nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Permission denied for SSH on Pipelines

maximilianruediger

Hi there,

I followed this guideline to create a new SSH key for my repo:

https://confluence.atlassian.com/bitbucket/use-ssh-keys-in-bitbucket-pipelines-847452940.html

I created it in the repo settings (also added the server to the known hosts) and added the public key on the remote server.

Now, I want to access my remote server in a Bitbucket Pipeline via:

ssh -T user@XX.XX.XX.XX rm testfile

But I stuck on that:

<span>Permission denied, please try again.<br></span><span>Permission denied (publickey,password).</span><span>Permission denied, please try again.<br></span>

Where is the fault that I cannot access my remote server to execute the command?

Thanks a lot

Accepted answers

Philip Hodder

Hi Max,

Can you try do a quick check that the connection works:

<span>$ ssh </span><span>-</span><span>qT user@downhost exit
$ echo $</span><span>?<br>// Should be 0</span>

Your user may not have permission to modify files, so it'll be good to remove that factor first. If you get a 0, then double check the permissions of the user you're SSH'ing as.

If not, you can also double check you have whitelisted the necessary Pipelines IP's.

Thanks,

Phil

All comments

Philip Hodder

Hi Max,

Can you try do a quick check that the connection works:

<span>$ ssh </span><span>-</span><span>qT user@downhost exit
$ echo $</span><span>?<br>// Should be 0</span>

Your user may not have permission to modify files, so it'll be good to remove that factor first. If you get a 0, then double check the permissions of the user you're SSH'ing as.

If not, you can also double check you have whitelisted the necessary Pipelines IP's.

Thanks,

Phil

Olusiji David

Hi Philip,

Im having this same issue, i ran the commands you stated and i got a 0, but i still get the permission denied error. Please any suggestions what might be wrong?

Philip Hodder

@Olusiji David,

Can you try run this instead. I forgot there's an edge case with the way error codes work.

<span>$ ssh </span><span>-</span><span>qT user@downhost exit; echo $?</span>

Thanks

Mark Drew_0l3tdl

I struggled with this for a day and followed all the comments without it working.

The one thing that eventually worked for me was letting bitbucket create the private and public keys and using those instead of the ones I created myself.

I then added the public key (as it says ) to the server's `~/.ssh/authorized_keys` file (as a new line)

It all then worked.

Sebastian Erdt

Hi Philip,

Where exactly is this command to be executed? In the bitbucket-pipelines.yml file or on the remote computer? Do I have to customize user@downhost or leave it in the command?

<span>$ ssh </span><span>-</span><span>qT user@downhost exit
$ echo $</span><span>?<br>// Should be 0</span>

When I run this on the remote computer I get a value of 255. What should I do afterwards?

Sorry for the many questions, but I am still a beginner in the field.

Thanks,

Sebastian

panter122

Thank you, helped me a lot!

misobelica

For me, the problem was at the target server. I needed to set `chmod 0775 ~/.ssh` so the server started accepting the SSH auth for the user.

ewertoncardoso

Thank you! Works for me!

William Odiomonafe

Also worked for me too

jfranklin

user beware: this locked me out of my server

wuppr

This may be applicable to many individuals who are using newer operating system versions.

To determine whether this applies to you, it is recommended that you check your SSH logs. You can locate these logs at /var/log/auth.log (for Ubuntu) and search for the following message:
"userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]".

If you come across this log message, it is likely that you will need to upgrade your SSH key (used in the pipeline) to a newer and more stringent algorithm, such as ED25519. You can generate a new ED25519 key and add both the public and private keys to the Repo settings -> Pipelines -> SSH Keys. Finally, use the public key in the authorized_keys of your remote server.

I hope this information is helpful. I spent several hours searching for this problem and ultimately found it by examining the SSH logs.

More info: https://confluence.atlassian.com/bitbucketserverkb/ssh-rsa-key-rejected-with-message-no-mutual-signature-algorithm-1026057701.html

Angelos Naoum

Thank god! I was struggling for hours...this is the issue I had as well

mortenbak

Thank you! This was exactly what I needed!

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud

bitbucket-pipelines