maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Did Lich (JIRA)" <j...@codehaus.org>
Subject [jira] (WAGON-436) wagon-ssh kills ecdsa entries in known_hosts
Date Wed, 01 Apr 2015 14:36:17 GMT

     [ https://jira.codehaus.org/browse/WAGON-436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Did Lich updated WAGON-436:
---------------------------

    Description: 
I use wagon-ssh in my Android library project:

{code:title=build.gradle|borderStyle=solid}
configurations {
    deployerJars
}

dependencies {
    deployerJars "org.apache.maven.wagon:wagon-ssh:2.8"
    compile fileTree(dir: 'libs', include: ['*.jar'])
}
{code}

which uploads my AAR files over ssh to the specified home directory on my local server:

{code:title=build.gradle|borderStyle=solid}
uploadArchives {
    repositories.mavenDeployer {
        configuration = configurations.deployerJars
        repository(url: "scp://" + System.getenv("PRJ_MAVEN_REPO_HOST_NAME")) {
            authentication(userName: "un", privateKey: System.getenv("PRJ_MAVEN_REPO_KEY_FILE"))
        }
    }
}
{code}

After executing the gradle build I see that known_hosts file on my server, where the build
job was running, has been changed and all "ecdsa" entries are killed. As you can imagine other
jobs on the server rely on these entries to contact other server.

I think this is a no-go if a piece of software is removing entries from a file where other
components are depend on.

Is there a way to fix this by any option settings?

  was:
I use wagon-ssh in my Android library project:

configurations {
    deployerJars
}

dependencies {
    deployerJars "org.apache.maven.wagon:wagon-ssh:2.8"
    compile fileTree(dir: 'libs', include: ['*.jar'])
}

which uploads my AAR files over ssh to the specified home directory on my local server:

uploadArchives {
    repositories.mavenDeployer {
        configuration = configurations.deployerJars
        repository(url: "scp://" + System.getenv("PRJ_MAVEN_REPO_HOST_NAME")) {
            authentication(userName: "un", privateKey: System.getenv("PRJ_MAVEN_REPO_KEY_FILE"))
        }
    }
}

After executing the gradle build I see that known_hosts file on my server, where the build
job was running, has been changed and all "ecdsa" entries are killed. As you can imagine other
jobs on the server rely on these entries to contact other server.

I think this is a no-go if a piece of software is removing entries from a file where other
components are depend on.

Is there a way to fix this by any option settings?


> wagon-ssh kills ecdsa entries in known_hosts
> --------------------------------------------
>
>                 Key: WAGON-436
>                 URL: https://jira.codehaus.org/browse/WAGON-436
>             Project: Maven Wagon
>          Issue Type: Bug
>          Components: wagon-ssh
>    Affects Versions: 2.8
>         Environment: Ubuntu 12.04
>            Reporter: Did Lich
>            Priority: Critical
>
> I use wagon-ssh in my Android library project:
> {code:title=build.gradle|borderStyle=solid}
> configurations {
>     deployerJars
> }
> dependencies {
>     deployerJars "org.apache.maven.wagon:wagon-ssh:2.8"
>     compile fileTree(dir: 'libs', include: ['*.jar'])
> }
> {code}
> which uploads my AAR files over ssh to the specified home directory on my local server:
> {code:title=build.gradle|borderStyle=solid}
> uploadArchives {
>     repositories.mavenDeployer {
>         configuration = configurations.deployerJars
>         repository(url: "scp://" + System.getenv("PRJ_MAVEN_REPO_HOST_NAME")) {
>             authentication(userName: "un", privateKey: System.getenv("PRJ_MAVEN_REPO_KEY_FILE"))
>         }
>     }
> }
> {code}
> After executing the gradle build I see that known_hosts file on my server, where the
build job was running, has been changed and all "ecdsa" entries are killed. As you can imagine
other jobs on the server rely on these entries to contact other server.
> I think this is a no-go if a piece of software is removing entries from a file where
other components are depend on.
> Is there a way to fix this by any option settings?



--
This message was sent by Atlassian JIRA
(v6.1.6#6162)

Mime
View raw message