Capistrano перестал деплоить из-за ошибки авторизации ssh. Куда копать?

Question

[badcluster]

Rails 3, ruby 1.9.2, ubuntu, nginx, unicorn, capistrano
Деплой происходит с репозитория на bitbucket.org с помощью ключей развертывания. Последний раз деплоил в декабре 2013, сегодня попробовал - не работает. При выполнении cap deploy выдает

Error reading response length from authentication socket.

Что пробовал сделать:
- создал новую пару ключей на серваке.
- добавил новый публичный ключ с сервака в репозиторий.
Результат тот же самый.

Кусочек вывода команды cap deploy с ошибкой:

* ←[33mexecuting "if [ -d /sites/user1/project/deploy/shared/cached-copy ];
 then cd /sites/user1/project/deploy/shared/cached-copy && git fetch -q origi
n && git fetch --tags -q origin && git reset -q --hard 469ea5a1f2bf60d6122b0f129
6d59198a6e8d5fb && git clean -q -d -x -f; else git clone -q -b master git@bitbuc
ket.org:poloten4ik/bz.git /sites/user1/project/deploy/shared/cached-copy && c
d /sites/user1/project/deploy/shared/cached-copy && git checkout -q -b deploy
 469ea5a1f2bf60d6122b0f1296d59198a6e8d5fb; fi"←[0m
    servers: ["85.17.194.217"]
    [85.17.194.217] executing command
 ** [85.17.194.217 :: out] Error reading response length from authentication soc
ket.
 ** [85.17.194.217 :: out] Error reading response length from authentication soc
ket.
    ←[2;37mcommand finished in 4150ms←[0m
    copying the cached version to /sites/user1/project/deploy/releases/201402
23201009

Comments

[badcluster]

проблема была не в ssh, а в том, что gemfile был в .gitignore, и проект не хотел разворачиваться. А ошибки, которые я описал в посте, так и остались при деплое. Всем спасибо за реакцию, хорошее сообщество

Answer 1

[vovkats]

set :ssh_options, { :forward_agent => false }

Answer 2

[Dmitry Tallmange]

Вручную зайти по ssh от имени пользователя, который делает деплой, на удаленный сервер пробовали?

Comments

[portfelio]

@badcluster покажите сразу выхлоп для этого с параметром -v

[badcluster]

$ ssh -v user1@8*.*.*.*7
OpenSSH_4.6p1, OpenSSL 0.9.8e 23 Feb 2007
debug1: Reading configuration data /c/Users/admin/.ssh/config
debug1: Applying options for *
debug1: Connecting to 8*.*.*.*7 [8*.*.*.*7] port 22.
debug1: Connection established.
debug1: identity file /c/Users/admin/.ssh/id_rsa type 1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.9p1 Debian-5ubuntu1
debug1: match: OpenSSH_5.9p1 Debian-5ubuntu1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.6
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '8*.*.*.*7' is known and matches the RSA host key.
debug1: Found key in /c/Users/admin/.ssh/known_hosts:4
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Offering public key: /c/Users/admin/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 277
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: Requesting authentication agent forwarding.
Welcome to Ubuntu 12.04 LTS (GNU/Linux 3.2.0-25-virtual x86_64)

* Documentation: https://help.ubuntu.com/
Last login: Mon Feb 24 21:46:22 2014 from srv.*****.ru

[badcluster]

а вот на сервере запускаю ssh -v [e-mail]

[badcluster]

user1@srv:~$ ssh -v [e-mail]
OpenSSH_5.9p1 Debian-5ubuntu1, OpenSSL 1.0.1 14 Mar 2012
debug1: Reading configuration data /sites/user1/.ssh/config
debug1: /sites/user1/.ssh/config line 1: Applying options for *
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 18: Applying options for *
debug1: Connecting to bitbucket.org [131.103.20.168] port 22.
debug1: Connection established.
debug1: identity file /sites/user1/.ssh/id_rsa type 1
debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048
debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048
debug1: identity file /sites/user1/.ssh/id_rsa-cert type -1
debug1: identity file /sites/user1/.ssh/id_dsa type -1
debug1: identity file /sites/user1/.ssh/id_dsa-cert type -1
debug1: identity file /sites/user1/.ssh/id_ecdsa type -1
debug1: identity file /sites/user1/.ssh/id_ecdsa-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: RSA 97:8c:1b:f2:6f:14:6b:5c:3b:ec:aa:46:46:74:7c:40
debug1: Host 'bitbucket.org' is known and matches the RSA host key.
debug1: Found key in /sites/user1/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /c/Users/admin/.ssh/id_rsa
debug1: Remote: Forced command: conq username:poloten4ik
debug1: Remote: Port forwarding disabled.
debug1: Remote: X11 forwarding disabled.
debug1: Remote: Agent forwarding disabled.
debug1: Remote: Pty allocation disabled.
debug1: Server accepts key: pkalg ssh-rsa blen 277
debug1: Remote: Forced command: conq username:poloten4ik
debug1: Remote: Port forwarding disabled.
debug1: Remote: X11 forwarding disabled.
debug1: Remote: Agent forwarding disabled.
debug1: Remote: Pty allocation disabled.
debug1: Authentication succeeded (publickey).
Authenticated to bitbucket.org ([131.103.20.168]:22).
debug1: channel 0: new [client-session]
debug1: Requesting [e-mail]
debug1: Entering interactive session.
debug1: Requesting authentication agent forwarding.
debug1: Sending environment.
debug1: Sending env LANG = ru_RU.UTF-8
PTY allocation request failed on channel 0
logged in as poloten4ik.

You can use git or hg to connect to Bitbucket. Shell access is disabled.
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: client_input_channel_req: channel 0 rtype [e-mail] reply 0
debug1: channel 0: free: client-session, nchannels 1
Connection to bitbucket.org closed.
Transferred: sent 3120, received 2904 bytes, in 0.3 seconds
Bytes per second: sent 11616.6, received 10812.3
debug1: Exit status 0

Answer 3

[Dmitry Tallmange]

Вот здесь гляньте

Answer 4

[Piranis]

@p00h то есть в случае у @badcluster bitbucket обновил openssh или он на своей машине?
что тут есть клиент что сервер?

Comments

[Dmitry Tallmange]

@Piranis кто и что обновил утверждать не могу, но, насколько я понимаю, схема такова:
1) @badcluster забирает код с bitbucket на "свою" машину;
2) эта самая машина запускает деплой скрипт;
3) скрипт идет на продакшен сервер и там разворачивает копию.

Насколько я понял, проблема была на шаге 3.

[Piranis]

это сценарий капистрано
set :deploy_via, :copy :)

[badcluster]

не, не так. я толкаю код на bb, сервер оттуда его забирает. кстати, проблема была вовсе не в ssh, а в том, что gemfile был в .gitignore, и проект не хотел разворачиваться. А ошибки, которые я описал в посте, так и остались при деплое. Всем спасибо за реакцию, хорошее сообщество