I have GitLab & GitLab CI set up to host and test some of my private repos. For my composer modules under this system, I have Satis set up to resolve my private packages.
Obviously these private packages require an ssh key to clone them, and I have this working in the terminal – I can run composer install and get these packages, so long as I have the key added with ssh-add
in the shell.
However, when running my tests in GitLab CI, if a project has any of these dependencies the tests will not complete as my GitLab instance needs authentication to get the deps (obviously), and the test fails saying Host key verification failed
.
My question is how do I set this up so that when the runner runs the test it can authenticate to gitlab without a password? I have tried putting a password-less ssh-key in my runners ~/.ssh
folder, however the build wont even add the key, "eval ssh-agent -s
" followed by ssh-add seems to fail saying the agent isn't running…
Best Answer
See also other solutions:
Here a full howto with SSH keys:
General Design
Generating a pair of public and private SSH keys
Generate a pair of public and private SSH keys without passphrase:
Adding the private SSH key to your project
You need to add the key as a secure environment variable to your project as following:
https://<gitlab_host>/<group>/<project_name>/variables
Key
withSSH_PRIVATE_KEY
Value
with the private SSH key itselfExposing the private SSH key to your test scripts
In order to make your private key available to your test scripts you need to add the following to your
.gitlab-ci.yml
file:Code Snippet comes from GitLab documentation
Adding the public SSH key as a deploy key to all your private dependencies
You need to register the public SSH key as deploy key to all your private dependencies as following:
https://<gitlab_host>/<group>/<dependency_name>/deploy_keys
Title
with the name of your projectKey
with the public SSH key itself