nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Bitbucket Pipeline Host key verification failed. (Centos)

Nishantha Kumara

I'll try to set up the bitbucket pipeline for my deployments. I'll add the pipeline to the bitbucket repository and configure the SSH keys correctly with Known hosts. after that, I'll run the ssh commands every time getting Host key verification failed This is my pipeline configuration

image: php:7.2
pipelines: 
  default: 
    - step:
       name: "Logging to server"
       script:
           - apt-get update && apt-get install -y unzip
           - apt-get install -y openssh-client
           - echo "Trying to logging ..."
           - ssh root@ip

And I already added the generated(from bitbucket ssh section) public key to my server's ~/.ssh/authorized_keys file. How can fix the issue.? (centos 7 server)

Pseudo-terminal will not be allocated because stdin is not a terminal.Host key verification failed.

When I run

ssh-keyscan -t rsa bitbucket.org
bitbucket.org ssh-rsa AAAAB3NzaC1yc2EAAAAB ...

Thanks.

Accepted answers

Kevin_ifjlzr

1. go to -> Repository settings

2. go to -> SSH keys ( on the left navigation)

3. at the known hosts section

- input your Bastion host public IP address

- then click Fetch button

- rerun your pipeline

Please check this thread. https://community.atlassian.com/t5/Bitbucket-questions/read-passphrase-can-t-open-dev-tty-No-such-device-or-address/qaq-p/1774842

All comments

Dave Gilmore

Hi,

I faced a similar issue, when creating immutable infrastructure as part of my Pipeline.

I used the following to mitigate:

- terraform apply 
-auto-approve 
- ec2_public_ip=$(terraform output -json | jq -r '.public_dns.value') 
- echo $ec2_public_ip 
- ssh-keyscan -t rsa $ec2_public_ip >> ~/.ssh/known_hosts 
- pipe: atlassian/ssh-run:0.2.8 
variables: SSH_USER: 'fedora' 
SERVER: $ec2_public_ip 
COMMAND: 'curl ifconfig.me'

 
You could also create a step, that outputs a fingerprint artifact:

 - step: &get-fingerprint name: Get Host Fingerprint to add to known_hosts script: 
- ssh-keyscan -t rsa $ec2_public_ip > fingerprint 
artifacts: 
- fingerprint