actions/rsync-deployments
1
0
Fork 0
mirror of https://github.com/Burnett01/rsync-deployments.git synced 2026-09-21 18:04:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add host key verification and handling for strict host key checking

Browse Source
This commit is contained in:
Burnett01
2025-12-02 14:52:50 +00:00
parent e9f72e6ef0
commit 8e8f89cdc5
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
entrypoint.sh
+11
View File
@@ -28,6 +28,17 @@ fi
STRICT_HOSTKEYS_CHECKING="-o StrictHostKeyChecking=no" STRICT_HOSTKEYS_CHECKING="-o StrictHostKeyChecking=no"
if [ "${INPUT_STRICT_HOSTKEYS_CHECKING:-false}" = "true" ]; then if [ "${INPUT_STRICT_HOSTKEYS_CHECKING:-false}" = "true" ]; then
STRICT_HOSTKEYS_CHECKING="-o StrictHostKeyChecking=yes" STRICT_HOSTKEYS_CHECKING="-o StrictHostKeyChecking=yes"
key="$(ssh-keyscan -p "$INPUT_REMOTE_PORT" "$INPUT_REMOTE_HOST" 2>/dev/null)" || key=""
if [ -n "$key" ]; then
# fingerprint verification
echo "$key" | ssh-keygen -lf -
# add to known hosts
echo "$key" | while IFS= read -r line; do hosts-add "$line"; done
else
echo "Warning: failed to fetch host key for $INPUT_REMOTE_HOST" >&2
exit 1
fi
fi fi
RSH="ssh $STRICT_HOSTKEYS_CHECKING $LEGACY_RSA_HOSTKEYS -p $INPUT_REMOTE_PORT $INPUT_RSH" RSH="ssh $STRICT_HOSTKEYS_CHECKING $LEGACY_RSA_HOSTKEYS -p $INPUT_REMOTE_PORT $INPUT_RSH"