<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi Pierre, <br>
</p>
<p>it is understandable that people should use SSH keys, but if
third party exposes non-SSH access then this becomes a problem.</p>
<p>Obfuscation of command (e.g. password) is nice, but if for
whatever reason this command fails and writes sensitive
information into stderr/stdout it will still be visible. Of course
if worker is on Linux that can be piped and replaced (or through
code itself).</p>
Since I'm provisioning my workers with SSH keys anyway I have
sensitive information in gitconfig, but I just wanted to point out
that use cases can happen in situations when someone doesn't have
another choice.<br>
<br>
PS Pierre: ups, wrong reply button<br>
<div class="moz-cite-prefix">On 03/06/2017 08:32 PM, Chris Spencer
wrote:<br>
</div>
<blockquote
cite="mid:CANe40gKVgTSQ12fcBjp5wG_x_-o2Lwpd=GtS43mFG6mKCXk9qQ@mail.gmail.com"
type="cite">
<div dir="ltr">Is there any way to suppress the output of the Git
step (<a moz-do-not-send="true"
href="http://docs.buildbot.net/latest/manual/cfg-buildsteps.html#step-Git">http://docs.buildbot.net/latest/manual/cfg-buildsteps.html#step-Git</a>),
so my password isn't visible in the logs? It doesn't appear to
accept any type of "gitbin" option.<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Mar 2, 2017 at 6:42 PM, Will
Rosecrans <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:wrosecrans@gmail.com" target="_blank">wrosecrans@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">As far as I know, the GitPoller doesn't
directly support that. I have mostly used salt to set up
the buildslave machine, and included ssh and git config as
part of the buildslave's system config rather than the
buildbot config. If you are using GitHub, it's also easy
to set up token passwords on an account and use that for
service work. It uses a password rather than an actual
key, but the password is a long string of gibberish, and
you can use the token as a sub account, with different
permissions for the tokens and the ability tp revoke them
individually.
<div><br>
</div>
<div>You can also set the GitPoller's gitbin to point to a
script that runs git with whatever key setup you like,
and have buildbot just invoke that script.</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote"><span class="">On Wed, Mar 1,
2017 at 5:18 PM, Chris Spencer <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:chrisspen@gmail.com" target="_blank">chrisspen@gmail.com</a>></span>
wrote:<br>
</span>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"><span
class="">
<div dir="ltr">
<div>How do you specify the ssh key to use with
the Gitpoller and Git step classes?<br>
<br>
</div>
I'm currently hard-coding my username/password in
the repourl, and I'd like to move away from that
for security reasons. However, even after reading
the docs and looking at the source, I can see no
obvious way to specify the pem key file to
checkout and fetch via ssh.<br>
</div>
<br>
</span><span class="">______________________________<wbr>_________________<br>
users mailing list<br>
<a moz-do-not-send="true"
href="mailto:users@buildbot.net" target="_blank">users@buildbot.net</a><br>
<a moz-do-not-send="true"
href="https://lists.buildbot.net/mailman/listinfo/users"
rel="noreferrer" target="_blank">https://lists.buildbot.net/mai<wbr>lman/listinfo/users</a><br>
</span></blockquote>
</div>
<br>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:users@buildbot.net">users@buildbot.net</a>
<a class="moz-txt-link-freetext" href="https://lists.buildbot.net/mailman/listinfo/users">https://lists.buildbot.net/mailman/listinfo/users</a></pre>
</blockquote>
<br>
</body>
</html>