添加ssh密钥
This commit is contained in:
422
setup_gitea_ssh_keys.ps1
Normal file
422
setup_gitea_ssh_keys.ps1
Normal file
@@ -0,0 +1,422 @@
|
||||
# Gitea SSH密钥设置脚本 (Windows PowerShell版本)
|
||||
# 用途: 获取/生成SSH密钥并添加到Gitea
|
||||
# 用法: .\setup_gitea_ssh_keys.ps1
|
||||
|
||||
param(
|
||||
[string]$Help
|
||||
)
|
||||
|
||||
# 配置信息（将通过用户输入获取）
|
||||
$DEFAULT_USERNAME = ""
|
||||
$DEFAULT_EMAIL = ""
|
||||
$GITEA_TOKEN = ""
|
||||
$GITEA_URL = "https://git.sanyitec.cc"
|
||||
$SSH_PORT = 222
|
||||
|
||||
# 检查是否请求帮助
|
||||
if ($Help -eq "--help" -or $Help -eq "-h") {
|
||||
Write-Host "=== Gitea SSH密钥设置脚本 (Windows版) ===" -ForegroundColor Green
|
||||
Write-Host "用途: 检查/生成SSH密钥并添加到Gitea"
|
||||
Write-Host ""
|
||||
Write-Host "用法:"
|
||||
Write-Host " .\setup_gitea_ssh_keys.ps1 # 交互式配置"
|
||||
Write-Host ""
|
||||
Write-Host "功能:"
|
||||
Write-Host " 1. 交互式输入Git用户信息和Gitea Token"
|
||||
Write-Host " 2. 检查现有SSH密钥或生成新密钥"
|
||||
Write-Host " 3. 自动添加公钥到Gitea"
|
||||
Write-Host " 4. 配置Git用户信息"
|
||||
Write-Host " 5. 配置SSH连接设置（端口222）"
|
||||
Write-Host " 6. 测试Gitea SSH连接"
|
||||
Write-Host ""
|
||||
exit 0
|
||||
}
|
||||
|
||||
Write-Host "=== Gitea SSH密钥设置脚本 (Windows版) ===" -ForegroundColor Green
|
||||
Write-Host "将通过交互式配置检查现有SSH密钥或生成新密钥并添加到Gitea" -ForegroundColor Yellow
|
||||
|
||||
# 使用当前用户
|
||||
$SSH_USERNAME = $env:USERNAME
|
||||
Write-Host "当前用户: $SSH_USERNAME" -ForegroundColor Cyan
|
||||
|
||||
# 获取用户输入配置
|
||||
function Get-UserConfiguration {
|
||||
Write-Host "=== 配置信息输入 ===" -ForegroundColor Green
|
||||
Write-Host "请输入以下配置信息：" -ForegroundColor Yellow
|
||||
Write-Host ""
|
||||
|
||||
# 获取Git用户名
|
||||
do {
|
||||
$script:DEFAULT_USERNAME = Read-Host "请输入Git用户名"
|
||||
if ([string]::IsNullOrWhiteSpace($script:DEFAULT_USERNAME)) {
|
||||
Write-Host "❌ 用户名不能为空，请重新输入" -ForegroundColor Red
|
||||
}
|
||||
} while ([string]::IsNullOrWhiteSpace($script:DEFAULT_USERNAME))
|
||||
|
||||
# 获取Git邮箱
|
||||
do {
|
||||
$script:DEFAULT_EMAIL = Read-Host "请输入Git邮箱地址"
|
||||
if ([string]::IsNullOrWhiteSpace($script:DEFAULT_EMAIL) -or $script:DEFAULT_EMAIL -notmatch "^[^@]+@[^@]+\.[^@]+$") {
|
||||
Write-Host "❌ 请输入有效的邮箱地址" -ForegroundColor Red
|
||||
}
|
||||
} while ([string]::IsNullOrWhiteSpace($script:DEFAULT_EMAIL) -or $script:DEFAULT_EMAIL -notmatch "^[^@]+@[^@]+\.[^@]+$")
|
||||
|
||||
# 获取Gitea Token
|
||||
do {
|
||||
$script:GITEA_TOKEN = Read-Host "请输入Gitea访问Token" -AsSecureString
|
||||
$script:GITEA_TOKEN = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($script:GITEA_TOKEN))
|
||||
if ([string]::IsNullOrWhiteSpace($script:GITEA_TOKEN)) {
|
||||
Write-Host "❌ Token不能为空，请重新输入" -ForegroundColor Red
|
||||
}
|
||||
} while ([string]::IsNullOrWhiteSpace($script:GITEA_TOKEN))
|
||||
|
||||
Write-Host ""
|
||||
Write-Host "✓ 配置信息输入完成" -ForegroundColor Green
|
||||
Write-Host "用户名: $script:DEFAULT_USERNAME" -ForegroundColor Cyan
|
||||
Write-Host "邮箱: $script:DEFAULT_EMAIL" -ForegroundColor Cyan
|
||||
Write-Host "Token: $('*' * $script:GITEA_TOKEN.Length)" -ForegroundColor Cyan
|
||||
Write-Host ""
|
||||
}
|
||||
|
||||
# 检查必要工具
|
||||
function Check-Dependencies {
|
||||
Write-Host "正在检查依赖工具..." -ForegroundColor Yellow
|
||||
|
||||
$missingTools = @()
|
||||
|
||||
# 检查Git
|
||||
try {
|
||||
git --version | Out-Null
|
||||
Write-Host "✓ Git已安装" -ForegroundColor Green
|
||||
} catch {
|
||||
$missingTools += "Git"
|
||||
}
|
||||
|
||||
# 检查SSH
|
||||
try {
|
||||
ssh -V 2>$null | Out-Null
|
||||
Write-Host "✓ SSH已安装" -ForegroundColor Green
|
||||
} catch {
|
||||
Write-Host "⚠ SSH未找到，将使用Windows内置OpenSSH" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
if ($missingTools.Count -gt 0) {
|
||||
Write-Host "❌ 缺少以下工具: $($missingTools -join ', ')" -ForegroundColor Red
|
||||
Write-Host "请安装Git for Windows: https://git-scm.com/download/win" -ForegroundColor Yellow
|
||||
exit 1
|
||||
}
|
||||
|
||||
Write-Host "✓ 所有依赖工具检查完成" -ForegroundColor Green
|
||||
}
|
||||
|
||||
# 检查或生成SSH密钥
|
||||
function Check-OrGenerate-SSHKey {
|
||||
Write-Host "正在检查SSH密钥..." -ForegroundColor Yellow
|
||||
|
||||
$sshDir = "$env:USERPROFILE\.ssh"
|
||||
$privateKeyPath = "$sshDir\id_rsa"
|
||||
$publicKeyPath = "$sshDir\id_rsa.pub"
|
||||
|
||||
# 检查是否已存在SSH密钥
|
||||
if (Test-Path $publicKeyPath) {
|
||||
Write-Host "✓ SSH密钥已存在" -ForegroundColor Green
|
||||
return
|
||||
}
|
||||
|
||||
Write-Host "正在生成SSH密钥..." -ForegroundColor Yellow
|
||||
|
||||
# 创建.ssh目录
|
||||
if (!(Test-Path $sshDir)) {
|
||||
New-Item -ItemType Directory -Path $sshDir -Force | Out-Null
|
||||
}
|
||||
|
||||
# 生成SSH密钥
|
||||
try {
|
||||
ssh-keygen -t rsa -b 4096 -C $DEFAULT_EMAIL -f $privateKeyPath -N '""'
|
||||
Write-Host "✓ SSH密钥生成成功" -ForegroundColor Green
|
||||
} catch {
|
||||
Write-Host "❌ SSH密钥生成失败: $($_.Exception.Message)" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
}
|
||||
|
||||
# 获取公钥
|
||||
function Get-PublicKey {
|
||||
Write-Host "正在获取公钥..." -ForegroundColor Yellow
|
||||
|
||||
$publicKeyPath = "$env:USERPROFILE\.ssh\id_rsa.pub"
|
||||
|
||||
if (Test-Path $publicKeyPath) {
|
||||
$script:PUBLIC_KEY = Get-Content $publicKeyPath -Raw
|
||||
$script:PUBLIC_KEY = $script:PUBLIC_KEY.Trim()
|
||||
Write-Host "✓ 公钥获取成功" -ForegroundColor Green
|
||||
Write-Host "公钥内容: $($script:PUBLIC_KEY.Substring(0, [Math]::Min(50, $script:PUBLIC_KEY.Length)))..." -ForegroundColor Cyan
|
||||
} else {
|
||||
Write-Host "❌ 公钥文件不存在" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
}
|
||||
|
||||
# 验证Gitea Token
|
||||
function Verify-GiteaToken {
|
||||
Write-Host "正在验证Gitea Token..." -ForegroundColor Yellow
|
||||
|
||||
try {
|
||||
$headers = @{
|
||||
"Authorization" = "token $GITEA_TOKEN"
|
||||
"Accept" = "application/json"
|
||||
}
|
||||
|
||||
# 忽略SSL证书验证
|
||||
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
|
||||
|
||||
$response = Invoke-RestMethod -Uri "$GITEA_URL/api/v1/user" -Headers $headers -Method Get
|
||||
Write-Host "✓ Gitea Token验证成功，用户: $($response.login)" -ForegroundColor Green
|
||||
} catch {
|
||||
Write-Host "❌ Gitea Token验证失败: $($_.Exception.Message)" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
}
|
||||
|
||||
# 检查SSH密钥是否已存在于Gitea
|
||||
function Check-KeyExistsOnGitea {
|
||||
Write-Host "正在检查SSH密钥是否已存在于Gitea..." -ForegroundColor Yellow
|
||||
|
||||
# 获取当前公钥的指纹部分
|
||||
$currentKeyContent = ($script:PUBLIC_KEY -split ' ')[1]
|
||||
Write-Host "当前本地密钥指纹: $($currentKeyContent.Substring(0, [Math]::Min(50, $currentKeyContent.Length)))..." -ForegroundColor Cyan
|
||||
|
||||
try {
|
||||
$headers = @{
|
||||
"Authorization" = "token $GITEA_TOKEN"
|
||||
"Accept" = "application/json"
|
||||
}
|
||||
|
||||
$giteaKeys = Invoke-RestMethod -Uri "$GITEA_URL/api/v1/user/keys" -Headers $headers -Method Get
|
||||
|
||||
Write-Host "Gitea上现有的密钥:" -ForegroundColor Cyan
|
||||
foreach ($key in $giteaKeys) {
|
||||
$keyPreview = $key.key.Substring(0, [Math]::Min(50, $key.key.Length))
|
||||
Write-Host " - $($key.title): $keyPreview..." -ForegroundColor Gray
|
||||
}
|
||||
|
||||
# 检查是否有匹配的密钥
|
||||
foreach ($key in $giteaKeys) {
|
||||
if ($key.key -like "*$currentKeyContent*") {
|
||||
Write-Host "✓ SSH密钥已存在于Gitea账户中" -ForegroundColor Green
|
||||
Write-Host "现有密钥标题: $($key.title)" -ForegroundColor Cyan
|
||||
return $true
|
||||
}
|
||||
}
|
||||
|
||||
Write-Host "⚠ 当前SSH密钥不存在于Gitea账户中，需要添加" -ForegroundColor Yellow
|
||||
return $false
|
||||
|
||||
} catch {
|
||||
Write-Host "❌ 检查Gitea密钥失败: $($_.Exception.Message)" -ForegroundColor Red
|
||||
return $false
|
||||
}
|
||||
}
|
||||
|
||||
# 添加SSH密钥到Gitea
|
||||
function Add-KeyToGitea {
|
||||
# 先检查密钥是否已存在
|
||||
if (Check-KeyExistsOnGitea) {
|
||||
Write-Host "✓ 跳过添加，使用现有密钥" -ForegroundColor Green
|
||||
return
|
||||
}
|
||||
|
||||
Write-Host "正在添加SSH密钥到Gitea..." -ForegroundColor Yellow
|
||||
|
||||
# 生成密钥标题
|
||||
$keyTitle = "$SSH_USERNAME@$env:COMPUTERNAME-$(Get-Date -Format 'yyyyMMdd_HHmmss')"
|
||||
|
||||
try {
|
||||
$headers = @{
|
||||
"Authorization" = "token $GITEA_TOKEN"
|
||||
"Accept" = "application/json"
|
||||
"Content-Type" = "application/json"
|
||||
}
|
||||
|
||||
$body = @{
|
||||
title = $keyTitle
|
||||
key = $script:PUBLIC_KEY
|
||||
} | ConvertTo-Json
|
||||
|
||||
$response = Invoke-RestMethod -Uri "$GITEA_URL/api/v1/user/keys" -Headers $headers -Method Post -Body $body
|
||||
|
||||
Write-Host "✓ SSH密钥已成功添加到Gitea" -ForegroundColor Green
|
||||
Write-Host "密钥标题: $keyTitle" -ForegroundColor Cyan
|
||||
if ($response.id) {
|
||||
Write-Host "密钥ID: $($response.id)" -ForegroundColor Cyan
|
||||
}
|
||||
|
||||
} catch {
|
||||
$errorMessage = $_.Exception.Message
|
||||
if ($errorMessage -like "*422*" -or $errorMessage -like "*already*") {
|
||||
Write-Host "⚠ 这个SSH密钥已经存在于Gitea账户中" -ForegroundColor Yellow
|
||||
Write-Host "✓ 可以继续使用现有密钥" -ForegroundColor Green
|
||||
} else {
|
||||
Write-Host "❌ 添加SSH密钥失败: $errorMessage" -ForegroundColor Red
|
||||
Write-Host "可能的原因:" -ForegroundColor Yellow
|
||||
Write-Host "1. SSH密钥格式不正确" -ForegroundColor Yellow
|
||||
Write-Host "2. Gitea Token权限不足" -ForegroundColor Yellow
|
||||
Write-Host "3. 密钥已被其他账户使用" -ForegroundColor Yellow
|
||||
Write-Host "4. 网络连接问题" -ForegroundColor Yellow
|
||||
exit 1
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# 配置Git用户信息
|
||||
function Configure-Git {
|
||||
Write-Host "正在配置Git用户信息..." -ForegroundColor Yellow
|
||||
|
||||
try {
|
||||
git config --global user.name $DEFAULT_USERNAME
|
||||
git config --global user.email $DEFAULT_EMAIL
|
||||
|
||||
Write-Host "✓ Git用户信息配置完成" -ForegroundColor Green
|
||||
Write-Host "用户名: $(git config --global user.name)" -ForegroundColor Cyan
|
||||
Write-Host "邮箱: $(git config --global user.email)" -ForegroundColor Cyan
|
||||
} catch {
|
||||
Write-Host "❌ Git配置失败: $($_.Exception.Message)" -ForegroundColor Red
|
||||
exit 1
|
||||
}
|
||||
}
|
||||
|
||||
# 配置Gitea SSH
|
||||
function Configure-GiteaSSH {
|
||||
Write-Host "正在配置Gitea SSH..." -ForegroundColor Yellow
|
||||
|
||||
$sshDir = "$env:USERPROFILE\.ssh"
|
||||
$configPath = "$sshDir\config"
|
||||
|
||||
# 创建SSH目录
|
||||
if (!(Test-Path $sshDir)) {
|
||||
New-Item -ItemType Directory -Path $sshDir -Force | Out-Null
|
||||
}
|
||||
|
||||
# 从Gitea URL中提取主机名
|
||||
$giteaHost = ($GITEA_URL -replace "https?://", "") -replace "/.*", ""
|
||||
|
||||
# 检查是否已有Gitea配置
|
||||
$configExists = $false
|
||||
if (Test-Path $configPath) {
|
||||
$configContent = Get-Content $configPath -Raw
|
||||
if ($configContent -like "*Host $giteaHost*") {
|
||||
$configExists = $true
|
||||
}
|
||||
}
|
||||
|
||||
if (!$configExists) {
|
||||
$sshConfig = @"
|
||||
|
||||
# Gitea SSH configuration
|
||||
Host $giteaHost
|
||||
Hostname $giteaHost
|
||||
Port $SSH_PORT
|
||||
User git
|
||||
IdentityFile ~/.ssh/id_rsa
|
||||
"@
|
||||
Add-Content -Path $configPath -Value $sshConfig
|
||||
Write-Host "✓ 已配置Gitea SSH" -ForegroundColor Green
|
||||
} else {
|
||||
Write-Host "✓ Gitea SSH配置已存在" -ForegroundColor Green
|
||||
}
|
||||
}
|
||||
|
||||
# 测试Gitea SSH连接
|
||||
function Test-GiteaConnection {
|
||||
Write-Host "正在测试Gitea SSH连接..." -ForegroundColor Yellow
|
||||
|
||||
# 从Gitea URL中提取主机名
|
||||
$giteaHost = ($GITEA_URL -replace "https?://", "") -replace "/.*", ""
|
||||
|
||||
Write-Host "尝试连接到 $giteaHost..." -ForegroundColor Cyan
|
||||
|
||||
try {
|
||||
# 使用ssh命令测试连接
|
||||
$testResult = ssh -T -o StrictHostKeyChecking=no -o ConnectTimeout=10 "git@$giteaHost" 2>&1
|
||||
|
||||
Write-Host "SSH测试输出: $testResult" -ForegroundColor Gray
|
||||
|
||||
if ($testResult -like "*Hi there*" -or $testResult -like "*successfully authenticated*" -or $testResult -like "*Welcome*" -or $testResult -like "*Hi $DEFAULT_USERNAME*") {
|
||||
Write-Host "✓ Gitea SSH连接测试成功" -ForegroundColor Green
|
||||
Write-Host "现在可以通过SSH访问Gitea仓库" -ForegroundColor Green
|
||||
} else {
|
||||
Write-Host "⚠ Gitea SSH连接测试未完全成功" -ForegroundColor Yellow
|
||||
Write-Host "测试结果: $testResult" -ForegroundColor Gray
|
||||
|
||||
if ($testResult -like "*Connection closed*" -or $testResult -like "*Connection refused*" -or $testResult -like "*Network is unreachable*") {
|
||||
Write-Host "这可能是网络连接问题，但SSH密钥已成功添加到Gitea" -ForegroundColor Yellow
|
||||
Write-Host "建议稍后手动测试: ssh -T git@$giteaHost" -ForegroundColor Yellow
|
||||
} else {
|
||||
Write-Host "可能的原因:" -ForegroundColor Yellow
|
||||
Write-Host "1. SSH密钥未正确添加到Gitea" -ForegroundColor Yellow
|
||||
Write-Host "2. 网络连接问题" -ForegroundColor Yellow
|
||||
Write-Host "3. SSH配置问题" -ForegroundColor Yellow
|
||||
Write-Host "4. Gitea服务暂时不可用" -ForegroundColor Yellow
|
||||
Write-Host "建议稍后手动测试: ssh -T git@$giteaHost" -ForegroundColor Yellow
|
||||
}
|
||||
}
|
||||
} catch {
|
||||
Write-Host "⚠ SSH连接测试遇到问题: $($_.Exception.Message)" -ForegroundColor Yellow
|
||||
Write-Host "但SSH密钥已成功添加到Gitea，建议稍后手动测试" -ForegroundColor Yellow
|
||||
}
|
||||
}
|
||||
|
||||
# 主执行流程
|
||||
function Main {
|
||||
Write-Host "开始Gitea SSH密钥设置过程..." -ForegroundColor Green
|
||||
Write-Host ""
|
||||
|
||||
# 获取用户配置
|
||||
Get-UserConfiguration
|
||||
|
||||
# 执行各个步骤
|
||||
Check-Dependencies
|
||||
Write-Host ""
|
||||
|
||||
Check-OrGenerate-SSHKey
|
||||
Write-Host ""
|
||||
|
||||
Get-PublicKey
|
||||
Write-Host ""
|
||||
|
||||
Verify-GiteaToken
|
||||
Write-Host ""
|
||||
|
||||
Add-KeyToGitea
|
||||
Write-Host ""
|
||||
|
||||
Configure-Git
|
||||
Write-Host ""
|
||||
|
||||
Configure-GiteaSSH
|
||||
Write-Host ""
|
||||
|
||||
Test-GiteaConnection
|
||||
Write-Host ""
|
||||
|
||||
Write-Host "=== 设置完成 ===" -ForegroundColor Green
|
||||
Write-Host "✓ Git已安装并配置完成" -ForegroundColor Green
|
||||
Write-Host "✓ Git用户信息已设置: $DEFAULT_USERNAME <$DEFAULT_EMAIL>" -ForegroundColor Green
|
||||
Write-Host "✓ SSH密钥已添加到Gitea" -ForegroundColor Green
|
||||
Write-Host "✓ 用户 $SSH_USERNAME 现在可以通过SSH访问Gitea仓库" -ForegroundColor Green
|
||||
Write-Host ""
|
||||
Write-Host "测试命令:" -ForegroundColor Yellow
|
||||
$giteaHost = ($GITEA_URL -replace "https?://", "") -replace "/.*", ""
|
||||
Write-Host " git clone git@${giteaHost}:username/repository.git" -ForegroundColor Cyan
|
||||
Write-Host " ssh -T git@$giteaHost" -ForegroundColor Cyan
|
||||
Write-Host " git config --list # 查看git配置" -ForegroundColor Cyan
|
||||
}
|
||||
|
||||
# 执行主函数
|
||||
try {
|
||||
Main
|
||||
} catch {
|
||||
Write-Host "❌ 脚本执行失败: $($_.Exception.Message)" -ForegroundColor Red
|
||||
Write-Host "请检查网络连接和配置信息" -ForegroundColor Yellow
|
||||
exit 1
|
||||
}
|
||||
421
setup_gitea_ssh_keys_interactive.sh
Executable file
421
setup_gitea_ssh_keys_interactive.sh
Executable file
@@ -0,0 +1,421 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Gitea SSH密钥设置脚本 (交互式版本)
|
||||
# 用途: 获取/生成SSH密钥并添加到Gitea
|
||||
# 用法: ./setup_gitea_ssh_keys_interactive.sh
|
||||
|
||||
set -e # 遇到错误立即退出
|
||||
|
||||
# 配置信息（将通过用户输入获取）
|
||||
DEFAULT_USERNAME=""
|
||||
DEFAULT_EMAIL=""
|
||||
GITEA_TOKEN=""
|
||||
GITEA_URL="https://git.sanyitec.cc"
|
||||
SSH_PORT=222
|
||||
|
||||
# 检查是否请求帮助
|
||||
if [ "$1" = "--help" ] || [ "$1" = "-h" ]; then
|
||||
echo "=== Gitea SSH密钥设置脚本 (交互式版本) ==="
|
||||
echo "用途: 检查/生成SSH密钥并添加到Gitea (交互式配置)"
|
||||
echo
|
||||
echo "用法:"
|
||||
echo " $0 # 交互式配置"
|
||||
echo
|
||||
echo "功能:"
|
||||
echo " 1. 交互式输入Git用户信息和Gitea Token"
|
||||
echo " 2. 检查现有SSH密钥或生成新密钥"
|
||||
echo " 3. 自动添加公钥到Gitea"
|
||||
echo " 4. 配置Git用户信息"
|
||||
echo " 5. 配置SSH连接设置（端口222）"
|
||||
echo " 6. 测试Gitea SSH连接"
|
||||
echo
|
||||
exit 0
|
||||
fi
|
||||
|
||||
echo "=== Gitea SSH密钥设置脚本 (交互式版本) ==="
|
||||
echo "将通过交互式配置检查现有SSH密钥或生成新密钥并添加到Gitea"
|
||||
|
||||
# 使用当前用户
|
||||
SSH_USERNAME="${SSH_USERNAME:-$(whoami)}"
|
||||
SSH_HOST="localhost"
|
||||
echo "当前用户: $SSH_USERNAME"
|
||||
|
||||
# 获取用户输入配置
|
||||
get_user_configuration() {
|
||||
echo "=== 配置信息输入 ==="
|
||||
echo "请输入以下配置信息："
|
||||
echo
|
||||
|
||||
# 获取Git用户名
|
||||
while true; do
|
||||
read -p "请输入Git用户名: " DEFAULT_USERNAME
|
||||
if [ -n "$DEFAULT_USERNAME" ]; then
|
||||
break
|
||||
else
|
||||
echo "❌ 用户名不能为空，请重新输入"
|
||||
fi
|
||||
done
|
||||
|
||||
# 获取Git邮箱
|
||||
while true; do
|
||||
read -p "请输入Git邮箱地址: " DEFAULT_EMAIL
|
||||
if [[ "$DEFAULT_EMAIL" =~ ^[^@]+@[^@]+\.[^@]+$ ]]; then
|
||||
break
|
||||
else
|
||||
echo "❌ 请输入有效的邮箱地址"
|
||||
fi
|
||||
done
|
||||
|
||||
# 获取Gitea Token
|
||||
while true; do
|
||||
read -s -p "请输入Gitea访问Token: " GITEA_TOKEN
|
||||
echo # 换行
|
||||
if [ -n "$GITEA_TOKEN" ]; then
|
||||
break
|
||||
else
|
||||
echo "❌ Token不能为空，请重新输入"
|
||||
fi
|
||||
done
|
||||
|
||||
echo
|
||||
echo "✓ 配置信息输入完成"
|
||||
echo "用户名: $DEFAULT_USERNAME"
|
||||
echo "邮箱: $DEFAULT_EMAIL"
|
||||
echo "Token: $(echo "$GITEA_TOKEN" | sed 's/./*/g')"
|
||||
echo
|
||||
}
|
||||
|
||||
# 检查必要工具
|
||||
check_dependencies() {
|
||||
echo "正在检查依赖工具..."
|
||||
|
||||
local missing_tools=()
|
||||
|
||||
if ! command -v git &> /dev/null; then
|
||||
missing_tools+=("git")
|
||||
fi
|
||||
|
||||
if ! command -v curl &> /dev/null; then
|
||||
missing_tools+=("curl")
|
||||
fi
|
||||
|
||||
if ! command -v jq &> /dev/null; then
|
||||
missing_tools+=("jq")
|
||||
fi
|
||||
|
||||
if [ ${#missing_tools[@]} -gt 0 ]; then
|
||||
echo "正在安装缺失的工具: ${missing_tools[*]}"
|
||||
|
||||
# 检查网络连接
|
||||
if ! ping -c 1 8.8.8.8 &>/dev/null; then
|
||||
echo "❌ 网络连接失败，无法安装依赖工具"
|
||||
echo "请手动安装以下工具: ${missing_tools[*]}"
|
||||
echo "命令: sudo apt update && sudo apt install -y ${missing_tools[*]}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
sudo apt update -qq
|
||||
for tool in "${missing_tools[@]}"; do
|
||||
sudo apt install -y "$tool"
|
||||
done
|
||||
echo "✓ 依赖工具安装完成"
|
||||
else
|
||||
echo "✓ 所有依赖工具已安装"
|
||||
fi
|
||||
}
|
||||
|
||||
# 检查或生成SSH密钥
|
||||
check_or_generate_ssh_key() {
|
||||
echo "正在检查本地SSH密钥..."
|
||||
|
||||
# 检查是否已存在SSH密钥
|
||||
if [ -f ~/.ssh/id_rsa.pub ]; then
|
||||
echo "✓ 本地已存在SSH密钥"
|
||||
return 0
|
||||
fi
|
||||
|
||||
echo "正在生成SSH密钥..."
|
||||
|
||||
# 生成SSH密钥
|
||||
mkdir -p ~/.ssh && chmod 700 ~/.ssh
|
||||
ssh-keygen -t rsa -b 4096 -C "$DEFAULT_EMAIL" -f ~/.ssh/id_rsa -N ''
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "✓ SSH密钥生成成功"
|
||||
else
|
||||
echo "❌ SSH密钥生成失败"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 获取公钥
|
||||
get_public_key() {
|
||||
echo "正在获取本地公钥..."
|
||||
|
||||
if [ -f ~/.ssh/id_rsa.pub ]; then
|
||||
PUBLIC_KEY=$(cat ~/.ssh/id_rsa.pub)
|
||||
echo "✓ 公钥获取成功"
|
||||
echo "公钥内容: ${PUBLIC_KEY:0:50}..."
|
||||
return 0
|
||||
else
|
||||
echo "❌ 本地公钥文件不存在"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 验证Gitea Token
|
||||
verify_gitea_token() {
|
||||
echo "正在验证Gitea Token..."
|
||||
|
||||
local response=$(curl -s -k -w "%{http_code}" \
|
||||
-H "Authorization: token $GITEA_TOKEN" \
|
||||
-H "Accept: application/json" \
|
||||
"$GITEA_URL/api/v1/user")
|
||||
|
||||
local http_code="${response: -3}"
|
||||
local response_body="${response%???}"
|
||||
|
||||
if [ "$http_code" = "200" ]; then
|
||||
local username=$(echo "$response_body" | jq -r '.login // empty')
|
||||
echo "✓ Gitea Token验证成功，用户: $username"
|
||||
return 0
|
||||
else
|
||||
echo "❌ Gitea Token验证失败 (HTTP $http_code)"
|
||||
echo "响应: $response_body"
|
||||
echo "请检查Gitea Token是否正确且具有足够权限"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 检查SSH密钥是否已存在于Gitea
|
||||
check_key_exists_on_gitea() {
|
||||
echo "正在检查SSH密钥是否已存在于Gitea..."
|
||||
|
||||
# 获取当前公钥的指纹部分（去掉ssh-rsa前缀和邮箱后缀）
|
||||
local current_key_content=$(echo "$PUBLIC_KEY" | awk '{print $2}')
|
||||
|
||||
echo "当前本地密钥指纹: ${current_key_content:0:50}..."
|
||||
|
||||
# 获取Gitea上的所有密钥
|
||||
local gitea_keys=$(curl -s -k \
|
||||
-H "Authorization: token $GITEA_TOKEN" \
|
||||
-H "Accept: application/json" \
|
||||
"$GITEA_URL/api/v1/user/keys")
|
||||
|
||||
# 显示Gitea上现有的密钥
|
||||
echo "Gitea上现有的密钥:"
|
||||
echo "$gitea_keys" | jq -r '.[] | " - \(.title): \(.key[0:50])..."'
|
||||
|
||||
# 检查是否有匹配的密钥
|
||||
if echo "$gitea_keys" | jq -r '.[].key' | grep -q "$current_key_content"; then
|
||||
echo "✓ SSH密钥已存在于Gitea账户中"
|
||||
local existing_title=$(echo "$gitea_keys" | jq -r '.[] | select(.key | contains("'$current_key_content'")) | .title')
|
||||
echo "现有密钥标题: $existing_title"
|
||||
return 0
|
||||
else
|
||||
echo "⚠ 当前SSH密钥不存在于Gitea账户中，需要添加"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 添加SSH密钥到Gitea
|
||||
add_key_to_gitea() {
|
||||
# 先检查密钥是否已存在
|
||||
if check_key_exists_on_gitea; then
|
||||
echo "✓ 跳过添加，使用现有密钥"
|
||||
return 0
|
||||
fi
|
||||
|
||||
echo "正在添加SSH密钥到Gitea..."
|
||||
|
||||
# 生成密钥标题（包含服务器信息和时间戳）
|
||||
local key_title="$SSH_USERNAME@$SSH_HOST-$(date +%Y%m%d_%H%M%S)"
|
||||
|
||||
# 构建JSON数据
|
||||
local json_data=$(jq -n \
|
||||
--arg title "$key_title" \
|
||||
--arg key "$PUBLIC_KEY" \
|
||||
'{title: $title, key: $key}')
|
||||
|
||||
# 发送请求到Gitea API
|
||||
local response=$(curl -s -k -w "%{http_code}" \
|
||||
-H "Authorization: token $GITEA_TOKEN" \
|
||||
-H "Accept: application/json" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d "$json_data" \
|
||||
"$GITEA_URL/api/v1/user/keys")
|
||||
|
||||
# 提取HTTP状态码
|
||||
local http_code="${response: -3}"
|
||||
local response_body="${response%???}"
|
||||
|
||||
if [ "$http_code" = "201" ]; then
|
||||
echo "✓ SSH密钥已成功添加到Gitea"
|
||||
echo "密钥标题: $key_title"
|
||||
|
||||
# 解析响应获取密钥ID
|
||||
local key_id=$(echo "$response_body" | jq -r '.id // empty')
|
||||
if [ -n "$key_id" ]; then
|
||||
echo "密钥ID: $key_id"
|
||||
fi
|
||||
elif [ "$http_code" = "422" ]; then
|
||||
# 检查是否是密钥已存在的错误
|
||||
local error_message=$(echo "$response_body" | jq -r '.message // empty')
|
||||
local errors=$(echo "$response_body" | jq -r '.errors[]?.message // empty' 2>/dev/null | tr '\n' '; ')
|
||||
|
||||
echo "❌ Gitea API验证失败 (HTTP 422)"
|
||||
echo "错误信息: $error_message"
|
||||
if [ -n "$errors" ]; then
|
||||
echo "详细错误: $errors"
|
||||
fi
|
||||
echo "完整响应: $response_body"
|
||||
|
||||
# 检查各种可能的错误情况
|
||||
if echo "$error_message" | grep -qi "key is already in use\|already exists"; then
|
||||
echo "⚠ 这个SSH密钥已经存在于Gitea账户中"
|
||||
echo "✓ 可以继续使用现有密钥"
|
||||
return 0 # 返回成功，因为密钥已存在
|
||||
elif echo "$response_body" | grep -qi "key is already in use\|already exists"; then
|
||||
echo "⚠ 这个SSH密钥已经存在于Gitea账户中"
|
||||
echo "✓ 可以继续使用现有密钥"
|
||||
return 0 # 返回成功，因为密钥已存在
|
||||
else
|
||||
echo "可能的原因:"
|
||||
echo "1. SSH密钥格式不正确"
|
||||
echo "2. Gitea Token权限不足"
|
||||
echo "3. 密钥已被其他账户使用"
|
||||
echo "4. 网络连接问题"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "❌ 添加SSH密钥失败 (HTTP $http_code)"
|
||||
echo "响应: $response_body"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 配置Git用户信息
|
||||
configure_git() {
|
||||
echo "正在配置Git用户信息..."
|
||||
|
||||
git config --global user.name "$DEFAULT_USERNAME"
|
||||
git config --global user.email "$DEFAULT_EMAIL"
|
||||
echo "✓ Git用户信息配置完成"
|
||||
echo "用户名: $(git config --global user.name)"
|
||||
echo "邮箱: $(git config --global user.email)"
|
||||
}
|
||||
|
||||
# 配置Gitea SSH
|
||||
configure_gitea_ssh() {
|
||||
echo "正在配置Gitea SSH..."
|
||||
|
||||
# 创建SSH配置文件
|
||||
mkdir -p ~/.ssh
|
||||
|
||||
# 从Gitea URL中提取主机名
|
||||
local gitea_host=$(echo "$GITEA_URL" | sed 's|https\?://||' | sed 's|/.*||')
|
||||
|
||||
# 检查是否已有Gitea配置
|
||||
if ! grep -q "Host $gitea_host" ~/.ssh/config 2>/dev/null; then
|
||||
echo "" >> ~/.ssh/config
|
||||
echo "# Gitea SSH configuration" >> ~/.ssh/config
|
||||
echo "Host $gitea_host" >> ~/.ssh/config
|
||||
echo " Hostname $gitea_host" >> ~/.ssh/config
|
||||
echo " Port $SSH_PORT" >> ~/.ssh/config
|
||||
echo " User git" >> ~/.ssh/config
|
||||
echo " IdentityFile ~/.ssh/id_rsa" >> ~/.ssh/config
|
||||
chmod 600 ~/.ssh/config
|
||||
echo "✓ 已配置Gitea SSH (端口: $SSH_PORT)"
|
||||
else
|
||||
echo "✓ Gitea SSH配置已存在"
|
||||
fi
|
||||
}
|
||||
|
||||
# 测试Gitea SSH连接
|
||||
test_gitea_connection() {
|
||||
echo "正在测试Gitea SSH连接..."
|
||||
|
||||
# 从Gitea URL中提取主机名
|
||||
local gitea_host=$(echo "$GITEA_URL" | sed 's|https\?://||' | sed 's|/.*||')
|
||||
|
||||
echo "尝试连接到 $gitea_host:$SSH_PORT..."
|
||||
local test_result=$(ssh -T -o StrictHostKeyChecking=no -o ConnectTimeout=10 git@$gitea_host 2>&1 || true)
|
||||
|
||||
echo "SSH测试输出: $test_result"
|
||||
|
||||
if echo "$test_result" | grep -q "Hi there\|successfully authenticated\|Welcome"; then
|
||||
echo "✓ Gitea SSH连接测试成功"
|
||||
echo "现在可以通过SSH访问Gitea仓库"
|
||||
return 0
|
||||
elif echo "$test_result" | grep -q "Hi $DEFAULT_USERNAME"; then
|
||||
echo "✓ Gitea SSH连接测试成功"
|
||||
echo "现在可以通过SSH访问Gitea仓库"
|
||||
return 0
|
||||
else
|
||||
echo "⚠ Gitea SSH连接测试未完全成功"
|
||||
echo "测试结果: $test_result"
|
||||
|
||||
# 检查是否是网络连接问题
|
||||
if echo "$test_result" | grep -q "Connection closed by remote host\|Connection refused\|Network is unreachable\|kex_exchange_identification"; then
|
||||
echo "这可能是网络连接问题，但SSH密钥已成功添加到Gitea"
|
||||
echo "建议稍后手动测试: ssh -T git@$gitea_host"
|
||||
return 0 # 不视为失败，因为密钥已添加成功
|
||||
else
|
||||
echo "可能的原因:"
|
||||
echo "1. SSH密钥未正确添加到Gitea"
|
||||
echo "2. 网络连接问题"
|
||||
echo "3. SSH配置问题"
|
||||
echo "4. Gitea服务暂时不可用"
|
||||
echo "建议稍后手动测试: ssh -T git@$gitea_host"
|
||||
return 0 # 改为返回成功，因为主要任务（添加密钥）已完成
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
# 主执行流程
|
||||
main() {
|
||||
echo "开始Gitea SSH密钥设置过程..."
|
||||
echo
|
||||
|
||||
# 获取用户配置
|
||||
get_user_configuration
|
||||
|
||||
# 执行各个步骤
|
||||
check_dependencies
|
||||
echo
|
||||
|
||||
check_or_generate_ssh_key
|
||||
echo
|
||||
|
||||
get_public_key
|
||||
echo
|
||||
|
||||
verify_gitea_token
|
||||
echo
|
||||
|
||||
add_key_to_gitea
|
||||
echo
|
||||
|
||||
configure_git
|
||||
echo
|
||||
|
||||
configure_gitea_ssh
|
||||
echo
|
||||
|
||||
test_gitea_connection
|
||||
echo
|
||||
|
||||
echo "=== 设置完成 ==="
|
||||
echo "✓ Git已安装并配置完成"
|
||||
echo "✓ Git用户信息已设置: $DEFAULT_USERNAME <$DEFAULT_EMAIL>"
|
||||
echo "✓ SSH密钥已添加到Gitea"
|
||||
echo "✓ 用户 $SSH_USERNAME 现在可以通过SSH访问Gitea仓库"
|
||||
echo
|
||||
echo "测试命令:"
|
||||
echo " git clone git@$(echo "$GITEA_URL" | sed 's|https\?://||' | sed 's|/.*||'):username/repository.git"
|
||||
echo " ssh -T git@$(echo "$GITEA_URL" | sed 's|https\?://||' | sed 's|/.*||')"
|
||||
echo " git config --list # 查看git配置"
|
||||
}
|
||||
|
||||
# 执行主函数
|
||||
main
|
||||
Reference in New Issue
Block a user