repository on the host
  git: repo={{ repo_url }} dest={{ proj_path }} accept_hostkey=yes

  vars:
    repo_url: [e-mail]:lorin/mezzanine-example.git

这是配置了ForwardAgent的ansible.cfg文件:

This is my ansible.cfg file with ForwardAgent configured:

[defaults]
hostfile = hosts
remote_user = vagrant
private_key_file = .vagrant/machines/default/virtualbox/private_key
host_key_checking = False

[ssh_connection]
ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o ForwardAgent=yes

该框是使用Mac OS的Ubuntu Trusty64.如果有人可以帮助我了解文件权限和/或Github密钥生成，我将不胜感激.

The box is an Ubuntu Trusty64 using Mac OS. If anyone could clue me into the file permissions and/or Github key generation, I would appreciate it.

推荐答案

我怀疑密钥许可问题是因为您将公钥而不是私钥作为"ssh -i"的缩写.尝试以下方法:

I suspect the key permissions issue is because you are passing the public key instead of the private key as the arugment to "ssh -i". Try this instead:

ssh -i ~/.ssh/git_rsa -T [e-mail]

(请注意，它是git_rsa而不是git_rsa.pub).

(Note that it's git_rsa and not git_rsa.pub).

如果可以，请确保它在您的ssh-agent中.要添加:

If that works, then make sure it's in your ssh-agent. To add:

ssh-add ~/.ssh/git_rsa

要验证:

ssh-add -l

然后通过以下操作检查Ansible是否尊重代理转发:

Then check that Ansible respects agent forwarding by doing:

ansible web -a "ssh-add -l"

最后，通过执行以下操作检查您是否可以通过ssh访问GitHub:

Finally, check that you can reach GitHub via ssh by doing:

ansible web -a "ssh -T [e-mail]"

您应该看到类似这样的内容:

You should see something like:

web | FAILED | rc=1 >>
Hi lorin! You've successfully authenticated, but GitHub does not provide shell access.

这篇关于与Github对话:权限被拒绝(公钥)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！