Deploy: Cloning repo git@github.com: Permission denied (publickey)

[michal-poplawski]

I have a problem with linking a ssh key to a repository on github.

I have a project on WSL in the Laravel framework that I want to deploy code to VPS. For deploy I am using yours package.

As instructed, I generated a public/private key set using ssh-keygen. In WSL /home/deployer/.ssh/config I have:

Host *
  IdentityFile ~/.ssh/id_rsa_deployer

On the VPS, I added the public ssh-rsa key to /home/deployer/.ssh/authorized_keys. At this stage everything is ok, it authorises itself to the VPS and all the tasks from vendor/bin/dep provision -o become=root are running. A file structure is created at the designated location.

According to the instructions, the next step is to run vendor/bin/dep deploy -o become=root and here unfortunately I stop at the deploy:update_code task (the task is directly from the Laravel Deployer package):

task deploy:info
[some-page] info deploying HEAD
task deploy:setup
  ⠙ r passphrase for key '/home/deployer/.ssh/id_rsa_deployer':   ⠧
task deploy:lock
task deploy:release
task deploy:update_code
[some-page]  error  in update_code.php on line 90:
[some-page] run export GIT_TERMINAL_PROMPT='0' GIT_SSH_COMMAND='ssh -o StrictHostKeyChecking=accept-new'; [ -f /var/www/project-name/.dep/repo/HEAD ] || /usr/bin/git clone --mirror git@github.com:my-name/my-repo.git /var/www/project-name/.dep/repo 2>&1
[some-page] Cloning into bare repository '/var/www/project-name/.dep/repo'...
[some-page] git@github.com: Permission denied (publickey).
[some-page] fatal: Could not read from remote repository.
[some-page] Please make sure you have the correct access rights
[some-page] and the repository exists.
[some-page] exit code 128 (Invalid exit argument)
ERROR: Task deploy:update_code failed!
task deploy:failed
task deploy:unlock

When I access the deployer user via PuTTy with the same key as I have on WSL I have no problem cloning the repository: git clone --mirror git@github.com:my-name/my-repo.git . On the VPS in /home/deployer/.ssh/config I have:

Host github.com
	AddKeyToAgent yes
	ForwardAgent yes
	Hostname github.com
	User git
	IdentityFile /home/deployer/.ssh/id_rsa

The /home/deployer/.ssh/id_rsa was generated inside the VPS using ssh-keygen.

Of course, I added the deployer public keys from the WSL (id_rsa_deployer) and the one generated inside the VPS (/home/deployer/.ssh/id_rsa) to my github account under Settings -> SSH and GPG keys.

I might also add that I don't have an SSL certificate on the VPS, but I doubt it would make any difference.

Below I add logs from running the command on the VPS: ssh -vT git@github.com:

OpenSSH_8.2p1 Ubuntu-4ubuntu0.11, OpenSSL 1.1.1f  31 Mar 2020
debug1: Reading configuration data /home/deployer/.ssh/config
debug1: /home/deployer/.ssh/config line 1: Applying options for github.com
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/*.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug1: Connecting to github.com [GITHUB_IP_ADDRESS] port 22.
debug1: Connection established.
debug1: identity file /home/deployer/.ssh/id_rsa type 0
debug1: identity file /home/deployer/.ssh/id_rsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11
debug1: Remote protocol version 2.0, remote software version babeld-57ca1323
debug1: no match: babeld-57ca1323
debug1: Authenticating to github.com:22 as 'git'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:p2(...)
debug1: Host 'github.com' is known and matches the ECDSA host key.
debug1: Found key in /home/deployer/.ssh/known_hosts:1
Warning: Permanently added the ECDSA host key for IP address 'GITHUB_IP_ADDRESS' to the list of known hosts.
debug1: resetting send seqnr 3
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: resetting read seqnr 3
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey in after 134217728 blocks
debug1: Will attempt key: /home/deployer/.ssh/id_rsa RSA SHA256:Y3(...) explicit agent
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/deployer/.ssh/id_rsa RSA SHA256:Y3(...) explicit agent
debug1: Server accepts key: /home/deployer/.ssh/id_rsa RSA SHA256:Y3(...) explicit agent
debug1: Authentication succeeded (publickey).
Authenticated to github.com ([GITHUB_IP_ADDRESS]:22).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: pledge: network
debug1: client_input_global_request: rtype hostkeys-00@openssh.com want_reply 0
debug1: Requesting authentication agent forwarding.
debug1: Sending environment.
debug1: Sending env LANG = en_US
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
Hi my-name! You've successfully authenticated, but GitHub does not provide shell access.
debug1: channel 0: free: client-session, nchannels 1
Transferred: sent 3256, received 3048 bytes, in 0.3 seconds
Bytes per second: sent 12793.5, received 11976.3
debug1: Exit status 1

I would be grateful for any help, if needed I can send additional information.