blocks|key|2822781|text|切换到jenkins用户并手动运行命令：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2822782|git+ls-remote+-h+git@bitbucket.org:person/projectmarket.git+HEAD|code-block|syntax|javascript|2822783|第一次通过SSH连接到新主机时，您将收到标准的SSH警告：|2822784|The+authenticity+of+host+'bitbucket.org+(207.223.240.181)'+can't+be+established.
RSA+key+fingerprint+is+97:8c:1b:f2:6f:14:6b:5c:3b:ec:aa:46:46:74:7c:40.
Are+you+sure+you+want+to+continue+connecting+(yes/no)?|2822785|键入yes，然后按Enter键。现在，bitbucket.org的主机密钥将被添加到~/.ssh/known_hosts文件中，在Jenkins中不会再出现此错误。|2822786|entityMap^0|3|7|0|0|0|0|2|3|J|D|16|I|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|W|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|X|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|Y|8|@$9|Z|A|10|B|C]|$9|11|A|12|B|C]|$9|13|A|14|B|C]]|D|@]|E|$]]|$1|Q|3|-4|5|6|7|15|8|@]|D|@]|E|$]]]|R|$]]

Change to the <code>jenkins</code> user and run the command manually:

<pre><code>git ls-remote -h git@bitbucket.org:person/projectmarket.git HEAD
</code></pre>

You will get the standard SSH warning when first connecting to a new host via SSH:

<pre><code>The authenticity of host 'bitbucket.org (207.223.240.181)' can't be established.
RSA key fingerprint is 97:8c:1b:f2:6f:14:6b:5c:3b:ec:aa:46:46:74:7c:40.
Are you sure you want to continue connecting (yes/no)?
</code></pre>

Type <code>yes</code> and press Enter. The host key for <code>bitbucket.org</code> will now be added to the <code>~/.ssh/known_hosts</code> file and you won't get this error in Jenkins anymore.

blocks|key|195915|text|有同样的问题，我这样解决它：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|195916|仅为当前用户重置对id_rsa*的权限无组无其他|195917|chmod+o-rwx+~/.ssh/id*
chmod+G-rwx+~/.ssh/id*

ls+-lart+~/.ssh/


-rw-------++1+jenkins+nogroup++398+avril++3+09:34+id_rsa.pub
-rw-------++1+jenkins+nogroup+1675+avril++3+09:34+id_rsa|code-block|syntax|javascript|195918|并清除~/.ssh/know_hosts|195919|现在以jenkins身份连接|195920|sudo+su+jenkins|195921|尝试使用jenkins命令|195922|git+ls-remote+-h+git@bitbucket.org:user/project.git+HEAD|195923|如果没有问题出现，现在jenkins将能够连接repo+(至少对于我%5E%5E+)|195924|entityMap^0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|Z|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|10|8|@]|9|@]|A|$]]|$1|M|3|N|5|F|7|11|8|@]|9|@]|A|$G|H]]|$1|O|3|P|5|6|7|12|8|@]|9|@]|A|$]]|$1|Q|3|R|5|F|7|13|8|@]|9|@]|A|$G|H]]|$1|S|3|T|5|6|7|14|8|@]|9|@]|A|$]]|$1|U|3|-4|5|6|7|15|8|@]|9|@]|A|$]]]|V|$]]

Had same problem, i fix it like that :

reset permission on id_rsa* only for current user no group no other

<pre><code>chmod o-rwx ~/.ssh/id*
chmod G-rwx ~/.ssh/id*

ls -lart ~/.ssh/


-rw------- 1 jenkins nogroup 398 avril 3 09:34 id_rsa.pub
-rw------- 1 jenkins nogroup 1675 avril 3 09:34 id_rsa
</code></pre>

And clear ~/.ssh/know_hosts

Now Connect as jenkins

<pre><code>sudo su jenkins
</code></pre>

Try the jenkins commands

<pre><code>git ls-remote -h git@bitbucket.org:user/project.git HEAD
</code></pre>

If no problem appears, now jenkins will be able to connect the repo (for me ^^ at least)

blocks|key|196473|text|使用https://bitbucket.org/YYYY/XX.git|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|196474|您应该删除username@|196475|entityMap|0|LINK|mutability|MUTABLE|url|https://bitbucket.org/YYYY/XX.git^0|2|X|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

using <a href="https://bitbucket.org/YYYY/XX.git" rel="nofollow noreferrer">https://bitbucket.org/YYYY/XX.git</a>

you shoud delete username@

blocks|key|3035432|text|Jenkins是一个服务帐户，它在设计上没有shell。人们普遍认为，服务帐户。不能以交互方式登录。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3035433|要解决"Jenkins+Host+key校验失败“的问题，请执行以下步骤。我对jenkins使用过mercurial。|3035434|1)在终端上执行以下命令|3035435|+++++++++++++$+sudo+su+-s+/bin/bash+jenkins|code-block|syntax|javascript|3035436|提供密码|3035437|2)使用以下命令生成公钥私钥：|3035438|++++++++++++++ssh-keygen|3035439|您可以将输出显示为:：|3035440|Generating+public/private+rsa+key+pair.+
Enter+file+in+which+to+save+the+key+(/var/lib/jenkins/.ssh/id_rsa):+
Enter+passphrase+(empty+for+no+passphrase):+
Enter+same+passphrase+again:+|3035441|3)按Enter+-->不提供任何密码-->按enter|3035442|+++++++++++++Key+has+been+generated|3035443|4)转到-->+cat+/var/lib/jenkins/.ssh/id_rsa.pub|3035444|5)从id_rsa.pub复制密钥|3035445|6)退出bash|3035446|7)+ssh@yourrepository|offset|length|style|CODE|3035447|8)+vi+.ssh/authorized_keys|3035448|9)粘贴密钥|3035449|10)退出|3035450|11)手动登录mercurial服务器|3035451|注意:请手动登录，否则jenkins将再次给出错误“主机验证失败”|3035452|12)一旦手动完成，现在转到Jenkins并给出构建|3035453|尽情享受！|3035454|祝好运|3035455|entityMap^0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|3|I|0|3|N|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1T|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1U|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|1V|8|@]|9|@]|A|$I|J]]|$1|K|3|L|5|6|7|1W|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1X|8|@]|9|@]|A|$]]|$1|O|3|P|5|H|7|1Y|8|@]|9|@]|A|$I|J]]|$1|Q|3|R|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|S|3|T|5|H|7|20|8|@]|9|@]|A|$I|J]]|$1|U|3|V|5|6|7|21|8|@]|9|@]|A|$]]|$1|W|3|X|5|H|7|22|8|@]|9|@]|A|$I|J]]|$1|Y|3|Z|5|6|7|23|8|@]|9|@]|A|$]]|$1|10|3|11|5|6|7|24|8|@]|9|@]|A|$]]|$1|12|3|13|5|6|7|25|8|@]|9|@]|A|$]]|$1|14|3|15|5|6|7|26|8|@$16|27|17|28|18|19]]|9|@]|A|$]]|$1|1A|3|1B|5|6|7|29|8|@$16|2A|17|2B|18|19]]|9|@]|A|$]]|$1|1C|3|1D|5|6|7|2C|8|@]|9|@]|A|$]]|$1|1E|3|1F|5|6|7|2D|8|@]|9|@]|A|$]]|$1|1G|3|1H|5|6|7|2E|8|@]|9|@]|A|$]]|$1|1I|3|1J|5|6|7|2F|8|@]|9|@]|A|$]]|$1|1K|3|1L|5|6|7|2G|8|@]|9|@]|A|$]]|$1|1M|3|1N|5|6|7|2H|8|@]|9|@]|A|$]]|$1|1O|3|1P|5|6|7|2I|8|@]|9|@]|A|$]]|$1|1Q|3|-4|5|6|7|2J|8|@]|9|@]|A|$]]]|1R|$]]

Jenkins is a service account, it doesn't have a shell by design. It is generally accepted that service accounts. shouldn't be able to log in interactively.

To resolve "Jenkins Host key verification failed", do the following steps. I have used mercurial with jenkins.

1)Execute following commands on terminal

<pre><code> $ sudo su -s /bin/bash jenkins
</code></pre>

provide password

2)Generate public private key using the following command:

<pre><code> ssh-keygen
</code></pre>

you can see output as ::

<pre><code>Generating public/private rsa key pair. 
Enter file in which to save the key (/var/lib/jenkins/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
</code></pre>

3)Press Enter --> Do not give any passphrase--> press enter

<pre><code> Key has been generated
</code></pre>

4) go to --> cat /var/lib/jenkins/.ssh/id_rsa.pub

5) Copy key from id_rsa.pub

6)Exit from bash

7) <code>ssh@yourrepository</code>

8) <code>vi .ssh/authorized_keys</code>

9) Paste the key

10) exit

11)Manually login to mercurial server

Note: Pls do manually login otherwise jenkins will again give error "host verification failed"

12)once manually done, Now go to Jenkins and give build

Enjoy!!!

Good Luck

blocks|key|196495|text|type|unstyled|depth|inlineStyleRanges|entityRanges|data|196496|确保我们没有编辑任何默认的sshd_config属性，以跳过错误|unordered-list-item|196497|主机验证失败-+known_hosts文件中肯定缺少主机名条目|offset|length|style|CODE|196498|登录到该过程失败的服务器并执行以下操作：|196499|196500|1.+Sudo+to+the+user+running+the+process
2.+`ssh-copy-id+destinationuser@destinationhostname`
3.+It+will+prompt+like+this+for+the+first+time,+say+yes+and+it+will+also+ask+password+for+the+first+time:|code-block|syntax|javascript|196501|无法确定主机'sample.org+(205.214.640.91)‘的真实性。RSA密钥指纹为97:8c:1b:f2:6f:14:6b:5c:3b:ec:aa:46:46:74:7c:40.确定要继续连接(是/否)吗？*是*|196502|密码提示？提供密码|196503|4.现在从运行进程的服务器执行ssh+destinationuser@destinationhostname。它应该不需要密码就可以登录。|196504|注意：不会更改用户.ssh目录中文件的默认权限，您最终会遇到不同的问题|BOLD|196505|​|196506|entityMap^0|0|0|8|B|0|0|0|0|0|0|F|13|0|0|3|0|0^^$0|@$1|2|3|-4|4|5|6|14|7|@]|8|@]|9|$]]|$1|A|3|B|4|C|6|15|7|@]|8|@]|9|$]]|$1|D|3|E|4|C|6|16|7|@$F|17|G|18|H|I]]|8|@]|9|$]]|$1|J|3|K|4|C|6|19|7|@]|8|@]|9|$]]|$1|L|3|-4|4|5|6|1A|7|@]|8|@]|9|$]]|$1|M|3|N|4|O|6|1B|7|@]|8|@]|9|$P|Q]]|$1|R|3|S|4|5|6|1C|7|@]|8|@]|9|$]]|$1|T|3|U|4|5|6|1D|7|@]|8|@]|9|$]]|$1|V|3|W|4|5|6|1E|7|@$F|1F|G|1G|H|I]]|8|@]|9|$]]|$1|X|3|Y|4|5|6|1H|7|@$F|1I|G|1J|H|Z]]|8|@]|9|$]]|$1|10|3|11|4|5|6|1K|7|@]|8|@]|9|$]]|$1|12|3|-4|4|5|6|1L|7|@]|8|@]|9|$]]]|13|$]]

<ul>
<li>Make sure we are not editing any of the default sshd_config properties to skip the error</li>
<li>Host Verification Failed - Definitely a missing entry of hostname in <code>known_hosts</code> file</li>
<li>Login to the server where the process is failing and do the following:

<ol>
<li>Sudo to the user running the process</li>
<li><code>ssh-copy-id destinationuser@destinationhostname</code></li>
<li>It will prompt like this for the first time, say yes and it will also ask password for the first time:

<pre><code>The authenticity of host 'sample.org (205.214.640.91)' can't be established.
RSA key fingerprint is 97:8c:1b:f2:6f:14:6b:5c:3b:ec:aa:46:46:74:7c:40.
Are you sure you want to continue connecting (yes/no)? *yes*
</code></pre>

Password prompt ? give password</li>
<li>Now from the server where process is running, do <code>ssh destinationuser@destinationhostname</code>. It should login without a password.

Note: Do not change the default permissions of files in the user's .ssh directory, you will end up with different issues</li>
</ol></li>
</ul>

blocks|key|198493|text|或者，您可以使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|198494|ssh+-oStrictHostKeyChecking=no+host|offset|length|style|CODE|198495|这将是不安全的(中间人攻击)，但最简单的解决方案。|198496|更好的方法是在主机和ip地址之间生成正确的映射，这样ssh就不会报错：|198497|#!/bin/bash

for+domain+in+"github.com"+"bitbucket.org";+do
++++sed+-i+"/$domain/d"+~/.ssh/known_hosts
++++line=$(ssh-keyscan+$domain,`nslookup+$domain+%7C+awk+'/%5EAddress:+/+{+print+$2+;+exit+}'`)
++++echo+$line+>>+~/.ssh/known_hosts
done|code-block|syntax|javascript|198498|节选自gist。|198499|entityMap|0|LINK|mutability|MUTABLE|url|https://gist.github.com/FelikZ/94e67967b3b22e61d94ee68b184702d4^0|0|0|Z|0|0|Q|3|0|0|3|4|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@$D|12|E|13|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|14|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|15|8|@$D|16|E|17|F|G]]|9|@]|A|$]]|$1|L|3|M|5|N|7|18|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|19|8|@]|9|@$D|1A|E|1B|1|1C]]|A|$]]|$1|S|3|-4|5|6|7|1D|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]]]

Or you can use:

<code>ssh -oStrictHostKeyChecking=no host</code>

This will be insecure (man in the middle attacks) but easiest solution.

The better way to do that is to generate correct mappings between host and ip address, so <code>ssh</code> will not complain:

<pre class="lang-sh prettyprint-override"><code>#!/bin/bash

for domain in "github.com" "bitbucket.org"; do
 sed -i "/$domain/d" ~/.ssh/known_hosts
 line=$(ssh-keyscan $domain,`nslookup $domain | awk '/^Address: / { print $2 ; exit }'`)
 echo $line &gt;&gt; ~/.ssh/known_hosts
done
</code></pre>

Excerpt from <a href="https://gist.github.com/FelikZ/94e67967b3b22e61d94ee68b184702d4" rel="noreferrer">gist</a>.

blocks|key|2822920|text|最好的方法就是在Jenkinsfile文件中或者你想要的任何地方使用你的‘https’URL格式的"git+url“。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2822921|git+url:+'https://github.com/jglick/simple-maven-project-with-tests.git'|offset|length|style|CODE|2822922|entityMap^0|0|0|20|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@$D|L|E|M|F|G]]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

Best way you can just use your "git url" in 'https" URL format in the Jenkinsfile or wherever you want.

<code>git url: 'https://github.com/jglick/simple-maven-project-with-tests.git'</code>

blocks|key|2822932|text|试一试|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2822933|ssh-密钥生成-R主机名|2822934|-R主机名从known_hosts文件中删除属于主机名的所有密钥。此选项对于删除散列主机很有用|2822935|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Try

ssh-keygen -R hostname

-R hostname Removes all keys belonging to hostname from a known_hosts file. This option is useful to delete hashed hosts

blocks|key|194209|text|SSH|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|194210|如果您正在尝试使用SSH，则主机密钥验证错误可能是由于以下几个步骤而导致的，以克服所有原因。|194211|194212|将环境变量设置为主目录，并提供地址作为.ssh文件夹的根目录。例如：-如果您的.ssh保存在Name文件夹内。C:/Users/Name.|ordered-list-item|194213|Now确保在存储库链接中也提供了公共SSH密钥。可以是github，也可以是bitbucket或其他任何类型。|194214|开放git狂欢。并尝试从存储库中克隆项目。这将有助于在.ssh文件夹中自动创建的known_host文件中添加您的存储库URL。|194215|现在打开jenkins并创建一个新作业。然后单击configure。|194216|在Git下的源代码管理中提供克隆网址。URL应以git@github.com/.........开头或者ssh://proje........|194217|Under凭据，您需要添加要克隆项目的存储库表单的用户名和密码。选择credential.|194218|And+now+apply并保存配置。|194219|Bingo！开始构建项目。我希望现在您不会收到任何主机密钥验证错误！|194220|194221|entityMap^0|0|3|0|E|6|0|0|8|3|J|4|1A|4|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|15|8|@$9|16|A|17|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|18|8|@]|D|@]|E|$]]|$1|I|3|J|5|K|7|19|8|@$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]|$9|1E|A|1F|B|C]]|D|@]|E|$]]|$1|L|3|M|5|K|7|1G|8|@]|D|@]|E|$]]|$1|N|3|O|5|K|7|1H|8|@]|D|@]|E|$]]|$1|P|3|Q|5|K|7|1I|8|@]|D|@]|E|$]]|$1|R|3|S|5|K|7|1J|8|@]|D|@]|E|$]]|$1|T|3|U|5|K|7|1K|8|@]|D|@]|E|$]]|$1|V|3|W|5|K|7|1L|8|@]|D|@]|E|$]]|$1|X|3|Y|5|K|7|1M|8|@]|D|@]|E|$]]|$1|Z|3|-4|5|6|7|1N|8|@]|D|@]|E|$]]|$1|10|3|-4|5|6|7|1O|8|@]|D|@]|E|$]]]|11|$]]

SSH

If you are trying it with SSH, then the Host key Verification error can come due to several reasons.Follow these steps to overcome all the reasons.

<ol>
<li>Set the Environment variable as HOME and provide the address as the root directory of .ssh folder. e.g:- If your .ssh is kept inside Name folder. 
 C:/Users/Name.</li>
<li>Now make sure that the public SSH key is being provided in the repository link also. Either it is github or bitbucket or any other. </li>
<li>Open git bash. And try cloning the project from the repository. This will help in adding your repository URL in the known_host file, which is being auto created in the .ssh folder.</li>
<li>Now open jenkins and create a new job. Then click on configure. </li>
<li>provide the cloning URL in Source code management under Git. The URL should be start with git@github.com/......... or ssh://proje........</li>
<li>Under the Credential you need to add the username and password of your repository form which you are cloning the project. Select that credential.</li>
<li>And now apply and save the configuration. </li>
<li>Bingo! Start building the project. I hope now you will not get any Host Key verification error! </li>
</ol>

blocks|key|198530|text|从bitbucket和github复制主机密钥：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|198531|ssh+root@deployserver+'echo+"$(ssh-keyscan+-t+rsa,dsa+bitbucket.org)"+>>+/root/.ssh/known_hosts'
ssh+root@deployserver+'echo+"$(ssh-keyscan+-t+rsa,dsa+github.com)"+>>+/root/.ssh/known_hosts'|code-block|syntax|javascript|198532|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Copy host keys from both bitbucket and github:

<pre><code>ssh root@deployserver 'echo "$(ssh-keyscan -t rsa,dsa bitbucket.org)" &gt;&gt; /root/.ssh/known_hosts'
ssh root@deployserver 'echo "$(ssh-keyscan -t rsa,dsa github.com)" &gt;&gt; /root/.ssh/known_hosts'
</code></pre>

blocks|key|194229|text|type|unstyled|depth|inlineStyleRanges|entityRanges|data|194230|使用以下命令以jenkins身份登录："sudo+su+-s+/bin/bash+jenkins"|ordered-list-item|194231|git克隆导致密钥错误的所需存储库|194232|它将要求您通过显示是/否(输入是或y)|194233|来添加密钥|194234|就这样!|194235|现在，您可以重新运行jenkins作业。|194236|我希望这能解决你的问题。|194237|entityMap^0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|-4|4|5|6|R|7|@]|8|@]|9|$]]|$1|A|3|B|4|C|6|S|7|@]|8|@]|9|$]]|$1|D|3|E|4|C|6|T|7|@]|8|@]|9|$]]|$1|F|3|G|4|C|6|U|7|@]|8|@]|9|$]]|$1|H|3|I|4|5|6|V|7|@]|8|@]|9|$]]|$1|J|3|K|4|5|6|W|7|@]|8|@]|9|$]]|$1|L|3|M|4|5|6|X|7|@]|8|@]|9|$]]|$1|N|3|O|4|5|6|Y|7|@]|8|@]|9|$]]|$1|P|3|-4|4|5|6|Z|7|@]|8|@]|9|$]]]|Q|$]]

<ol>
<li>login as jenkins using: "sudo su -s /bin/bash jenkins"</li>
<li>git clone the desired repo which causes the key error</li>
<li>it will ask you to add the key by showing Yes/No (enter yes or y)</li>
</ol>

that's it! 

you can now re-run the jenkins job.

I hope you this will fix your issue.

blocks|key|196049|text|我遇到了这个问题，原来问题是jenkins服务没有以jenkins用户的身份运行。因此，以jenkins用户身份运行这些命令效果很好。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|196050|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

I ran into this issue and it turned out the problem was that the jenkins service wasn't being run as the jenkins user. So running the commands as the jenkins user worked just fine.

blocks|key|3035674|text|至于解决方法(例如Windows从属)，请在全局属性中定义以下环境变量：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3035675|GIT_SSH_COMMAND="ssh+-o+UserKnownHostsFile=/dev/null+-o+StrictHostKeyChecking=no"|code-block|syntax|javascript|3035676|​|3035677|📷|atomic|offset|length|3035678|3035679|注意:如果您没有看到该选项，则可能需要使用+plugin。|3035680|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/597e3944753a1e61756bd00f02f5fee2.png|imageAlt|1|LINK|MUTABLE|url|https://plugins.jenkins.io/envinject^0|0|0|0|0|1|0|0|0|L|7|1|0^^$0|@$1|2|3|4|5|6|7|14|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|15|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|16|8|@]|9|@]|A|$]]|$1|I|3|J|5|K|7|17|8|@]|9|@$L|18|M|19|1|1A]]|A|$]]|$1|N|3|H|5|6|7|1B|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|1C|8|@]|9|@$L|1D|M|1E|1|1F]]|A|$]]|$1|Q|3|-4|5|6|7|1G|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|X|Y|-4]]|Z|$5|10|U|11|A|$12|13]]]]

As for the workaround (e.g. Windows slave), define the following environment variable in global properties:

<pre><code>GIT_SSH_COMMAND="ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no"
</code></pre>

<a href="https://i.stack.imgur.com/3St38.png" rel="noreferrer"><img src="https://i.stack.imgur.com/3St38.png" alt="Jenkins, Global properties, Environment variables, GIT_SSH_COMMAND"></a>

Note: If you don't see the option, you probably need <a href="https://plugins.jenkins.io/envinject" rel="noreferrer">EnvInject plugin</a> for it.

blocks|key|2823070|text|问题出在/var/lib/jenkins/.ssh/known_hosts中。它在第一种情况下存在，但在第二种情况下不存在。这意味着您要么在不同的系统上运行，要么第二种情况以某种方式被限制在chroot中，或者通过与文件系统的其余部分分离的其他方式(这对于从jenkins运行随机代码来说是一个好主意)。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2823071|下一步是找出该用户的chroot是如何创建的，并修改此chroot中的已知主机。或者用其他方式忽略已知的主机，比如ssh-keyscan、StrictHostKeyChecking=no等等。|2823072|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

issue is with the /var/lib/jenkins/.ssh/known_hosts. It exists in the first case, but not in the second one. This means you are running either on different system or the second case is somehow jailed in chroot or by other means separated from the rest of the filesystem (this is a good idea for running random code from jenkins).
Next steps are finding out how are the chroots for this user created and modify the known hosts inside this chroot. Or just go other ways of ignoring known hosts, such as ssh-keyscan, StrictHostKeyChecking=no or so.

blocks|key|196105|text|在ssh-keygen之后，可能只需要使用以下命令将公钥复制到远程主机：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|196106|ssh-copy-id+-i+~/.ssh/mykey+user@host|code-block|syntax|javascript|196107|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

After ssh-keygen probably one only needs to copy the public key to remote host with:
<pre><code>ssh-copy-id -i ~/.ssh/mykey user@host
</code></pre>

blocks|key|194319|text|使用ssh-keyscan应该容易得多：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|194320|ssh-keyscan+bitbucket.org+>>+~/.ssh/known_hosts|code-block|syntax|javascript|194321|此命令将把所有需要的主机放入~/.ssh/known_hosts。您需要在Jenkins机器中运行此命令。您还可以创建一个作业，并将该命令放入该作业配置的"Execute+shell“部分，然后执行该作业。|offset|length|style|CODE|194322|entityMap^0|0|0|E|I|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Use ssh-keyscan should be much more easier:
<pre><code>ssh-keyscan bitbucket.org &gt;&gt; ~/.ssh/known_hosts
</code></pre>
This command will put all required hosts to <code>~/.ssh/known_hosts</code>. You will need to run this command inside your Jenkins machine. You can also create a job and put that command into the &quot;Execute shell&quot; section of the Configure of that job and then execute the job.

I have a problem with jenkins, setting "git", shows the following error:

<pre><code>Failed to connect to repository : Command "git ls-remote -h https://person@bitbucket.org/person/projectmarket.git HEAD" returned status code 128:
stdout:
stderr: fatal: Authentication failed
</code></pre>

I have tested with ssh:

<pre><code>git@bitbucket.org:person/projectmarket.git
</code></pre>

This is error:

<pre><code>Failed to connect to repository : Command "git ls-remote -h git@bitbucket.org:person/projectmarket.git HEAD" returned status code 128:
stdout:
stderr: Host key verification failed.
fatal: The remote end hung up unexpectedly
</code></pre>

I've also done these steps with "SSH key".

Login under Jenkins

<pre><code>sudo su jenkins
</code></pre>

Copy your github key to Jenkins .ssh folder

<pre><code>cp ~/.ssh/id_rsa_github* /var/lib/jenkins/.ssh/
</code></pre>

Rename the keys

<pre><code>mv id_rsa_github id_rsa
mv id_rsa_github.pub id_rsa.pub
</code></pre>

but still not working git repository in jenkins.

thanks by help!.

Jenkins Host key verification failed

文件系统

服务器

Windows

我有一个关于jenkins的问题，设置为"git"，显示以下错误：Failed to connect to repository : Command "git ls-remote -h https://person@bitbucket.org/person/projectmarket.git HEAD" returne...

问Jenkins主机密钥验证失败
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Jenkins主机密钥验证失败EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Jenkins主机密钥验证失败
EN