Where to place machine's system-wide private ssh deploy key?Is it *really* possible to directly steal a...

What are the advantages of this gold finger shape?

Did Michelle Obama have a staff of 23; and Melania have a staff of 4?

Using lazy-init pattern properties on Apex data objects in LWC

Why do so many people play out of turn on the last lead?

Why did IBM make the PC BIOS source code public?

Why does auto deduce this variable as double and not float?

Sum Square Difference, which way is more Pythonic?

Setting up a Mathematical Institute of Refereeing?

Is the Microsoft recommendation to use C# properties applicable to game development?

What is the question mark?

Why is the battery jumpered to a resistor in this schematic?

Why won't the Republicans use a superdelegate system like the DNC in their nomination process?

Mind ya, it's Homophones Everywhere!

Solving pricing problem heuristically in column generation algorithm for VRP

What is the fastest way to level past 95 in Diablo II?

How can I find an old paper when the usual methods fail?

Is there a word for returning to unpreparedness?

Adding things to bunches of things vs multiplication

Good way to stop electrolyte tabs from turning into powder?

How would armour (and combat) change if the fighter didn't need to actually wear it?

What are these panels underneath the wing root of a A380?

How to prevent criminal gangs from making/buying guns?

Meaning of だけはわからない

Are they two subordinate clauses?



Where to place machine's system-wide private ssh deploy key?


Is it *really* possible to directly steal a private key if it uses no passphrase?echo $? prints 1 after running ssh-addSSH Key Permissions Chmod settings?How are session keys, public/private keys generated on the ssh server and client and used?SSH publickey login permission denied on CENTOS But not on DebianSSH not using public/private keysPasswordless (key based) SSH Access to a Linux system from a MAC?






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}







0















I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server to generate a private/public ssh key pair.



I would like apps on my server (such as git) to use this private key with just ssh, instead of ssh -i or ssh-add, so it must be placed at ~/.ssh/id_rsa.



However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.



Where should I place system-wide private ssh keys?










share|improve this question



























  • But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.

    – muru
    yesterday













  • There are no apps on any GitHub server. I'm talking about running processes on my own server.

    – cowlinator
    yesterday











  • Why exactly do you need to share a key between multiple users?

    – muru
    yesterday











  • To decouple the key from any particular user. If I place the key in ~/.ssh/id_rsa and then decide to get a brand new username or quit or die tomorrow, and my ~ directory is deleted, the server should still continue to function.

    – cowlinator
    18 hours ago











  • If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.

    – muru
    18 hours ago




















0















I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server to generate a private/public ssh key pair.



I would like apps on my server (such as git) to use this private key with just ssh, instead of ssh -i or ssh-add, so it must be placed at ~/.ssh/id_rsa.



However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.



Where should I place system-wide private ssh keys?










share|improve this question



























  • But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.

    – muru
    yesterday













  • There are no apps on any GitHub server. I'm talking about running processes on my own server.

    – cowlinator
    yesterday











  • Why exactly do you need to share a key between multiple users?

    – muru
    yesterday











  • To decouple the key from any particular user. If I place the key in ~/.ssh/id_rsa and then decide to get a brand new username or quit or die tomorrow, and my ~ directory is deleted, the server should still continue to function.

    – cowlinator
    18 hours ago











  • If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.

    – muru
    18 hours ago
















0












0








0








I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server to generate a private/public ssh key pair.



I would like apps on my server (such as git) to use this private key with just ssh, instead of ssh -i or ssh-add, so it must be placed at ~/.ssh/id_rsa.



However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.



Where should I place system-wide private ssh keys?










share|improve this question
















I'm following the directions at https://developer.github.com/enterprise/2.16/v3/guides/managing-deploy-keys/#deploy-keys , which includes Run the ssh-keygen procedure on your server to generate a private/public ssh key pair.



I would like apps on my server (such as git) to use this private key with just ssh, instead of ssh -i or ssh-add, so it must be placed at ~/.ssh/id_rsa.



However, this is a private key that lives on my server; the key belongs to the server machine, not to any particular user.



Where should I place system-wide private ssh keys?







ssh users git






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited yesterday









muru

43.8k5 gold badges110 silver badges181 bronze badges




43.8k5 gold badges110 silver badges181 bronze badges










asked yesterday









cowlinatorcowlinator

1145 bronze badges




1145 bronze badges
















  • But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.

    – muru
    yesterday













  • There are no apps on any GitHub server. I'm talking about running processes on my own server.

    – cowlinator
    yesterday











  • Why exactly do you need to share a key between multiple users?

    – muru
    yesterday











  • To decouple the key from any particular user. If I place the key in ~/.ssh/id_rsa and then decide to get a brand new username or quit or die tomorrow, and my ~ directory is deleted, the server should still continue to function.

    – cowlinator
    18 hours ago











  • If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.

    – muru
    18 hours ago





















  • But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.

    – muru
    yesterday













  • There are no apps on any GitHub server. I'm talking about running processes on my own server.

    – cowlinator
    yesterday











  • Why exactly do you need to share a key between multiple users?

    – muru
    yesterday











  • To decouple the key from any particular user. If I place the key in ~/.ssh/id_rsa and then decide to get a brand new username or quit or die tomorrow, and my ~ directory is deleted, the server should still continue to function.

    – cowlinator
    18 hours ago











  • If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.

    – muru
    18 hours ago



















But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.

– muru
yesterday







But why would apps on the GitHub server need that key? That's for deploying from GitHub to somewhere else. Only GitHub should need it.

– muru
yesterday















There are no apps on any GitHub server. I'm talking about running processes on my own server.

– cowlinator
yesterday





There are no apps on any GitHub server. I'm talking about running processes on my own server.

– cowlinator
yesterday













Why exactly do you need to share a key between multiple users?

– muru
yesterday





Why exactly do you need to share a key between multiple users?

– muru
yesterday













To decouple the key from any particular user. If I place the key in ~/.ssh/id_rsa and then decide to get a brand new username or quit or die tomorrow, and my ~ directory is deleted, the server should still continue to function.

– cowlinator
18 hours ago





To decouple the key from any particular user. If I place the key in ~/.ssh/id_rsa and then decide to get a brand new username or quit or die tomorrow, and my ~ directory is deleted, the server should still continue to function.

– cowlinator
18 hours ago













If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.

– muru
18 hours ago







If you were to get a brand new username tomorrow, you'd still have to configure whatever services that currently use your username to use the new one. They aren't going to automagically start using the new username. So add key management to that configuration. A private key readable by anyone is an oxymoron.

– muru
18 hours ago












0






active

oldest

votes














Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f535663%2fwhere-to-place-machines-system-wide-private-ssh-deploy-key%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Unix & Linux Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f535663%2fwhere-to-place-machines-system-wide-private-ssh-deploy-key%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Taj Mahal Inhaltsverzeichnis Aufbau | Geschichte | 350-Jahr-Feier | Heutige Bedeutung | Siehe auch |...

Baia Sprie Cuprins Etimologie | Istorie | Demografie | Politică și administrație | Arii naturale...

Nicolae Petrescu-Găină Cuprins Biografie | Opera | In memoriam | Varia | Controverse, incertitudini...