通过PHP和SSH进行Git：拒绝对用户apache的ssh身份验证

Question

I have the following setup: CentOS 6.5, git (client), apache 2.2, running test site etc. Goal is to create a remote browser-level access to execute "git pull". There is a general way to implement such thing using PHP. Lets say I have 2 scripts, one is php (it's being called to be executed directly via browser), another is shell scripts - gitpull.php and gitpull.sh, respectively.

gitpull.php (it's in the same folder as index.php) contents:

<?php
$message=shell_exec("/var/www/html/...PATH-TO-INDEX.PHP.../gitpull.sh 2>&1");
?>

---

gitpull.sh contents:

cd /var/www/html/...PATH-TO-FOLDER-WHERE-.GIT-WAS-INITIALIZED
git pull origin master:master

---

As I understand it, by calling up a php script all the following actions are to be performed as "apache" user, hence I have rsa keys created via sudo -u apache ssh-keygen -t rsa . Both keys are in ~/.ssh directory (apache is set up to access them), as well as copies in /var/www (apache home folder by default, I did it to avoid confusion in case apache uses keys only from there). I assume the location of keys does not matter as long as they are registered in sss using "ssh-add". Apache has permissions to access all relevant files/folders.

I figured that my problem is not in scripting, so I decided to check:

# ssh -T git@bitbucket.org

(works great, key is accepted), then

# sudo -u apache ssh -T git@bitbucket.org

returns

Permission denied (publickey).

Question: what did I miss in my setup? Why apache cannot be identified by its ssh key? If I'm wrong in working derictories, then where the keys must be in order for apache to use them with ssh? Could it help scripting ssh access in some customized way?

Answer 1

您是否在您的bitbucket帐户中添加了ssh公钥？

Answer 2

To debug the issue, I ran: sudo -u www-data php git.php

This answer help by showing how to debug! https://stackoverflow.com/a/13097666/2614353