Jenkins 权限被拒绝从 Jenkins CLI 访问 pem 密钥 - 尝试从 jenkins 实例登录另一个实例
[英]Jenkins Permission denied accessing pem key from Jenkins CLI - Try to make the loging another instance from jenkins instance
问题描述
I have 2 instance in AWS EC2.
我在 AWS EC2 中有 2 个实例。 1 is for Jenkins 1 is for Angular 6. I am trying to build the pipe line from Jenkins instance to Another EC2 instance where my Angular 6 application is hosting. 1 适用于 Jenkins 1 适用于 Angular 6。我正在尝试构建从 Jenkins 实例到我的 Angular 6 应用程序托管的另一个 EC2 实例的管道。
What Exactly I am trying to do here, if any push got happened in my Bitbucket repo, Jenkins will identify that login to another EC2 instance via ssh -i user@ip and pull the code from master branch and deploy it via pm2.我到底想在这里做什么，如果在我的 Bitbucket 存储库中发生任何推送，Jenkins 将通过 ssh -i user@ip 识别该登录到另一个 EC2 实例，并从 master 分支中提取代码并通过 pm2 部署它。
Currently I'm facing the problem -目前我面临的问题 -
Jenkins logs -詹金斯日志 -
Started by user Atique Ahmed Running as SYSTEM Building in workspace /var/lib/jenkins/workspace/meanstack No credentials specified由用户 Atique Ahmed 启动 在工作区 /var/lib/jenkins/workspace/meanstack 中以系统身份运行 未指定凭据
git rev-parse --is-inside-work-tree # timeout=10 Fetching changes from the remote Git repository git config remote.origin.url https://bitbucket.org/atique12/mongocrud_application_frnt_end.git # timeout=10 Fetching upstream changes from https://bitbucket.org/atique12/mongocrud_application_frnt_end.git git --version # timeout=10 git fetch --tags --progress -- https://bitbucket.org/atique12/mongocrud_application_frnt_end.git +refs/heads/:refs/remotes/origin/ # timeout=10 git rev-parse refs/remotes/origin/master^{commit} # timeout=10 git rev-parse refs/remotes/origin/origin/master^{commit} # timeout=10 Checking out Revision a7df8023cebbbac998274628bc761ea68da62da0 (refs/remotes/origin/master) git config core.sparsecheckout # timeout=10 git checkout -f a7df8023cebbbac998274628bc761ea68da62da0 # timeout=10 Commit message: "form.component.html edited online with Bitbucket" git rev-list --no-walk a7df8023cebbbac998274628bc761ea68da62da0 # timeout=10 [meanstack] $ /bin/bash /tmp/jenkins69726072
My Jenkins is not able to read the pem key file我的 Jenkins 无法读取 pem 密钥文件
while I am trying to make the login using SSH and pem key to another instance.当我尝试使用 SSH 和 pem 密钥登录另一个实例时。
I have tried -我试过了 -
chmod 400 - mypem.key chmod 600 - mypem.key chmod 777 - mypem.key
No help.没有帮助。 Every time I am getting permission denied issue.每次我得到许可被拒绝的问题。 Any help ?有什么帮助吗？
1 个解决方案
解决方案1
1 2021-02-25 06:37:37
Jenkins run the jobs under jenkins user. Jenkins 在 jenkins 用户下运行作业。 Jenkins user does not have the permission to read the files from other directories. Jenkins 用户无权从其他目录读取文件。 Also you need to run chmod command with sudo.您还需要使用 sudo 运行 chmod 命令。 If you are trying to run commands from Jenkinsfile with sudo, then it won't work.如果您尝试使用 sudo 从 Jenkinsfile 运行命令，那么它将不起作用。 For that you need to edit the sudoers file.为此，您需要编辑 sudoers 文件。 It will give access to jenkins user to run sudo commands without password.它将允许 jenkins 用户在没有密码的情况下运行 sudo 命令。 How to change and what to change can be found here .可以在此处找到如何更改以及更改内容。
One more thing, if you are trying to run shh command from jenkinsfile to connect to other ec2 instance, then simple sh "ssh -i pem.key user@ip" won't work.还有一件事，如果您尝试从 jenkinsfile 运行 shh 命令以连接到其他 ec2 实例，那么简单的sh "ssh -i pem.key user@ip"将不起作用。 You need to disable the verification by assigning StrictHostKeyChecking to no ie ssh -o "StrictHostKeyChecking no" -i pem.key user@ip您需要通过将StrictHostKeyChecking分配给no ie ssh -o "StrictHostKeyChecking no" -i pem.key user@ip来禁用验证
声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.