AWS Lambda에서 ProxyCommand와 함께 SSH를 사용하려고 시도했지만 실패했습니다. 왜 그런지 잘 모르겠습니다. 나는 기본적으로 작동하고 있던 git clone을 수행하고 있지만 이제 git 서버는 점프 호스트를 넘어섰습니다. 다른 컴퓨터에서 git clone이 작동하고 있지만 람다에서는 키와 ssh 구성 파일이 /tmp 폴더에 기록됩니다(또한 다음을 사용하여https://github.com/pimterry/lambda-gitGit/ssh의 경우):
OpenSSH_7.4p1, OpenSSL 1.0.1k-fips 8 Jan 2015
debug1: Reading configuration data /tmp/ssh_config
debug1: /tmp/ssh_config line 16: Applying options for bitbucker_server
debug1: Executing proxy command: exec /tmp/git/usr/bin/ssh -vvv -F /tmp/ssh_config inter -W bitbucket_server:7999
debug1: permanently_drop_suid: 482
setresuid 482: Operation not permitted
debug1: identity file /tmp/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /tmp/id_rsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4
ssh_exchange_identification: Connection closed by remote host
fatal: Could not read from remote repository.
설정이 람다 외부에서 작동하므로 Permanent_drop_suid와 관련이 있는지 궁금합니다.
람다 외부에서도 동일한 작업이 수행됩니다.
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017
debug1: Reading configuration data /tmp/ssh_config
debug1: /tmp/ssh_config line 15: Applying options for bitbucket_server
debug1: Executing proxy command: exec ssh -vvv inter -W bitbucket_server:7999
debug1: identity file /tmp/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /tmp/id_rsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4
debug1: permanently_drop_suid: 501
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017
debug1: Reading configuration data /home/user_name/.ssh/config
debug1: /home/user_name/.ssh/config line 7: Applying options for inter
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 58: Applying options for *
debug1: Executing proxy command: exec ssh -A jump -W bibucket_server:22
debug1: identity file /home/user_naem/.ssh/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /home/user_name/.ssh/id_rsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/user_name/.ssh/id_dsa type -1
.
.
.
아무도???