OpenShift Jenkins git clone 失败：主机密钥验证失败

Question

I try to build my Node JS (latest version) application in Jenkins in the Red Hat OpenShift environment but it continues to fail with this message in the Jenkins log:

Host key verification failed.
fatal: Could not read from remote repository.

Upon further investigation it turns out the Jenkins server cannot clone the repo from the application server:

[JENKINS_HOST test]\> git clone ssh://GUID@APP_HOST/~/git/sof.git
    Cloning into 'sof'...
    The authenticity of host 'APP_HOST (172.16.6.220)' can't be established.
    RSA key fingerprint is cf:ee:77:cb:0e:fc:02:d7:72:7e:ae:80:c0:90:88:a7.
Are you sure you want to continue connecting (yes/no)? yes
    Failed to add the host to the list of known hosts  (/var/lib/openshift/GUID/.ssh/known_hosts).
Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights and the repository exists.

I cannot even enter the .ssh directory on the Jenkins host.

Take it the OpenShift app management should handle all the private keys between the app and the CI host but doesn't seem to be working.

Any ideas?
I've searched all over the web but OpenShift-specific scenarios are not common.

Answer 1

This can be done with custom cartridge https://cartreflect-claytondev.rhcloud.com/reflect?github=smerrill/openshift-community-git-ssh The cartridge creates script and sets the GIT_SSH environment variable to run git-ssh without strict host key checking.

So,

1. Install the cartridge with your Openshift web-console to your jenkins application (Applications / jenkins / "Or, see the entire list of cartridges you can add", put the link into "Install your own cartridge" field)
2. Connect to jenkins application via ssh: ssh @jenkins-.rhcloud.com
3. cd ${OPENSHIFT_DATA_DIR}/git-ssh/
4. ssh-keygen
   4.1. Set key file ./id_rsa
   4.2. Leave password empty
   This creates files id_rsa and id_rsa.pub in ${OPENSHIFT_DATA_DIR}/git-ssh/ directory
5. Print your id_rsa.pub: cat id_rsa.pub
6. Copy the contents of id_rsa.pub
7. In Openshift web console go to Settings, add new public key
8. Fill key name and paste the contents of id_rsa.pub into second field, press "Create"
9. Restart jenkins application

Now git clone must be ok

Answer 2

If you don't need to commit change the protocol to http and you will not need to use ssh keys since it should be read-only if your server allow you and support this protocol.

If you must use ssh they you must set-up the ssh keys. No way to "skip" it.

Answer 3

if anyone gets here and he just can't get his private repo to be cloned on openshift. Not with SSH and not with HTTP. Iv'e got a simple solution that works great. Clone with http and add your token to the repo link eg

git clone https://<token>@github.com/owner/repo.git