Commit d8a260c8 authored by Georges Racinet's avatar Georges Racinet 🦑
Browse files

Heptapod CI/CD: known SSH hosts for sftp

about time.

--HG--
branch : heptapod-stable
parent 79d53f7ec395
Pipeline #14080 canceled with stages
in 4 minutes and 42 seconds
......@@ -28,22 +28,8 @@ if [ -n "$HEPTAPOD_TARBALL_UPLOAD_KEY" ]; then
HEPTAPOD_DOWNLOAD_SITE=download.heptapod.net
echo "Pushing ${TARBALL} to ${HEPTAPOD_DOWNLOAD_SITE} via SFTP"
# TODO better to ship a known_hosts file
#
# StricHostKeyChecking=accept-new not available in base Docker image
#
# ssh_config(5) on Debian 9 (OpenSSH 7.4):
# If this flag is set to no, ssh will automatically add new host keys
# to the user known hosts files.
#
# ssh_config(5) on Debian 10 (OpenSSH 7.9):
# If this flag is set to “accept-new” then ssh will automatically add
# new host keys to the user known hosts files, but will not permit
# connections to hosts with changed host keys. If this flag is set
# to “no” or “off”, ssh will automatically add new host keys
# to the user known hosts files and allow connections to hosts
# with changed hostkeys to proceed, subject to some restrictions.
SSH_FLAGS="-o IdentitiesOnly=yes -o StrictHostKeyChecking=no"
KNOWN_HOSTS=$(realpath $(dirname $0)/heptapod_known_hosts.ssh)
SSH_FLAGS="-o IdentitiesOnly=yes -o UserKnownHostsFile=${KNOWN_HOSTS}"
if [ -n "$HEPTAPOD_UPLOAD_SSH_PORT" ]; then
SSH_FLAGS="$SSH_FLAGS -P $HEPTAPOD_UPLOAD_SSH_PORT"
......
[download.heptapod.net]:7022 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5HYl4+LHEY9n4+3JhXPLHLwj+55H3lik/cp91AlXpQmmIzVRcFlQEqzMjxFI1kfNOd9Y/k7lZjyF86AVmZ6+e726J4i8rCwyMtATkdM3acRNdtONFVcC9a5CvT71H6U0OFCOS8hVCv/pBs/FoYwC+foxmMltZp2kpmhhqRQyuCTLoFQUdYYaFysXRtoo3Yy5nO8Road1M1fIib0e+PB2ALzJsgKjTiINk7sWXF2AfC7Phw8kOkYIL285eBftoh6LQ/oKshYXs1AULe/gaFgbhfQ9H2M5xiR+ddqkVNAlV1nJLYtRvCdGavYzX3F/hKXQjRS9TDmiinspK9CnaGje9
[download.heptapod.net]:7022 ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFhzij3QcQHkTZ/d5pia53FPBKAw6uo1MugXtppURwqYd1Wlk/yEoFP4VfamWpZvLW5anB2SDh0PrkPv8NYDBnM=
[download.heptapod.net]:7022 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGQYhX/90l97jZgG33PXfobTUoetWwuBdAMDS0rSaU3v
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment