Docker/rootless: &#34;ssh-keygen&#34;: executable file not found in $PATH - #10397

@wxiaoguang commented on GitHub (Mar 7, 2023):

What's the content of your app.ini?

Your config GITEA__server__DISABLE_SSH: ${GITEA_DISABLE_SSH:-true} doesn't look right.

By default, the app.ini looks like this, check the DISABLE_SSH = false and START_SSH_SERVER = true

[server]
APP_DATA_PATH           = /var/lib/gitea
SSH_DOMAIN              = localhost
HTTP_PORT               = 3000
ROOT_URL                = http://localhost:3000/
DISABLE_SSH             = false
; In rootless gitea container only internal ssh server is supported
START_SSH_SERVER        = true
SSH_PORT                = 2222
SSH_LISTEN_PORT         = 2222
BUILTIN_SSH_SERVER_USER = git
LFS_START_SERVER        = true
DOMAIN                  = localhost

@wxiaoguang commented on GitHub (Mar 7, 2023): What's the content of your `app.ini`? Your config `GITEA__server__DISABLE_SSH: ${GITEA_DISABLE_SSH:-true}` doesn't look right. By default, the `app.ini` looks like this, check the `DISABLE_SSH = false` and `START_SSH_SERVER = true` ``` [server] APP_DATA_PATH = /var/lib/gitea SSH_DOMAIN = localhost HTTP_PORT = 3000 ROOT_URL = http://localhost:3000/ DISABLE_SSH = false ; In rootless gitea container only internal ssh server is supported START_SSH_SERVER = true SSH_PORT = 2222 SSH_LISTEN_PORT = 2222 BUILTIN_SSH_SERVER_USER = git LFS_START_SERVER = true DOMAIN = localhost ```

GiteaMirror commented

@williamdes commented on GitHub (Mar 7, 2023):

Your config GITEA__server__DISABLE_SSH: ${GITEA_DISABLE_SSH:-true} doesn't look right.

It just says to use the ENV value of GITEA_DISABLE_SSH or "true". It's false in my ENV.

GITEA_DISABLE_SSH=false
GITEA_DISABLE_REGISTRATION=true

APP_NAME = <redacted>
RUN_MODE = prod
RUN_USER = git

[repository]
ROOT = /data/git/repositories

[repository.local]
LOCAL_COPY_PATH = /data/gitea/tmp/local-repo

[repository.upload]
TEMP_PATH = /data/gitea/uploads

[server]
APP_DATA_PATH    = /data/gitea
DOMAIN           = localhost
SSH_DOMAIN       = <redacted>
HTTP_PORT        = 3000
ROOT_URL         = https://<redacted>
DISABLE_SSH      = false
SSH_PORT         = 22
SSH_LISTEN_PORT  = 2222
LFS_START_SERVER = true
LFS_JWT_SECRET   = <redacted>
OFFLINE_MODE     = true
SSH_USER         = git
SSH_LISTEN_HOST  = 0.0.0.0
SSH_ROOT_PATH    = /home/git/.ssh

[database]
PATH     = /data/gitea/gitea.db
DB_TYPE  = mysql
HOST     = <redacted>
NAME     = <redacted>
USER     = <redacted>
PASSWD   = <redacted>
LOG_SQL  = false
SCHEMA   = 
SSL_MODE = disable
CHARSET  = utf8mb4

[indexer]
ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve

[session]
PROVIDER_CONFIG = /data/gitea/sessions
PROVIDER        = file
SAME_SITE       = strict
COOKIE_SECURE   = true

[picture]
AVATAR_UPLOAD_PATH            = /data/gitea/avatars
REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
DISABLE_GRAVATAR              = true
ENABLE_FEDERATED_AVATAR       = false

[attachment]
PATH = /data/gitea/attachments

[log]
MODE      = console
LEVEL     = Debug
ROUTER    = console
ROOT_PATH = /data/git/log

[security]
INSTALL_LOCK                  = true
SECRET_KEY                    = <redacted>
REVERSE_PROXY_LIMIT           = 1
REVERSE_PROXY_TRUSTED_PROXIES = *
INTERNAL_TOKEN                = <redacted>
PASSWORD_HASH_ALGO            = pbkdf2

[service]
DISABLE_REGISTRATION              = true
REQUIRE_SIGNIN_VIEW               = true
REGISTER_EMAIL_CONFIRM            = true
ENABLE_NOTIFY_MAIL                = false
ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
ENABLE_CAPTCHA                    = false
DEFAULT_KEEP_EMAIL_PRIVATE        = false
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
DEFAULT_ENABLE_TIMETRACKING       = false
NO_REPLY_ADDRESS                  = <redacted>

[oauth2]
JWT_SECRET = <redacted>

[mailer]
ENABLED                   = true
FROM                      = <redacted>
USER                      = <redacted>
PASSWD                    = <redacted>
HELO_HOSTNAME             = <redacted>
PROTOCOL                  = smtps
GITEA_MAIL_SUBJECT_PREFIX = <redacted>
SMTP_PORT                 = 465
SMTP_ADDR                 = <redacted>

[openid]
ENABLE_OPENID_SIGNIN = false
ENABLE_OPENID_SIGNUP = false

[cron]
ENABLED = true

[federation]
ENABLED = true

[actions]
ENABLED = true

[cron.update_checker]

[lfs]
PATH = /data/git/lfs

@williamdes commented on GitHub (Mar 7, 2023): > Your config GITEA__server__DISABLE_SSH: ${GITEA_DISABLE_SSH:-true} doesn't look right. It just says to use the ENV value of GITEA_DISABLE_SSH or "true". It's false in my ENV. ```env GITEA_DISABLE_SSH=false GITEA_DISABLE_REGISTRATION=true ``` ```ini APP_NAME = <redacted> RUN_MODE = prod RUN_USER = git [repository] ROOT = /data/git/repositories [repository.local] LOCAL_COPY_PATH = /data/gitea/tmp/local-repo [repository.upload] TEMP_PATH = /data/gitea/uploads [server] APP_DATA_PATH = /data/gitea DOMAIN = localhost SSH_DOMAIN = <redacted> HTTP_PORT = 3000 ROOT_URL = https://<redacted> DISABLE_SSH = false SSH_PORT = 22 SSH_LISTEN_PORT = 2222 LFS_START_SERVER = true LFS_JWT_SECRET = <redacted> OFFLINE_MODE = true SSH_USER = git SSH_LISTEN_HOST = 0.0.0.0 SSH_ROOT_PATH = /home/git/.ssh [database] PATH = /data/gitea/gitea.db DB_TYPE = mysql HOST = <redacted> NAME = <redacted> USER = <redacted> PASSWD = <redacted> LOG_SQL = false SCHEMA = SSL_MODE = disable CHARSET = utf8mb4 [indexer] ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve [session] PROVIDER_CONFIG = /data/gitea/sessions PROVIDER = file SAME_SITE = strict COOKIE_SECURE = true [picture] AVATAR_UPLOAD_PATH = /data/gitea/avatars REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars DISABLE_GRAVATAR = true ENABLE_FEDERATED_AVATAR = false [attachment] PATH = /data/gitea/attachments [log] MODE = console LEVEL = Debug ROUTER = console ROOT_PATH = /data/git/log [security] INSTALL_LOCK = true SECRET_KEY = <redacted> REVERSE_PROXY_LIMIT = 1 REVERSE_PROXY_TRUSTED_PROXIES = * INTERNAL_TOKEN = <redacted> PASSWORD_HASH_ALGO = pbkdf2 [service] DISABLE_REGISTRATION = true REQUIRE_SIGNIN_VIEW = true REGISTER_EMAIL_CONFIRM = true ENABLE_NOTIFY_MAIL = false ALLOW_ONLY_EXTERNAL_REGISTRATION = false ENABLE_CAPTCHA = false DEFAULT_KEEP_EMAIL_PRIVATE = false DEFAULT_ALLOW_CREATE_ORGANIZATION = true DEFAULT_ENABLE_TIMETRACKING = false NO_REPLY_ADDRESS = <redacted> [oauth2] JWT_SECRET = <redacted> [mailer] ENABLED = true FROM = <redacted> USER = <redacted> PASSWD = <redacted> HELO_HOSTNAME = <redacted> PROTOCOL = smtps GITEA_MAIL_SUBJECT_PREFIX = <redacted> SMTP_PORT = 465 SMTP_ADDR = <redacted> [openid] ENABLE_OPENID_SIGNIN = false ENABLE_OPENID_SIGNUP = false [cron] ENABLED = true [federation] ENABLED = true [actions] ENABLED = true [cron.update_checker] [lfs] PATH = /data/git/lfs ```

GiteaMirror commented

@wxiaoguang commented on GitHub (Mar 8, 2023):

You need START_SSH_SERVER=true but I didn't see it in your config.

@wxiaoguang commented on GitHub (Mar 8, 2023): You need `START_SSH_SERVER=true` but I didn't see it in your config.

GiteaMirror commented

@williamdes commented on GitHub (Mar 8, 2023):

You need START_SSH_SERVER=true but I didn't see it in your config.

The server is started because I use SSH git clone and it works fine 🤔
And when gitea starts it says it listens on port 22

Edit: I need to double check that, but is is really important ?
My demonstration of a quick fix shows the Docker image has a missing package, that's it ?
Right ?

@williamdes commented on GitHub (Mar 8, 2023): > You need `START_SSH_SERVER=true` but I didn't see it in your config. The server is started because I use SSH git clone and it works fine 🤔 And when gitea starts it says it listens on port 22 Edit: I need to double check that, but is is really important ? My demonstration of a quick fix shows the Docker image has a missing package, that's it ? Right ?

GiteaMirror commented

@wxiaoguang commented on GitHub (Mar 8, 2023):

Nope, by design, the docker-rootless shouldn't have that package. Instead, Gitea rootless should use internal ssh package to verify.

@wxiaoguang commented on GitHub (Mar 8, 2023): Nope, by design, the docker-rootless shouldn't have that package. Instead, Gitea rootless should use internal ssh package to verify.

GiteaMirror commented

@williamdes commented on GitHub (Mar 8, 2023):

Nope, by design, the docker-rootless shouldn't have that package. Instead, Gitea rootless should use internal ssh package to verify.

Oh okay, so I guess the code should be adapted anyway ?

Edit: can you explain why ?

@williamdes commented on GitHub (Mar 8, 2023): > Nope, by design, the docker-rootless shouldn't have that package. Instead, Gitea rootless should use internal ssh package to verify. Oh okay, so I guess the code should be adapted anyway ? Edit: can you explain why ?

GiteaMirror commented

@wxiaoguang commented on GitHub (Mar 8, 2023):

More information:

Gitea Docker and Gitea Docker-rootless are totally different for SSH problem.

Gitea Docker (aka gitea/gitea:1.19.0-rc1), it uses OpenSSH server.
Gitea Docker (aka gitea/gitea:1.19.0-rc1-rootless), it uses builtin SSH server (no OpenSSH).

Oh okay, so I guess the code should be adapted anyway ?

Yup, that why you must have START_SSH_SERVER=true in config (if you are using rootless), to tell Gitea to use internal ssh package.

Update 2: I agree that this problem is quite annoying and unfriendly to end-users ..... I do not like the inconsistent behaviors either, but the situation has been like this .... unless some one would have time to improve it.

@wxiaoguang commented on GitHub (Mar 8, 2023): More information: Gitea Docker and Gitea Docker-rootless are totally different for SSH problem. * Gitea Docker (aka `gitea/gitea:1.19.0-rc1`), it uses OpenSSH server. * Gitea Docker (aka `gitea/gitea:1.19.0-rc1-rootless`), it uses builtin SSH server (no OpenSSH). ---- > Oh okay, so I guess the code should be adapted anyway ? Yup, that why you must have `START_SSH_SERVER=true` in config (if you are using rootless), to tell Gitea to use internal ssh package. ---- Update 2: I agree that this problem is quite annoying and unfriendly to end-users ..... I do not like the inconsistent behaviors either, but the situation has been like this .... unless some one would have time to improve it.

GiteaMirror commented

@wxiaoguang commented on GitHub (Mar 8, 2023):

And there is still a question I haven't understood. By default, when you start the rootless version, there is a START_SSH_SERVER=true in the config (according to my local test), but I didn't see it in your config. Do you know what causes this problem? Or did you re-use the config from a non-rootless setup?

@wxiaoguang commented on GitHub (Mar 8, 2023): And there is still a question I haven't understood. By default, when you start the rootless version, there is a `START_SSH_SERVER=true` in the config (according to my local test), but I didn't see it in your config. Do you know what causes this problem? Or did you re-use the config from a non-rootless setup?

GiteaMirror commented

@williamdes commented on GitHub (Mar 8, 2023):

And there is still a question I haven't understood. By default, when you start the rootless version, there is a START_SSH_SERVER=true in the config (according to my local test), but I didn't see it in your config. Do you know what causes this problem? Or did you re-use the config from a non-rootless setup?

Very good question, in fact my setup was root and I just switched it to rootless when trying to debug stuff. So maybe this creates a side effect somewhere

@williamdes commented on GitHub (Mar 8, 2023): > And there is still a question I haven't understood. By default, when you start the rootless version, there is a `START_SSH_SERVER=true` in the config (according to my local test), but I didn't see it in your config. Do you know what causes this problem? Or did you re-use the config from a non-rootless setup? Very good question, in fact my setup was root and I just switched it to rootless when trying to debug stuff. So maybe this creates a side effect somewhere

GiteaMirror commented

@yogo1212 commented on GitHub (Mar 29, 2023):

same issue here.
hope that fixes it.

@yogo1212 commented on GitHub (Mar 29, 2023): same issue here. hope that fixes it.

GiteaMirror commented

@wxiaoguang commented on GitHub (Mar 29, 2023):

same issue here. hope that fixes it.

set START_SSH_SERVER=true, does it help?

@wxiaoguang commented on GitHub (Mar 29, 2023): > same issue here. hope that fixes it. set `START_SSH_SERVER=true`, does it help?

GiteaMirror commented

@yogo1212 commented on GitHub (Mar 29, 2023):

hi 👋

likely, it will. but that's off the point.
i don't want an ssh server inside the container :-)

@yogo1212 commented on GitHub (Mar 29, 2023): hi :wave: likely, it will. but that's off the point. i don't want an ssh server inside the container :-)

GiteaMirror commented