加载密钥：权限被拒绝詹金斯

Question

I am trying to run a multibranch job in jenkins . Codes are placed in git. While running the job I am getting access rights issue. While generating the ssh-keygen in jenkins getting the permission denied error.

Configuring in ubuntu box.

1. Tried copying the id_rsa and id_rsa.pub from /root/.ssh but its doesnt copy anything in id_rsa or allow to edit the file manually.

 git ls-remote -h git@github.com:****/*****1.git HEAD
The authenticity of host 'github.com ("IP Address")' can't be established.
RSA key fingerprint is SHA256:********************Y8.
Are you sure you want to continue connecting (yes/no)? yes
Failed to add the host to the list of known hosts (/var/lib/jenkins/.ssh/known_hosts).
Load key "/var/lib/jenkins/.ssh/id_rsa": Permission denied
Permission denied (publickey).
fatal: Could not read from remote repository.

Answer 1

Load key "/var/lib/jenkins/.ssh/id_rsa": Permission denied is about reading the local private ssh key on your local file system, and has nothing to do with the remote server.

Make sure that you have read permission for your ssh key. (I experienced this issue when my key was encrypted by my Windows host, but my Docker container couldn't decrypt it.)

You could also always just generate a new key and try that one.

Answer 2

This error is coming because you might have copied the id_rsa file into the location /var/lib/jenkins/.ssh/ . You might have copied the file either from local machine to the remove server or created the keys at root level. So file "id_rsa" have owner as root and you are trying to access this file from your jenkins. Jenkins should be the owner to read the file. Below are the steps to check and fix this issue

1. SSH into jenkins server and first run command sudo su and then go inside /var/lib/jenkins/.ssh/ .
2. Run command ls -la
3. you will see owner as root root of id_rsa file like -r--------. 1 root root 18 Sep 1 10:00 id_rsa -r--------. 1 root root 18 Sep 1 10:00 id_rsa
4. Run command chown jenkins:jenkins id_rsa . This command will change owner of the file from root to jenkins. Now the same line looks like -r--------. 1 jenkins jenkins 18 Sep 1 10:01 id_rsa -r--------. 1 jenkins jenkins 18 Sep 1 10:01 id_rsa
5. Now trying running the jenkins job again, it will successfully run.
6. Make sure your id_rsa file should have right permissions. If not for safer side do chmod 400 id_rsa

I have solved the issue by following above steps.