1
0
Fork 0
mirror of https://github.com/shimataro/ssh-key-action.git synced 2025-06-19 22:52:10 +10:00

* fix some sendences

This commit is contained in:
shimataro 2020-01-26 16:51:33 +09:00
parent 3bbb434bc8
commit 1d406e8c57
No known key found for this signature in database
GPG key ID: BE92C05736911A9D

View file

@ -76,7 +76,7 @@ steps:
## FAQ ## FAQ
### SSH failed even though installed key. ### SSH failed even though key has been installed.
Check belows: Check belows:
@ -88,7 +88,7 @@ Check belows:
* The former is **HIGHLY** recommended for security reason. * The former is **HIGHLY** recommended for security reason.
* I'm planning to make `known-hosts` required in v2. * I'm planning to make `known-hosts` required in v2.
### How do I use encrypted SSH key by passphrase? ### How do I use encrypted SSH key?
This action doesn't support encrypted key directly. This action doesn't support encrypted key directly.
Here are some methods: Here are some methods:
@ -98,7 +98,7 @@ Here are some methods:
* `expect` command: please be careful not to expose passphrase to console * `expect` command: please be careful not to expose passphrase to console
* `SSH_ASKPASS` environment variable: it may be troublesome * `SSH_ASKPASS` environment variable: it may be troublesome
### Which one is the best way for transferring files, "SCP", "SCP via bastion", "SFTP", "SFTP via bastion", "rsync" or "rsync via bastion"? ### Which one is the best way for transferring files, "direct SCP", "SCP via bastion", "direct SFTP", "SFTP via bastion", "direct rsync" or "rsync via bastion"?
I recommend **rsync via bastion**. I recommend **rsync via bastion**.
It has some advantages over other methods: It has some advantages over other methods:
@ -112,7 +112,7 @@ It has some advantages over other methods:
* can remove files that don't exist in server. * can remove files that don't exist in server.
* SCP is [deprecated by OpenSSH](https://www.openssh.com/txt/release-8.0) due to outdated and inflexible protocol. * SCP is [deprecated by OpenSSH](https://www.openssh.com/txt/release-8.0) due to outdated and inflexible protocol.
* Using bastion is more secure because: * Using bastion is more secure because:
* it is not necessarily to expose SSH port on server servers to public. * it is not necessarily to expose SSH port on servers to public.
* it requires to shutdown only bastion when security incident ―e.g., private key leaked, GitHub jacked― occurs. * it requires to shutdown only bastion when security incident ―e.g., private key leaked, GitHub jacked― occurs.
## License ## License