使用 sshpass 和私钥时 SSH 挂起答案

【问题标题】：SSH Hangs When Using sshpass and Private Keys使用 sshpass 和私钥时 SSH 挂起
【发布时间】：2022-02-02 10:22:31
【问题描述】：

我有一个在 Kubernetes 中运行的 alpine Docker 映像，我尝试在其中使用部署密钥（带密码）推送到 Git。

现在我的命令看起来像：

CMD ["/bin/sh", "-c", "GIT_SSH_COMMAND=\"sshpass -p mygreatpassphrase ssh -vvv\" git -C /workspace push --mirror git@github.com:foo/bar.git"]

那么结果是：

<snip>
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey after 134217728 blocks
debug1: Will attempt key: /.ssh/id_rsa 
debug1: Will attempt key: /.ssh/id_dsa 
debug1: Will attempt key: /.ssh/id_ecdsa 
debug1: Will attempt key: /.ssh/id_ed25519 
debug1: Will attempt key: /.ssh/id_xmss 
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,rsa-sha2-512,rsa-sha2-256,ssh-dss>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /.ssh/id_rsa

它无限期地挂在这条线上。可悲的是，ssh 似乎没有更详细的输出。我不确定问题出在容器内的sshpass 还是实际问题出在哪里。

在 Docker 中构建也挂起：

FROM alpine/git

RUN apk add --no-cache sshpass

RUN sshpass -p foo /bin/sh -c 'read X < /dev/tty'

sshpass 打开了以下文件：

lr-x------    1 tempuser root            64 Jul 31 10:43 0 -> pipe:[380942247]
l-wx------    1 tempuser root            64 Jul 31 10:43 1 -> pipe:[380942248]
l-wx------    1 tempuser root            64 Jul 31 10:43 2 -> pipe:[380944011]
lrwx------    1 tempuser root            64 Jul 31 10:43 3 -> /dev/pts/ptmx
lrwx------    1 tempuser root            64 Jul 31 10:43 4 -> /dev/pts/0

ssh 相比之下：

lr-x------    1 tempuser root            64 Jul 31 09:23 0 -> pipe:[380942247]
l-wx------    1 tempuser root            64 Jul 31 09:23 1 -> pipe:[380942248]
l-wx------    1 tempuser root            64 Jul 31 09:23 2 -> pipe:[380944011]
lrwx------    1 tempuser root            64 Jul 31 09:23 3 -> socket:[380944638]
lrwx------    1 tempuser root            64 Jul 31 10:43 4 -> /dev/tty

【问题讨论】：

标签： git github ssh kubernetes sshpass

【解决方案1】：

对于带有密码短语的密钥，SSH 提示是不同的。所以我不得不使用-P assphrase更改提示：

CMD ["/bin/sh", "-c", "GIT_SSH_COMMAND=\"sshpass -p mygreatpassphrase -P assphrase ssh -vvv\" git -C /workspace push --mirror git@github.com:foo/bar.git"]

【讨论】：

谢谢！你为我节省了很多时间。
这解决了我的 sshpass 挂起问题，谢谢！为了让其他人阅读清楚。您可以将sshpass 运行为：sshpass -p "password" -P assphrase ...。