81 lines
2.4 KiB
Bash
81 lines
2.4 KiB
Bash
|
#!/usr/bin/env bash
|
|||
|
|
# 检查当前环境是否有可用的 SSH 私钥，并测试到 Gitea 仓库的连通性
|
|||
|
|
# 用法: bash check_ssh.sh [host] [port]
|
|||
|
|
# 默认: 47.121.181.112:222
|
|||
|
|
|
|||
|
|
set -euo pipefail
|
|||
|
|
|
|||
|
|
HOST="${1:-47.121.181.112}"
|
|||
|
|
PORT="${2:-222}"
|
|||
|
|
USER="git"
|
|||
|
|
|
|||
|
|
RED='\033[0;31m'
|
|||
|
|
GREEN='\033[0;32m'
|
|||
|
|
YELLOW='\033[0;33m'
|
|||
|
|
NC='\033[0m' # No Color
|
|||
|
|
|
|||
|
|
echo "=== SSH 私钥检查 ==="
|
|||
|
|
|
|||
|
|
# 1. 检查 ssh-agent 中是否有加载的密钥
|
|||
|
|
if ssh-add -l 2>/dev/null | grep -q "."; then
|
|||
|
|
echo -e "${GREEN}[✓]${NC} ssh-agent 中有已加载的密钥"
|
|||
|
|
else
|
|||
|
|
echo -e "${YELLOW}[!]${NC} ssh-agent 中没有加载的密钥，将尝试使用 ~/.ssh/ 中的默认密钥"
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
# 2. 检查常见私钥文件是否存在
|
|||
|
|
FOUND_KEY=false
|
|||
|
|
for key_file in ~/.ssh/id_ed25519 ~/.ssh/id_rsa ~/.ssh/id_ecdsa ~/.ssh/id_dsa; do
|
|||
|
|
if [ -f "$key_file" ]; then
|
|||
|
|
echo -e "${GREEN}[✓]${NC} 找到私钥: $key_file"
|
|||
|
|
FOUND_KEY=true
|
|||
|
|
break
|
|||
|
|
fi
|
|||
|
|
done
|
|||
|
|
|
|||
|
|
if [ "$FOUND_KEY" = false ]; then
|
|||
|
|
echo -e "${RED}[✗]${NC} 未找到任何默认 SSH 私钥（~/.ssh/id_ed25519, id_rsa, id_ecdsa, id_dsa）"
|
|||
|
|
echo ""
|
|||
|
|
echo "请生成一个新的 SSH 密钥:"
|
|||
|
|
echo " ssh-keygen -t ed25519 -C 'your_email@example.com'"
|
|||
|
|
echo ""
|
|||
|
|
echo "然后将公钥添加到 Gitea:"
|
|||
|
|
echo " cat ~/.ssh/id_ed25519.pub"
|
|||
|
|
echo " # 在 Gitea 的 Settings → SSH Keys 中添加"
|
|||
|
|
exit 1
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
# 3. 测试 SSH 连通性
|
|||
|
|
echo ""
|
|||
|
|
echo "=== 测试 SSH 连通性 ==="
|
|||
|
|
echo "连接到 ${USER}@${HOST}:${PORT} ..."
|
|||
|
|
|
|||
|
|
if ssh -o StrictHostKeyChecking=accept-new \
|
|||
|
|
-o ConnectTimeout=10 \
|
|||
|
|
-o BatchMode=yes \
|
|||
|
|
-p "$PORT" \
|
|||
|
|
"${USER}@${HOST}" 2>&1 | grep -qi "welcome\|gitea\|hello\|ssh"; then
|
|||
|
|
echo -e "${GREEN}[✓]${NC} SSH 连接成功"
|
|||
|
|
exit 0
|
|||
|
|
else
|
|||
|
|
# ssh 返回非 0 但可能仍然成功（Gitea 会断开连接，返回码可能不为 0）
|
|||
|
|
# 尝试实际 git ls-remote 来验证
|
|||
|
|
if git ls-remote "ssh://${USER}@${HOST}:${PORT}/wonder/docs.git" HEAD >/dev/null 2>&1; then
|
|||
|
|
echo -e "${GREEN}[✓]${NC} SSH 认证成功（可以访问仓库）"
|
|||
|
|
exit 0
|
|||
|
|
else
|
|||
|
|
echo -e "${RED}[✗]${NC} SSH 连接失败"
|
|||
|
|
echo ""
|
|||
|
|
echo "可能的原因:"
|
|||
|
|
echo " 1. 私钥未添加到 Gitea"
|
|||
|
|
echo " 2. SSH 代理未运行"
|
|||
|
|
echo " 3. 网络不通"
|
|||
|
|
echo ""
|
|||
|
|
echo "请尝试:"
|
|||
|
|
echo " eval \$(ssh-agent -s)"
|
|||
|
|
echo " ssh-add ~/.ssh/id_ed25519"
|
|||
|
|
echo " ssh -p $PORT ${USER}@${HOST}"
|
|||
|
|
exit 1
|
|||
|
|
fi
|
|||
|
|
fi
|