Tentando usar ssh com ProxyCommand no AWS Lambda, mas ele falha. Não tenho certeza do porquê. Basicamente, estou fazendo um clone do git, que estava funcionando, mas agora o servidor git está além de um host de salto. Eu tenho o git clone funcionando em outras máquinas, mas no lambda estou recebendo (as chaves e o arquivo de configuração ssh são gravados na pasta /tmp (também usandohttps://github.com/pimterry/lambda-gitpara git/ssh):
OpenSSH_7.4p1, OpenSSL 1.0.1k-fips 8 Jan 2015
debug1: Reading configuration data /tmp/ssh_config
debug1: /tmp/ssh_config line 16: Applying options for bitbucker_server
debug1: Executing proxy command: exec /tmp/git/usr/bin/ssh -vvv -F /tmp/ssh_config inter -W bitbucket_server:7999
debug1: permanently_drop_suid: 482
setresuid 482: Operation not permitted
debug1: identity file /tmp/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /tmp/id_rsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4
ssh_exchange_identification: Connection closed by remote host
fatal: Could not read from remote repository.
Estou me perguntando se isso tem algo a ver com o permanentemente_drop_suid, já que a configuração funciona fora do lambda.
A mesma operação fora do lambda ...
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017
debug1: Reading configuration data /tmp/ssh_config
debug1: /tmp/ssh_config line 15: Applying options for bitbucket_server
debug1: Executing proxy command: exec ssh -vvv inter -W bitbucket_server:7999
debug1: identity file /tmp/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /tmp/id_rsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4
debug1: permanently_drop_suid: 501
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips 26 Jan 2017
debug1: Reading configuration data /home/user_name/.ssh/config
debug1: /home/user_name/.ssh/config line 7: Applying options for inter
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 58: Applying options for *
debug1: Executing proxy command: exec ssh -A jump -W bibucket_server:22
debug1: identity file /home/user_naem/.ssh/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /home/user_name/.ssh/id_rsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/user_name/.ssh/id_dsa type -1
.
.
.
Qualquer pessoa???