Permission denied (publickey) at master server update

17 views
Skip to first unread message

Jennifer Strejevitch

unread,
Jul 18, 2017, 11:37:38 AM7/18/17
to elife-continuum-list
the repository bellow and a few public ones show that I got Permission denied. I created deploy key, add my ssh public key to my Github account too. Do I need to add any key from the server itself? 


ID: chemist-repository
[54.145.123.214] out:     Function: builder.git_latest
[54.145.123.214] out:         Name: g...@github.com:elifesciences/chemist.git
[54.145.123.214] out:       Result: False
[54.145.123.214] out:      Comment: Failed to check remote refs: Unable to authenticate using identity file:
[54.145.123.214] out:
[54.145.123.214] out:               Permission denied (publickey).
[54.145.123.214] out:
[54.145.123.214] out:               fatal: Could not read from remote repository.
[54.145.123.214] out:
[54.145.123.214] out:               Please make sure you have the correct access rights
[54.145.123.214] out:               and the repository exists.
[54.145.123.214] out:      Started: 15:10:39.827852
[54.145.123.214] out:     Duration: 4041.437 ms
[54.145.123.214] out:      Changes:

Giorgio Sironi

unread,
Jul 18, 2017, 11:50:05 AM7/18/17
to Jennifer Strejevitch, elife-continuum-list
This is the master-server instance; I guess this because chemist is only deployed there, but the problem has nothing specific to the master-server so it would replicate elsewhere.
The state failing is at [1] and uses:
    - identity: {{ pillar.elife.projects_builder.key or '' }}
like many others in the formulas.

Check [2] in your builder-private to see where it points to, by default it should be at [3].

This should be a private key with access to Github (that is configured in any Github user). The repositories are public, but to use the SSH protocol a key known to Github is needed. For example you can add that key (actually you add the corresponding public key) to your own Github user, or create one on purpose for a more secure setup.

[1] https://github.com/elifesciences/master-server-formula/blob/master/salt/master-server/init.sls#L14
[2] https://github.com/elifesciences/builder-private-example/blob/master/pillar/elife.sls#L23
[3] https://github.com/elifesciences/builder-private-example/blob/master/salt/elife/config/projects-builder-pem


--
You received this message because you are subscribed to the Google Groups "elife-continuum-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elife-continuum-list+unsub...@googlegroups.com.
To post to this group, send email to elife-continuum-list@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elife-continuum-list/3f84a9dc-3b61-4fd2-a3f0-19c94fe21436%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
Giorgio Sironi
@giorgiosironi
Reply all
Reply to author
Forward
0 new messages