21 Commits

Author SHA1 Message Date
26dd2b3a38 chore: upgrade drone-ssh to 1.5.6
Some checks failed
remote ssh command / Build (push) Failing after 6s
2020-04-16 22:24:18 +08:00
122f35dca5 chore: improve ci workflow (#34) 2020-02-13 21:20:15 +08:00
03b5d10ad6 docs: update desctiption 2020-02-13 21:17:09 +08:00
fcfb760891 docs: add GitHub syntax (#30)
see: https://help.github.com/en/actions/automating-your-workflow-with-github-actions/contexts-and-expression-syntax-for-github-actions

fixed: https://github.com/appleboy/ssh-action/issues/28
2020-02-09 11:37:56 +08:00
fd81fae289 chore: echo sha string 2020-02-09 11:29:31 +08:00
242a8e2e57 chore: Add Contexts and expression example 2020-02-09 11:25:59 +08:00
cfe9c45db6 docs: sync parameter (#25) 2020-01-30 22:40:33 +08:00
73767290ca docs: add passphrase example
Some checks failed
remote ssh command / Build (push) Failing after 4s
2019-12-30 19:54:28 +08:00
e5c07fceef support passphrase (#18)
* support passphrase

Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>
2019-12-30 19:50:55 +08:00
d690bdebf8 docs: update multiple env example 2019-12-08 07:16:30 +08:00
f478af9b34 docs: pass multiple environment 2019-12-07 20:19:23 +08:00
d520c19f4f docs: support proxy command (#15)
docs: support proxy command
2019-12-07 20:15:58 +08:00
0dee98b334 docs: support proxy command 2019-12-07 20:05:02 +08:00
9085f3ea5b chore: update default timeout to 10 minutes
Some checks failed
remote ssh command / Build (push) Failing after 5s
2019-11-30 23:01:49 +08:00
696aab4627 fix typos in README.md (#12)
fix typos in README.md
2019-11-23 12:12:53 +08:00
a88f6f2013 fix typos in README.md 2019-11-21 15:53:08 +01:00
6f091cd9e3 chore(ssh): remove comma splitting
Some checks failed
remote ssh command / Build (push) Failing after 4s
fix https://github.com/appleboy/ssh-action/issues/10
2019-11-21 11:10:52 +08:00
aa1ecdd19a update doc
Some checks failed
remote ssh command / Build (push) Failing after 3s
Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>
2019-09-30 16:55:40 +08:00
bffdd4e1f4 chore(ssh): set default port as 22
fix: https://github.com/appleboy/ssh-action/issues/5

Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>
2019-09-30 16:54:44 +08:00
f4890bec77 update action link
Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>
2019-09-30 11:35:28 +08:00
9aaf218321 docs: update readme 2019-09-29 14:16:47 +08:00
4 changed files with 237 additions and 63 deletions

View File

@ -6,8 +6,11 @@ jobs:
name: Build name: Build
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout
uses: actions/checkout@v1
- name: executing remote ssh commands using password - name: executing remote ssh commands using password
uses: appleboy/ssh-action@master uses: ./
with: with:
host: ${{ secrets.HOST }} host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }} username: ${{ secrets.USERNAME }}
@ -16,7 +19,7 @@ jobs:
script: whoami script: whoami
- name: executing remote ssh commands using ssh key - name: executing remote ssh commands using ssh key
uses: appleboy/ssh-action@master uses: ./
with: with:
host: ${{ secrets.HOST }} host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }} username: ${{ secrets.USERNAME }}
@ -25,7 +28,7 @@ jobs:
script: whoami script: whoami
- name: multiple command - name: multiple command
uses: appleboy/ssh-action@master uses: ./
with: with:
host: ${{ secrets.HOST }} host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }} username: ${{ secrets.USERNAME }}
@ -36,17 +39,19 @@ jobs:
ls -al ls -al
# - name: stop script if command error # - name: stop script if command error
# uses: appleboy/ssh-action@master # uses: ./
# with: # with:
# host: ${{ secrets.HOST }} # host: ${{ secrets.HOST }}
# username: ${{ secrets.USERNAME }} # username: ${{ secrets.USERNAME }}
# key: ${{ secrets.KEY }} # key: ${{ secrets.KEY }}
# port: ${{ secrets.PORT }} # port: ${{ secrets.PORT }}
# script_stop: true # script_stop: true
# script: "mkdir abc/def,ls -al" # script: |
# mkdir abc/def
# ls -al
- name: pass environment - name: pass environment
uses: appleboy/ssh-action@master uses: ./
env: env:
FOO: "BAR" FOO: "BAR"
with: with:
@ -56,5 +61,34 @@ jobs:
port: ${{ secrets.PORT }} port: ${{ secrets.PORT }}
envs: FOO envs: FOO
script: | script: |
echo "I am $FOO" echo "I am $FOO, thanks"
echo "I am $BAR" echo "I am $BAR, thanks"
- name: pass multiple environment
uses: ./
env:
FOO: "BAR"
BAR: "FOO"
SHA: ${{ github.sha }}
with:
host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }}
key: ${{ secrets.KEY }}
port: ${{ secrets.PORT }}
envs: FOO,BAR,SHA
script: |
echo "I am $FOO, thanks"
echo "I am $BAR, thanks"
echo "sha: $SHA"
- name: ssh key passphrase
uses: ./
with:
host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }}
key: ${{ secrets.SSH2 }}
port: ${{ secrets.PORT }}
passphrase: ${{ secrets.PASSPHRASE }}
script: |
whoami
ls -al

View File

@ -1,4 +1,4 @@
FROM appleboy/drone-ssh:1.5.2-linux-amd64 FROM appleboy/drone-ssh:1.5.6-linux-amd64
ADD entrypoint.sh /entrypoint.sh ADD entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh RUN chmod +x /entrypoint.sh

216
README.md
View File

@ -1,6 +1,6 @@
# 🚀 SSH for GitHub Actions # 🚀 SSH for GitHub Actions
[GitHub Action](https://developer.github.com/actions/) for executing remote ssh commands. [GitHub Action](https://github.com/features/actions) for executing remote ssh commands.
![ssh workflow](./images/ssh-workflow.png) ![ssh workflow](./images/ssh-workflow.png)
@ -11,14 +11,22 @@
Executing remote ssh commands. Executing remote ssh commands.
```yaml ```yaml
- name: executing remote ssh commands using password name: remote ssh command
uses: appleboy/ssh-action@master on: [push]
with: jobs:
host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }} build:
password: ${{ secrets.PASSWORD }} name: Build
port: ${{ secrets.PORT }} runs-on: ubuntu-latest
script: whoami steps:
- name: executing remote ssh commands using password
uses: appleboy/ssh-action@master
with:
host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }}
password: ${{ secrets.PASSWORD }}
port: ${{ secrets.PORT }}
script: whoami
``` ```
output: output:
@ -28,21 +36,23 @@ output:
whoami whoami
======END====== ======END======
out: *** out: ***
========================================== ==============================================
Successfully executed commands to all host. Successfully executed commands to all host.
========================================== ==============================================
``` ```
## Input variables ## Input variables
see the [action.yml](./action.yml) file for more detail imformation. See [action.yml](./action.yml) for more detailed information.
* host - scp remote host * host - ssh host
* port - scp remote port * port - ssh port, default is `22`
* username - scp username * username - ssh username
* password - scp password * password - ssh password
* passphrase - the passphrase is usually to encrypt the private key
* sync - synchronous execution if multiple hosts, default is false
* timeout - timeout for ssh to remote host, default is `30s` * timeout - timeout for ssh to remote host, default is `30s`
* command_timeout - timeout for scp command, default is `1m` * command_timeout - timeout for ssh command, default is `10m`
* key - content of ssh private key. ex raw content of ~/.ssh/id_rsa * key - content of ssh private key. ex raw content of ~/.ssh/id_rsa
* key_path - path of ssh private key * key_path - path of ssh private key
* script - execute commands * script - execute commands
@ -50,6 +60,17 @@ see the [action.yml](./action.yml) file for more detail imformation.
* envs - pass environment variable to shell script * envs - pass environment variable to shell script
* debug - enable debug mode * debug - enable debug mode
SSH Proxy Setting:
* proxy_host - proxy host
* proxy_port - proxy port, default is `22`
* proxy_username - proxy username
* proxy_password - proxy password
* proxy_passphrase - the passphrase is usually to encrypt the private key
* proxy_timeout - timeout for ssh to proxy host, default is `30s`
* proxy_key - content of ssh proxy private key.
* proxy_key_path - path of ssh proxy private key
### Example ### Example
Executing remote ssh commands using password. Executing remote ssh commands using password.
@ -98,45 +119,140 @@ Multiple Commands
Multiple Hosts Multiple Hosts
```diff ```diff
uses: appleboy/ssh-action@master - name: multiple host
with: uses: appleboy/ssh-action@master
- host: "foo.com" with:
+ host: "foo.com,bar.com" - host: "foo.com"
username: ${{ secrets.USERNAME }} + host: "foo.com,bar.com"
key: ${{ secrets.KEY }} username: ${{ secrets.USERNAME }}
port: ${{ secrets.PORT }} key: ${{ secrets.KEY }}
script: | port: ${{ secrets.PORT }}
whoami script: |
ls -al whoami
ls -al
```
Synchronous execution on multiple hosts
```diff
- name: multiple host
uses: appleboy/ssh-action@master
with:
host: "foo.com,bar.com"
+ sync: true
username: ${{ secrets.USERNAME }}
key: ${{ secrets.KEY }}
port: ${{ secrets.PORT }}
script: |
whoami
ls -al
``` ```
Pass environment variable to shell script Pass environment variable to shell script
```diff ```diff
uses: appleboy/ssh-action@master - name: pass environment
+ env: uses: appleboy/ssh-action@master
+ FOO: "BAR" + env:
with: + FOO: "BAR"
host: ${{ secrets.HOST }} + BAR: "FOO"
username: ${{ secrets.USERNAME }} + SHA: ${{ github.sha }}
key: ${{ secrets.KEY }} with:
port: ${{ secrets.PORT }} host: ${{ secrets.HOST }}
+ envs: FOO username: ${{ secrets.USERNAME }}
script: | key: ${{ secrets.KEY }}
echo "I am $FOO" port: ${{ secrets.PORT }}
echo "I am $BAR" + envs: FOO,BAR
script: |
echo "I am $FOO"
echo "I am $BAR"
echo "sha: $SHA"
``` ```
Stop script after first failure. ex: missing `abc` folder Stop script after first failure. ex: missing `abc` folder
```yaml ```diff
- name: stop script if command error - name: stop script if command error
uses: appleboy/ssh-action@master uses: appleboy/ssh-action@master
with: with:
host: ${{ secrets.HOST }} host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }} username: ${{ secrets.USERNAME }}
key: ${{ secrets.KEY }} key: ${{ secrets.KEY }}
port: ${{ secrets.PORT }} port: ${{ secrets.PORT }}
script_stop: true + script_stop: true
script: "mkdir abc/def,ls -al" script: |
mkdir abc/def
ls -al
```
output:
```sh
======CMD======
mkdir abc/def
ls -al
======END======
2019/11/21 01:16:21 Process exited with status 1
err: mkdir: cannot create directory abc/def: No such file or directory
##[error]Docker run failed with exit code 1
```
How to connect remote server using `ProxyCommand`?
```bash
+--------+ +----------+ +-----------+
| Laptop | <--> | Jumphost | <--> | FooServer |
+--------+ +----------+ +-----------+
```
in your `~/.ssh/config`, you will see the following.
```bash
Host Jumphost
HostName Jumphost
User ubuntu
Port 22
IdentityFile ~/.ssh/keys/jump_host.pem
Host FooServer
HostName FooServer
User ubuntu
Port 22
ProxyCommand ssh -q -W %h:%p Jumphost
```
How to convert to YAML format of GitHubActions.
```diff
- name: ssh proxy command
uses: appleboy/ssh-action@master
with:
host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }}
key: ${{ secrets.KEY }}
port: ${{ secrets.PORT }}
+ proxy_host: ${{ secrets.PROXY_HOST }}
+ proxy_username: ${{ secrets.PROXY_USERNAME }}
+ proxy_key: ${{ secrets.PROXY_KEY }}
+ proxy_port: ${{ secrets.PROXY_PORT }}
script: |
mkdir abc/def
ls -al
```
Protecting a Private Key. The purpose of the passphrase is usually to encrypt the private key. This makes the key file by itself useless to an attacker. It is not uncommon for files to leak from backups or decommissioned hardware, and hackers commonly exfiltrate files from compromised systems.
```diff
- name: ssh key passphrase
uses: appleboy/ssh-action@master
with:
host: ${{ secrets.HOST }}
username: ${{ secrets.USERNAME }}
key: ${{ secrets.KEY }}
port: ${{ secrets.PORT }}
+ passphrase: ${{ secrets.PASSPHRASE }}
script: |
whoami
ls -al
``` ```

View File

@ -3,23 +3,47 @@ description: 'Executing remote ssh commands'
author: 'Bo-Yi Wu' author: 'Bo-Yi Wu'
inputs: inputs:
host: host:
description: 'ssh remote host' description: 'ssh host'
port: port:
description: 'ssh remote port' description: 'ssh port'
default: 22
passphrase:
description: 'ssh key passphrase'
username: username:
description: 'ssh username' description: 'ssh username'
password: password:
description: 'ssh password' description: 'ssh password'
sync:
description: 'synchronous execution if multiple hosts'
default: false
timeout: timeout:
description: 'timeout for ssh to remote host' description: 'timeout for ssh to host'
default: "30s" default: "30s"
command_timeout: command_timeout:
description: 'timeout for ssh command' description: 'timeout for ssh command'
default: "1m" default: "10m"
key: key:
description: 'content of ssh private key. ex raw content of ~/.ssh/id_rsa' description: 'content of ssh private key. ex raw content of ~/.ssh/id_rsa'
key_path: key_path:
description: 'path of ssh private key' description: 'path of ssh private key'
proxy_host:
description: 'ssh proxy host'
proxy_port:
description: 'ssh proxy port'
default: 22
proxy_username:
description: 'ssh proxy username'
proxy_password:
description: 'ssh proxy password'
proxy_passphrase:
description: 'ssh proxy key passphrase'
proxy_timeout:
description: 'timeout for ssh to proxy host'
default: "30s"
proxy_key:
description: 'content of ssh proxy private key. ex raw content of ~/.ssh/id_rsa'
proxy_key_path:
description: 'path of ssh proxy private key'
script: script:
description: 'execute commands' description: 'execute commands'
script_stop: script_stop: