nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How we supposed to deploy on private premises with Pipelines?

zaitsxl

Hi,

in various manuals you take Python product as example and you use PyPi to publish artifact. However that is not the only case that can occur. We have PHP application and we want to deploy directly to our private cloud, like we used to do with Bamboo. Exposing FTP is not an option since it's a nice security breach. What can you advise?

Regards,

Alexander

Accepted answers

All comments

evzijst

We don't recommend any particular approach, but a typical way of pushing something into your own (Internet exposed) server would be to have a webserver with some form of authentication that you can POST to from within the Pipelines container. You can make the credentials available to the container through the use of Pipelines variables.

If you want something SSH based, you could SCP the files directly.

zaitsxl

Hi,

thanx for your reply. All suggested approaches assume some service (SSH, SCP, FTP, etc.) should be exposed to outside. That is a security breach. For publicly available webserver using POST is relatively fine, however some servers are not supposed to be available from outside at all.

Let me explain what we expected. For example in Bamboo Cloud build agents were inside the same private network with target servers and so they could access them directly. I tried to build my own container with OpenVPN client built in and connected to our premise on container startup. That however didn't work since running OpenVPN in a container needs escalated privileges and you obviously do not provide those.

So is there any way to use Pipelines safely?

Regards,

Alexander

zaitsxl

Hi,

so no suggestions or recommendations?

Regards,

Alxander

unknown

I'm looking for this as well.

Helder Dias_4zc2vv

Is there any form of an agent to be ran on the private network (like Azure DevOps) so that i don't need to expose any kind of port to the internet from my infrastructure ?

Victor Chavez_w74kbi

We are using Bitbucket pipelines for our repositories, Pull Request, reviews, you know the usual, and pre-flight builds before merging into master. We are using Azure Pipelines to deploy to on-prem and to Azure as well as AWS. 2 tools but the job gets done nicely.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket-cloud

bitbucket-pipelines

bitbucket-administration