mirror of
https://github.com/shimataro/ssh-key-action.git
synced 2025-06-19 22:52:10 +10:00
version 2.0.0 (#116)
* Feature/private key (#71) * * rename private-key to key * * update CI * * update README / CHANGELOG * Feature/rename known hosts (#72) * * rename known-hosts to known_hosts * * update CI * * update README * * update CHANGELOG * * update README * Feature/known hosts required (#73) * * make known-hosts required * * update CI * * update README * * update CHANGELOG * * update README * Feature/docs v2 (#80) * * update version in README * * update badge URL * * remove duplicated reference * * update versions * * fix CHANGELOG * * fix version
This commit is contained in:
parent
c01e9a6abf
commit
5f6cc712bb
12 changed files with 58 additions and 47 deletions
36
README.md
36
README.md
|
@ -25,11 +25,11 @@ Add your SSH key to your product secrets by clicking `Settings` - `Secrets` - `A
|
|||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Install SSH key
|
||||
uses: shimataro/ssh-key-action@v1
|
||||
uses: shimataro/ssh-key-action@v2
|
||||
with:
|
||||
private-key: ${{ secrets.SSH_KEY }}
|
||||
key: ${{ secrets.SSH_KEY }}
|
||||
name: id_rsa # optional
|
||||
known-hosts: ${{ secrets.KNOWN_HOSTS }} # known_hosts; optional
|
||||
known_hosts: ${{ secrets.KNOWN_HOSTS }}
|
||||
config: ${{ secrets.CONFIG }} # ssh_config; optional
|
||||
- name: rsync over ssh
|
||||
run: rsync ./foo/ user@remote:bar/
|
||||
|
@ -42,28 +42,28 @@ See [Workflow syntax for GitHub Actions](https://help.github.com/en/articles/wor
|
|||
If you want to install multiple keys, call this action multiple times.
|
||||
It is useful for port forwarding.
|
||||
|
||||
**NOTE:** When this action is called multiple times, **the contents of `known-hosts` and `config` will be appended**. `private-key` must be saved as different name, by using `name` option.
|
||||
**NOTE:** When this action is called multiple times, **the contents of `known_hosts` and `config` will be appended**. `key` must be saved as different name, by using `name` option.
|
||||
|
||||
```yaml
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Install SSH key of bastion
|
||||
uses: shimataro/ssh-key-action@v1
|
||||
uses: shimataro/ssh-key-action@v2
|
||||
with:
|
||||
private-key: ${{ secrets.SSH_KEY_OF_BASTION }}
|
||||
key: ${{ secrets.SSH_KEY_OF_BASTION }}
|
||||
name: id_rsa-bastion
|
||||
known-hosts: ${{ secrets.KNOWN_HOSTS_OF_BASTION }}
|
||||
known_hosts: ${{ secrets.KNOWN_HOSTS_OF_BASTION }}
|
||||
config: |
|
||||
Host bastion
|
||||
HostName xxx.xxx.xxx.xxx
|
||||
User user-of-bastion
|
||||
IdentityFile ~/.ssh/id_rsa-bastion
|
||||
- name: Install SSH key of target
|
||||
uses: shimataro/ssh-key-action@v1
|
||||
uses: shimataro/ssh-key-action@v2
|
||||
with:
|
||||
private-key: ${{ secrets.SSH_KEY_OF_TARGET }}
|
||||
key: ${{ secrets.SSH_KEY_OF_TARGET }}
|
||||
name: id_rsa-target
|
||||
known-hosts: ${{ secrets.KNOWN_HOSTS_OF_TARGET }} # will be appended!
|
||||
known_hosts: ${{ secrets.KNOWN_HOSTS_OF_TARGET }} # will be appended!
|
||||
config: | # will be appended!
|
||||
Host target
|
||||
HostName yyy.yyy.yyy.yyy
|
||||
|
@ -84,9 +84,7 @@ Check belows:
|
|||
* OPENSSH format (key begins with `-----BEGIN OPENSSH PRIVATE KEY-----`) may not work.
|
||||
* Use PEM format (begins with `-----BEGIN RSA PRIVATE KEY-----`).
|
||||
* `Host key verification failed.`:
|
||||
* Set `known-hosts` option or use `ssh -o StrictHostKeyChecking=no`.
|
||||
* The former is **HIGHLY** recommended for security reason.
|
||||
* I'm planning to make `known-hosts` required in v2.
|
||||
* Set `known_hosts` option correctly (use `ssh-keyscan` command).
|
||||
|
||||
### How do I use encrypted SSH key?
|
||||
|
||||
|
@ -104,7 +102,7 @@ I recommend **rsync via bastion**.
|
|||
It has some advantages over other methods:
|
||||
|
||||
* "Rsync via bastion" doesn't require to update workflow files and `secrets` even if it is necessary to transfer files to multiple servers.
|
||||
* Other methods require to update `known-hosts` if servers have changed.
|
||||
* Other methods require to update `known_hosts` if servers have changed.
|
||||
* Rsync:
|
||||
* is fastest of all.
|
||||
* does **NOT** break files even if disconnected during transferring.
|
||||
|
@ -125,15 +123,15 @@ The scripts and documentation in this project are released under the [MIT Licens
|
|||
|
||||
See [CHANGELOG.md](CHANGELOG.md).
|
||||
|
||||
[image-build]: https://github.com/shimataro/ssh-key-action/workflows/Build/badge.svg?event=push&branch=v1
|
||||
[image-build]: https://github.com/shimataro/ssh-key-action/workflows/Build/badge.svg?event=push&branch=v2
|
||||
[link-build]: https://github.com/shimataro/ssh-key-action/actions?query=workflow%3ABuild
|
||||
[image-verify-windows]: https://github.com/shimataro/ssh-key-action/workflows/Windows/badge.svg?event=push&branch=v1
|
||||
[image-verify-windows]: https://github.com/shimataro/ssh-key-action/workflows/Windows/badge.svg?event=push&branch=v2
|
||||
[link-verify-windows]: https://github.com/shimataro/ssh-key-action/actions?query=workflow%3AWindows
|
||||
[image-verify-macos]: https://github.com/shimataro/ssh-key-action/workflows/macOS/badge.svg?event=push&branch=v1
|
||||
[image-verify-macos]: https://github.com/shimataro/ssh-key-action/workflows/macOS/badge.svg?event=push&branch=v2
|
||||
[link-verify-macos]: https://github.com/shimataro/ssh-key-action/actions?query=workflow%3AmacOS
|
||||
[image-verify-ubuntu]: https://github.com/shimataro/ssh-key-action/workflows/Ubuntu/badge.svg?event=push&branch=v1
|
||||
[image-verify-ubuntu]: https://github.com/shimataro/ssh-key-action/workflows/Ubuntu/badge.svg?event=push&branch=v2
|
||||
[link-verify-ubuntu]: https://github.com/shimataro/ssh-key-action/actions?query=workflow%3AUbuntu
|
||||
[image-verify-ubuntu1604]: https://github.com/shimataro/ssh-key-action/workflows/Ubuntu%2016.04/badge.svg?event=push&branch=v1
|
||||
[image-verify-ubuntu1604]: https://github.com/shimataro/ssh-key-action/workflows/Ubuntu%2016.04/badge.svg?event=push&branch=v2
|
||||
[link-verify-ubuntu1604]: https://github.com/shimataro/ssh-key-action/actions?query=workflow%3A%22Ubuntu+16.04%22
|
||||
[image-release]: https://img.shields.io/github/release/shimataro/ssh-key-action.svg
|
||||
[link-release]: https://github.com/shimataro/ssh-key-action/releases
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue