jack/Chan
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

known_hosts 校验命令补 sudo：.ssh 是 700 chan，ubuntu 读不了

Browse Source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
jack
2026-08-28 18:02:54 +08:00
co-authored by Cursor
parent d884de2c36
commit 040810d48d
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
live/deploy/dryrun.sh
+1 -1
View File
@@ -66,7 +66,7 @@ if grep -qi "Host key verification failed" "$err"; then
再在这台上写入并核对： 再在这台上写入并核对：
sudo -u $USER_NAME ssh-keyscan -t ed25519 <采集机IP> \\ sudo -u $USER_NAME ssh-keyscan -t ed25519 <采集机IP> \\
| sudo -u $USER_NAME tee -a $STATE/home/.ssh/known_hosts | sudo -u $USER_NAME tee -a $STATE/home/.ssh/known_hosts
ssh-keygen -lf $STATE/home/.ssh/known_hosts # 比对指纹是否一致" sudo -u $USER_NAME ssh-keygen -lf $STATE/home/.ssh/known_hosts"
elif grep -qiE "Permission denied|publickey" "$err"; then elif grep -qiE "Permission denied|publickey" "$err"; then
rm -f "$err" "$outf" rm -f "$err" "$outf"
die "认证被拒。指纹是通的，是 key 没装到采集机上： die "认证被拒。指纹是通的，是 key 没装到采集机上：
live/deploy/install.sh
+1 -1
View File
@@ -190,7 +190,7 @@ echo " 还要写 known_hosts，否则报 Host key verification failed ——
echo " 起来会撞同一个墙，因为 BatchMode=yes 不允许交互确认：" echo " 起来会撞同一个墙，因为 BatchMode=yes 不允许交互确认："
echo " sudo -u $USER_NAME ssh-keyscan -t ed25519 <采集机IP> \\" echo " sudo -u $USER_NAME ssh-keyscan -t ed25519 <采集机IP> \\"
echo " | sudo -u $USER_NAME tee -a $STATE/home/.ssh/known_hosts" echo " | sudo -u $USER_NAME tee -a $STATE/home/.ssh/known_hosts"
echo " ssh-keygen -lf $STATE/home/.ssh/known_hosts" echo " sudo -u $USER_NAME ssh-keygen -lf $STATE/home/.ssh/known_hosts"
echo " # 把指纹跟采集机上 ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub" echo " # 把指纹跟采集机上 ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub"
echo " # 的输出比一遍。**不要**图省事用 StrictHostKeyChecking=no，" echo " # 的输出比一遍。**不要**图省事用 StrictHostKeyChecking=no，"
echo " # 那等于放弃中间人防护，而这条链路上跑的是下单信号" echo " # 那等于放弃中间人防护，而这条链路上跑的是下单信号"