Where to place machine's system-wide private ssh deploy key?Is it *really* possible to directly steal a...
What are the advantages of this gold finger shape?
Did Michelle Obama have a staff of 23; and Melania have a staff of 4?
Using lazy-init pattern properties on Apex data objects in LWC
Why do so many people play out of turn on the last lead?
Why did IBM make the PC BIOS source code public?
Why does auto deduce this variable as double and not float?
Sum Square Difference, which way is more Pythonic?
Setting up a Mathematical Institute of Refereeing?
Is the Microsoft recommendation to use C# properties applicable to game development?
What is the question mark?
Why is the battery jumpered to a resistor in this schematic?
Why won't the Republicans use a superdelegate system like the DNC in their nomination process?
Mind ya, it's Homophones Everywhere!
Solving pricing problem heuristically in column generation algorithm for VRP
What is the fastest way to level past 95 in Diablo II?
How can I find an old paper when the usual methods fail?
Is there a word for returning to unpreparedness?
Adding things to bunches of things vs multiplication
Good way to stop electrolyte tabs from turning into powder?
How would armour (and combat) change if the fighter didn't need to actually wear it?
What are these panels underneath the wing root of a A380?
How to prevent criminal gangs from making/buying guns?
Meaning of だけはわからない
Are they two subordinate clauses?
Where to place machine's system-wide private ssh deploy key?
Is it *really* possible to directly steal a private key if it uses no passphrase?echo $? prints 1 after running ssh-addSSH Key Permissions Chmod settings?How are session keys, public/private keys generated on the ssh server and client and used?SSH publickey login permission denied on CENTOS But not on DebianSSH not using public/private keysPasswordless (key based) SSH Access to a Linux system from a MAC?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}
I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server
to generate a private/public ssh key pair.
I would like apps on my server (such as git
) to use this private key with just ssh
, instead of ssh -i
or ssh-add
, so it must be placed at ~/.ssh/id_rsa
.
However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.
Where should I place system-wide private ssh keys?
ssh users git
add a comment |
I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server
to generate a private/public ssh key pair.
I would like apps on my server (such as git
) to use this private key with just ssh
, instead of ssh -i
or ssh-add
, so it must be placed at ~/.ssh/id_rsa
.
However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.
Where should I place system-wide private ssh keys?
ssh users git
But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.
– muru
yesterday
There are no apps on any GitHub server. I'm talking about running processes on my own server.
– cowlinator
yesterday
Why exactly do you need to share a key between multiple users?
– muru
yesterday
To decouple the key from any particular user. If I place the key in~/.ssh/id_rsa
and then decide to get a brand new username or quit or die tomorrow, and my~
directory is deleted, the server should still continue to function.
– cowlinator
18 hours ago
If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.
– muru
18 hours ago
add a comment |
I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server
to generate a private/public ssh key pair.
I would like apps on my server (such as git
) to use this private key with just ssh
, instead of ssh -i
or ssh-add
, so it must be placed at ~/.ssh/id_rsa
.
However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.
Where should I place system-wide private ssh keys?
ssh users git
I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server
to generate a private/public ssh key pair.
I would like apps on my server (such as git
) to use this private key with just ssh
, instead of ssh -i
or ssh-add
, so it must be placed at ~/.ssh/id_rsa
.
However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.
Where should I place system-wide private ssh keys?
ssh users git
ssh users git
edited yesterday
muru
43.8k5 gold badges110 silver badges181 bronze badges
43.8k5 gold badges110 silver badges181 bronze badges
asked yesterday
cowlinatorcowlinator
1145 bronze badges
1145 bronze badges
But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.
– muru
yesterday
There are no apps on any GitHub server. I'm talking about running processes on my own server.
– cowlinator
yesterday
Why exactly do you need to share a key between multiple users?
– muru
yesterday
To decouple the key from any particular user. If I place the key in~/.ssh/id_rsa
and then decide to get a brand new username or quit or die tomorrow, and my~
directory is deleted, the server should still continue to function.
– cowlinator
18 hours ago
If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.
– muru
18 hours ago
add a comment |
But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.
– muru
yesterday
There are no apps on any GitHub server. I'm talking about running processes on my own server.
– cowlinator
yesterday
Why exactly do you need to share a key between multiple users?
– muru
yesterday
To decouple the key from any particular user. If I place the key in~/.ssh/id_rsa
and then decide to get a brand new username or quit or die tomorrow, and my~
directory is deleted, the server should still continue to function.
– cowlinator
18 hours ago
If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.
– muru
18 hours ago
But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.
– muru
yesterday
But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.
– muru
yesterday
There are no apps on any GitHub server. I'm talking about running processes on my own server.
– cowlinator
yesterday
There are no apps on any GitHub server. I'm talking about running processes on my own server.
– cowlinator
yesterday
Why exactly do you need to share a key between multiple users?
– muru
yesterday
Why exactly do you need to share a key between multiple users?
– muru
yesterday
To decouple the key from any particular user. If I place the key in
~/.ssh/id_rsa
and then decide to get a brand new username or quit or die tomorrow, and my ~
directory is deleted, the server should still continue to function.– cowlinator
18 hours ago
To decouple the key from any particular user. If I place the key in
~/.ssh/id_rsa
and then decide to get a brand new username or quit or die tomorrow, and my ~
directory is deleted, the server should still continue to function.– cowlinator
18 hours ago
If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.
– muru
18 hours ago
If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.
– muru
18 hours ago
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f535663%2fwhere-to-place-machines-system-wide-private-ssh-deploy-key%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f535663%2fwhere-to-place-machines-system-wide-private-ssh-deploy-key%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.
– muru
yesterday
There are no apps on any GitHub server. I'm talking about running processes on my own server.
– cowlinator
yesterday
Why exactly do you need to share a key between multiple users?
– muru
yesterday
To decouple the key from any particular user. If I place the key in
~/.ssh/id_rsa
and then decide to get a brand new username or quit or die tomorrow, and my~
directory is deleted, the server should still continue to function.– cowlinator
18 hours ago
If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.
– muru
18 hours ago