无法使用ssh通过Concourse克隆git存储库

Question

We are using a Concourse instance deployed to and EC2 instance using docker-compose, as outlined here .

Things are mostly working well. However, we can't seem to clone git resources using SSH. We get this error:

resource script '/opt/resource/check []' failed: exit status 128

stderr:
Identity added: /tmp/git-resource-private-key (/tmp/git-resource-private-key)
Cloning into '/tmp/git-resource-repo-cache'...
fatal: Could not read from remote repository.

Please make sure you have the correct access rights and the repository exists.

We've used Concourse in the past, so we're reasonably sure that we have the resource configured correctly, but I've attached a sample as well.

- name: vision_build
  type: git
  source:
    private_key: |
      -----BEGIN RSA PRIVATE KEY-----
      ***************************
      -----END RSA PRIVATE KEY-----
    uri: git@github.com:someorg/someapp.git

Cloning works correctly with username/password authentication, but we'd like to use read only deploy keys.

Another symptom that we are seeing is the inability to hijack our jobs. It's unclear if they are connected, but seems possible given that they both have to do with SSH. Hijack comes back with this message:

error: websocket: bad handshake

Answer 1

Upgrading my comment to an answer.

is your private key's corresponding puiblic key configured on the github side under someorg/someapp ? Either as a deployment key, or as a user in your org dedicated to that activity? Sounds to me like you didn't add access for the key in github.