执行mina设置时出错

Question

我正在使用mina部署我的rails应用程序。我将aws与nginx和rvm结合使用。

每当我做mina setup，我就会得到

    Permission denied (publickey).

 !     Command failed.
       Failed with status 1 (255)

这是我的deploy.rb文件

require 'mina/bundler'
require 'mina/rails'
require 'mina/git'
# require 'mina/rbenv'  # for rbenv support. (http://rbenv.org)
require 'mina/rvm'    # for rvm support. (http://rvm.io)

# Basic settings:
#   domain       - The hostname to SSH to.
#   deploy_to    - Path to deploy into.
#   repository   - Git repo to clone from. (needed by mina/git)
#   branch       - Branch name to deploy. (needed by mina/git)
set :user, 'ubuntu'
set :domain, 'domain.com'
set :deploy_to, '/usr/share/nginx/html/project'
set :repository, 'https://mc_cannibal@bitbucket.org/mc_cannibal/fuitter2.git'
set :branch, 'master'
# set :forward_agent, true

# For system-wide RVM install.
#   set :rvm_path, '/usr/local/rvm/bin/rvm'

# Manually create these paths in shared/ (eg: shared/config/database.yml) in your server.
# They will be linked in the 'deploy:link_shared_paths' step.
set :shared_paths, ['config/database.yml', 'config/secrets.yml', 'log']

# Optional settings:
#   set :user, 'foobar'    # Username in the server to SSH to.
#   set :port, '30000'     # SSH port number.
#   set :forward_agent, true     # SSH forward_agent.

# This task is the environment that is loaded for most commands, such as
# `mina deploy` or `mina rake`.
task :environment do
  # If you're using rbenv, use this to load the rbenv environment.
  # Be sure to commit your .ruby-version or .rbenv-version to your repository.
  # invoke :'rbenv:load'

  # For those using RVM, use this to load an RVM version@gemset.
  invoke :'rvm:use[ruby-1.9.3-p125@default]'
end

# Put any custom mkdir's in here for when `mina setup` is ran.
# For Rails apps, we'll make some of the shared paths that are shared between
# all releases.
task :setup => :environment do
  queue! %[mkdir -p "#{deploy_to}/#{shared_path}/log"]
  queue! %[chmod g+rx,u+rwx "#{deploy_to}/#{shared_path}/log"]

  queue! %[mkdir -p "#{deploy_to}/#{shared_path}/config"]
  queue! %[chmod g+rx,u+rwx "#{deploy_to}/#{shared_path}/config"]

  queue! %[touch "#{deploy_to}/#{shared_path}/config/database.yml"]
  queue! %[touch "#{deploy_to}/#{shared_path}/config/secrets.yml"]
  queue  %[echo "-----> Be sure to edit '#{deploy_to}/#{shared_path}/config/database.yml' and 'secrets.yml'."]

  queue %[
    repo_host=`echo $repo | sed -e 's/.*@//g' -e 's/:.*//g'` &&
    repo_port=`echo $repo | grep -o ':[0-9]*' | sed -e 's/://g'` &&
    if [ -z "${repo_port}" ]; then repo_port=22; fi &&
    ssh-keyscan -p $repo_port -H $repo_host >> ~/.ssh/known_hosts
  ]
end

desc "Deploys the current version to the server."
task :deploy => :environment do
  to :before_hook do
    # Put things to run locally before ssh
  end
  deploy do
    # Put things that will set up an empty directory into a fully set-up
    # instance of your project.
    invoke :'git:clone'
    invoke :'deploy:link_shared_paths'
    invoke :'bundle:install'
    invoke :'rails:db_migrate'
    invoke :'rails:assets_precompile'
    invoke :'deploy:cleanup'

    to :launch do
      queue "mkdir -p #{deploy_to}/#{current_path}/tmp/"
      queue "touch #{deploy_to}/#{current_path}/tmp/restart.txt"
    end
  end
end

# For help in making your deploy script, see the Mina documentation:
#
#  - http://nadarei.co/mina
#  - http://nadarei.co/mina/tasks
#  - http://nadarei.co/mina/settings
#  - http://nadarei.co/mina/helpers

Answer 1

正如您已经提供的那样，您目前使用.pem文件对实例进行ssh操作，并且由于Mina没有提供一种使用.pem文件连接ssh的方法(还没有)。因此，您可以将计算机的public_key添加到实例中，并通过公钥启用登录，这意味着您可以在不使用密码或.pem文件的情况下将ssh登录到实例。

要将您的公钥复制到您的ec2实例(仅用于Linux或Mac )：

cat ~/.ssh/id_rsa.pub | ssh -i "fuitter.pem" ubuntu@52.88.43.104 "cat >> .ssh/authorized_keys"

ec2实例并重新启动ssh服务：

sudo service ssh restart

然后尝试在不带pem文件的情况下对实例执行ssh。

ssh ubuntu@52.88.43.104

如果成功，mina将成功地连接到您的实例。

Answer 2

正如Long Nguyen所说的above，Mina没有提供一种使用.pem文件连接ssh的方法。因此，我们需要将计算机的public_key添加到实例中，并通过公钥启用登录。也就是说，在没有密码的情况下连接到实例。

然而，我在他的脚步声中遇到了一些错误，下面是我的：

• 生成SSH密钥：ssh-keygen -t rsa -m PEM
• 使用：ls -lah ~/.ssh检查它，输出应该有id_rsa.pub id_rsa
• 将其添加到实例中的authorized_keys：cat ~/.ssh/id_rsa.pub | sudo ssh -i ~/Downloads/my_key.pem ubuntu@x.xxx.xx.xxx "cat >> ~/.ssh/authorized_keys"
• 检查实例是否允许ssh-ing，在/etc/ssh/sshd_config中，检查PasswordAuthentication是yes，没有注释。(这应该在实例本身上运行)
• 如果您对此文件做了任何更改：service ssh restart # On Ubuntu或service sshd restart # On Centos，请重新启动sshd服务
• 现在您可以连接到您的实例，而不需要像thisL：ssh ubuntu@EC2-Public-IP这样的anu密码。
• 如果在登录时需要为实例设置passowrd，请尝试：sudo passwd ubuntu