Earthly

unfortunately i do not feel enough confortable with go to fix this myself.

As far as i see on other examples the brackets syntax is common if you have a specific port for ssh. I think if you use a self hosted git with ssh on a different port earthly does not work. I assume I'm not the only one having such a setup.

That seems like a good hunch, and similar to the ticket you found. Is there a way you can try without the brackets? Or perhaps some other workaround you can use for now? Honestly we are quite busy lately and this doesn’t seem to affect too many people, so it might be hard for us to prioritize the bug fix. If you’re comfortable working on it though, it might involve a change in <https://github.com/earthly/earthly/blob/main/buildcontext/gitlookup.go|this file>

<@U02NXMDQ45Q> Did you get a chance to check if this is a bug? For me it looks like host entries with port and brackets [http://mycomp.com|mycomp.com]:2222 do not get matched by earthly.

Hi <@U02NXMDQ45Q> Unfortunately i still could not solve the issue and it's pretty critical to be solve it otherwise I will not get the go to use earthly in our company. I added some comments here: https://github.com/earthly/earthly/issues/2795

For me it looks like host entries with port and brackets [http://mycomp.com|mycomp.com]:2222 do not get matched by earthly.

There is no /etc/ssh/ssh_known_hosts on a mac. I also don't know if this path should be on the host or if it's a mount inside buildkit.

Interesting. There are some errors like this debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory followed by Host key verification failed. when it fails. I wonder if that's related

sure.

Interesting. Can you paste the output with -V? Wonder if that reveals anything more

Thats the full output it if helps.

i already run with -V flag. :disappointed:

locally yes but for gitlab i need to be able to use CI_JOB_TOKEN.

Oh another thought, I think earthly prints more details if you run with --verbose

I’m running out of debugging ideas. Is it possible to use the HTTPS based auth?

the problem happens when i try to execute a remote target which leads into cloning the git repository first. outside earthly i can clone the exact same repo without any issues.

my key is loaded.

yes i tried this.

Next make sure your private key has been added by running ssh-add <path to key>.```

Did you try the debugging tips here? https://docs.earthly.dev/docs/guides/auth#auto-authentication

yes it looks like and also from documentation i don't understand anything different. the issue is it's not working for me and my developer friend and i have no clue how to debug it further.

It looks like it should support using /etc/ssh/… :thinking_face: https://github.com/earthly/earthly/blob/c70b2701415f217058809ad08b303e01e29dcda7/buildcontext/gitlookup.go#L748-L763

Yeah, fair enough

and also i do not want todo this because of security reason :wink:

strict_host_key_checking: false does not work for me either. if i add ssh_command: ssh -o 'StrictHostKeyChecking=no' it works for me but not for the other developer.

It isn’t recommended for security reasons, but it looks like you could try disabling the known_hosts check: https://docs.earthly.dev/docs/earthly-config#strict_host_key_checking

Another developer has also issues but a different one(also on a arm mac). On his machine it looks like the know_hosts get loaded but the scan does not find the host. I'm not sure why the host is with [] but thats whats inside the know_hosts

matched earthly reference http://git.mycomp.com/images/maven|git.mycomp.com/images/maven with git config entry http://git.mycomp.com|git.mycomp.com (regex http://git.mycomp.com/[^/]+/[^/]+|git.mycomp.com/[^/]+/[^/]+) loaded 3 key(s) from known_hosts and 7 default key(s) ignoring key scan "[http://git.namics.com|git.namics.com]:2222 ssh-ed15119 MYKEY": due to host mismatch ...

Hello I'm on a m1 mac and try to build with earthly some remote targets. Unfortunatelly i cannot connect since my know_hosts file is not found. The path to it on mac is normally ~/.ssh/known_hosts but earthly tries to find it in /etc/ssh/ssh_know_hosts. Is this just the path inside the container? In ~/.ssh/known_hosts my host is there.

debug1: Remote protocol version 2.0, remote software version OpenSSH_8.0 debug1: compat_banner: match: OpenSSH_8.0 pat OpenSSH* compat 0x04000000 debug1: Authenticating to http://git.mycomp.com:2222|git.mycomp.com:2222 as 'git' debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory debug1: read_passphrase: can't open /dev/tty: No such device or address Host key verification failed. fatal: Could not read from remote repository.