···

       
37
       
37
       
 
       
      mkdir ~/.ssh

     

       
38
       
38
       
 
       
      echo "${SSH_KEY}" > ~/.ssh/id_tangledsh

     

       
39
       
39
       
 
       
      chmod 600 ~/.ssh/id_tangledsh

     

       
40
       
40
       
-
       
      cat > ~/.ssh/config << EOF

     

       
40
       
40
       
+
       
      cat > /etc/ssh/ssh_config << EOF

     

       
41
       
41
       
 
       
      Host deploy

     

       
42
       
42
       
 
       
        HostName ${SERVER_HOST}

     

       
43
       
43
       
 
       
        User ${SERVER_USER}

     

       
44
       
44
       
 
       
        IdentityFile ~/.ssh/id_tangledsh

     

       
45
       
45
       
-
       
        StrictHostKeyChecking accept-new

     

       
45
       
45
       
+
       
        StrictHostKeyChecking no

     

       
46
       
46
       
+
       
        UserKnownHostsFile /dev/null

     

       
46
       
47
       
 
       
        BatchMode yes

     

       
47
       
48
       
 
       
        PasswordAuthentication no

     

       
48
       
49
       
 
       
        PubkeyAuthentication yes

     

       
49
       
50
       
 
       
      EOF

     

       
50
       
50
       
-
       
      chmod 600 ~/.ssh/config

     

       
51
       
51
       
-
       
      ssh-keyscan -H $SERVER_HOST > ~/.ssh/known_hosts

     

       
51
       
51
       
+
       
      chmod 600 /etc/ssh/ssh_config

     

       
52
       
52
       
+
       
      ssh-keyscan -H $SERVER_HOST >> ~/.ssh/known_hosts

     

       
52
       
53
       
 
       
  

     

       
53
       
54
       
 
       
  - name: "Deploy via SCP"

     

       
54
       
55
       
 
       
    command: |