如何使用受密码保护的私钥执行盐状态git.latest

Question

I'm using salt to pull a git repo.

myrepo:
   git.latest:
     - rev: master
     - target: home/myuser/myapp
     - runas: myuser

I have added an id_rsa file into /home/myuser/.ssh/ , including the private key to authenticate to github. If this private key is not password protected the above git.latest state works fine.

If the private key is password protected (as it should be) the above git.latest state fails with the error message "fatal: The remote end hung up unexpectedly" . The reason that this state fails is that the system is asking for the private key password.

Now I'm wondering how I could tell my salt master to provide the password to the password protected private key. I think it should somehow work with a linux key chain util - or is there even some similar functionality build-in within saltstack?

Answer 1

I'd suggest that you use special key used only for that purpose. Github offers deploy keys for this very scenario: https://help.github.com/articles/managing-deploy-keys

They are easily set up and easily revoked.