mirror of
https://github.com/shimataro/ssh-key-action.git
synced 2025-06-19 22:52:10 +10:00
update README
This commit is contained in:
parent
c31b1e4544
commit
7b4e14149a
1 changed files with 8 additions and 1 deletions
|
@ -34,7 +34,7 @@ steps:
|
||||||
with:
|
with:
|
||||||
key: ${{ secrets.SSH_KEY }}
|
key: ${{ secrets.SSH_KEY }}
|
||||||
name: id_rsa # optional
|
name: id_rsa # optional
|
||||||
known_hosts: ${{ secrets.KNOWN_HOSTS }}
|
known_hosts: ${{ secrets.KNOWN_HOSTS }} # known_hosts; set to "no" in order to omit
|
||||||
config: ${{ secrets.CONFIG }} # ssh_config; optional
|
config: ${{ secrets.CONFIG }} # ssh_config; optional
|
||||||
if_key_exists: fail # replace / ignore / fail; optional (defaults to fail)
|
if_key_exists: fail # replace / ignore / fail; optional (defaults to fail)
|
||||||
- name: rsync over ssh
|
- name: rsync over ssh
|
||||||
|
@ -97,6 +97,13 @@ Use `if_key_exists` parameter.
|
||||||
* `ignore`: does nothing
|
* `ignore`: does nothing
|
||||||
* `fail`: fails (default)
|
* `fail`: fails (default)
|
||||||
|
|
||||||
|
### Why is it required to set `known_hosts` to `no`? Isn't it better to make `known_hosts` just omitable?
|
||||||
|
|
||||||
|
It's for a heads up, in order not to omit without thinking.
|
||||||
|
|
||||||
|
You should understand that it is not secure to SSH with no `known_hosts` file and using `StrictHostKeyChecking=no` option.
|
||||||
|
And should set `known_hosts` to `no` ONLY IF you are using secure methods, such as SSHFP and signed server key.
|
||||||
|
|
||||||
### How do I use encrypted SSH key?
|
### How do I use encrypted SSH key?
|
||||||
|
|
||||||
This action doesn't support encrypted key directly.
|
This action doesn't support encrypted key directly.
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue