gitlab runner ssh私钥644文件权限错误

Question

当运行一个gitlab ci/cd管道时，ssh给出0644 bad permission错误。变量作为文件类型存储在 gitlab 的设置>变量部分。
.gitlab-ci.yml 文件看起来像：

stages:
  - deploy
  
before_script:
  - apt-get update -qq
  - apt-get install -qq git
  - mkdir -p ~/.ssh
  - '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config'
deploy_1:
  stage: deploy
  only:
    - master
  tags:
    - master
  script:
    - ssh -i $SSH_KEY user@ip "mkdir -p runner_test"

deploy_2:
  stage: deploy
  only:
    - master
  tags:
    - master
  script:
    - ssh -i $SSH_KEY user@ip "mkdir -p runner_test"

错误：

$ ssh -i $SSH_KEY host@ip "mkdir -p runner_test"
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/home/user/builds/gPnQDT8L/0/username/server.tmp/SSH_KEY' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Load key "/home/user/builds/gPnQDT8L/0/username/server.tmp/SSH_KEY": bad permissions
user@ip: Permission denied (publickey).
Cleaning up file based variables

如何将私钥权限从 644 更改为 600 或 400。

Answer 1

你可以在这个deploy process for this gitlab-ci.yml

中看到同样的错误

fixed version of that file:

server:
  stage: deploy
  script:
  - apt-get install -y openssh-client rsync
  - chmod 400 $SSH_KEY
  - scp -o StrictHostKeyChecking=no -P $SSH_PORT -i $SSH_KEY public/server.zip $SSH_URI:modpack/server.zip

一个简单的chmod 400 $SSH_KEY就够了。

gitlab runner ssh私钥644文件权限错误

gitlab runner ssh private key 644 file permission error

ssh

gitlab

gitlab-ci-runner