1
0
Fork 0
mirror of https://github.com/shimataro/ssh-key-action.git synced 2025-06-19 22:52:10 +10:00

update README

This commit is contained in:
shimataro 2021-03-08 22:02:59 +09:00
parent c31b1e4544
commit 7b4e14149a
No known key found for this signature in database
GPG key ID: BE92C05736911A9D

View file

@ -34,7 +34,7 @@ steps:
with: with:
key: ${{ secrets.SSH_KEY }} key: ${{ secrets.SSH_KEY }}
name: id_rsa # optional name: id_rsa # optional
known_hosts: ${{ secrets.KNOWN_HOSTS }} known_hosts: ${{ secrets.KNOWN_HOSTS }} # known_hosts; set to "no" in order to omit
config: ${{ secrets.CONFIG }} # ssh_config; optional config: ${{ secrets.CONFIG }} # ssh_config; optional
if_key_exists: fail # replace / ignore / fail; optional (defaults to fail) if_key_exists: fail # replace / ignore / fail; optional (defaults to fail)
- name: rsync over ssh - name: rsync over ssh
@ -97,6 +97,13 @@ Use `if_key_exists` parameter.
* `ignore`: does nothing * `ignore`: does nothing
* `fail`: fails (default) * `fail`: fails (default)
### Why is it required to set `known_hosts` to `no`? Isn't it better to make `known_hosts` just omitable?
It's for a heads up, in order not to omit without thinking.
You should understand that it is not secure to SSH with no `known_hosts` file and using `StrictHostKeyChecking=no` option.
And should set `known_hosts` to `no` ONLY IF you are using secure methods, such as SSHFP and signed server key.
### How do I use encrypted SSH key? ### How do I use encrypted SSH key?
This action doesn't support encrypted key directly. This action doesn't support encrypted key directly.