Bitbucket CI/CD vs Remote Server

[Arthur Harutyunyan]

Hey Community !!

Im new in Bitbucket Pipelines, now want to setup a simple pipeline to deploy my code to the remote server. What I did:

1. I dont have root permission on my remote server, and connecting with username@host
2. Generated ssh-keys, added the .pub one to the repo "Access Keys"
3. Generated ssh-key pairs in repository settings, and added the public one to my authorized keys 

There are 2 issues Im facing right now:

1. When trying to fetch the fingerprint of the remote host, getting "Unable to fetch fingerprints, check host SSH connection and try again". Here Im passing the IP address 
2. And my pipeline just does not work, this is probably because of 1)

And this is my .ym file:

pipelines:

default:

- step:

name: Deploy to production

deployment: production

script:

- echo "Deploying to staging environment"

- pipe: atlassian/ssh-run:0.2.2

variables:

SSH_USER: 'myuser'

SERVER: 'xx.yy.zz.qq'

COMMAND: touch /home/myuser/file.txt

Just trying to create a file in my home directory

Can you please help me to figure out what Im doing wrong here, and how can I fix the issue. I could not find any useful info to fix the issue

Thanks, 

Arthur

[Patrik S]

Hello @Arthur Harutyunyan ,

Thank you for reaching out to Atlassian Community.

The fetch fingerprint usually fails when bitbucket is being blocked to access your server because of a firewall.

In this case, could you please make sure that : 

• Your server IP address is accessible from the internet
• You have whitelisted all the below IPs in your firewall :
  https://support.atlassian.com/bitbucket-cloud/docs/what-are-the-bitbucket-cloud-ip-addresses-i-should-use-to-configure-my-corporate-firewall/
• Port 22 is opened in your ssh server, so bitbucket can connect to it.

You can also execute the below commands both locally and in the pipelines to check if there's any connection issue between the pipelines infrastructure and your ssh host :

nmap -v -Pn <IP ADDRESS of the host> -p 22
ssh-keyscan -t rsa <IP ADDRESS of the host>

 Hope that helps! Let me know in case you have any questions or run into any issues.

Thank you, @Arthur Harutyunyan .

Kind regards,

Patrik S