Automating Azure DevOps Linux AgentsHow do I prompt for Yes/No/Cancel input in a Linux shell script?How to symlink a file in Linux?How do I change permissions for a folder and all of its subfolders and files in one step in Linux?How to change the output color of echo in LinuxHow do I copy folder with files to another folder in Unix/Linux?How do I find all files containing specific text on Linux?Azure DevOps Build SubmoduleSecurely Signing ClickOnce Applications in Azure DevOps PipelineUnable to download artifacts from Azure DevOps git repository from Linux agent
Is it a good security practice to force employees hide their employer to avoid being targeted?
Can an escape pod land on Earth from orbit and not be immediately detected?
Are athletes' college degrees discounted by employers and graduate school admissions?
Should I move out from my current apartment before the contract ends to save more money?
Any gotchas in buying second-hand sanitary ware?
Is pointing finger in meeting consider bad?
Idiom for 'person who gets violent when drunk"
I sent an angry e-mail to my interviewers about a conflict at my home institution. Could this affect my application?
How can this shape perfectly cover a cube?
Loop counter not interpreted as number
Is fission/fusion to iron the most efficient way to convert mass to energy?
Print the phrase "And she said, 'But that's his.'" using only the alphabet
usage of mir gefallen
ISP is not hashing the password I log in with online. Should I take any action?
Should I worry about having my credit pulled multiple times while car shopping?
What do you call the action of "describing events as they happen" like sports anchors do?
Am I being scammed by a sugar daddy?
Can I get a photo of an Ancient Arrow?
Fastest way from 10 to 1 with everyone in between
What does the "titan" monster tag mean?
Why did the Death Eaters wait to reopen the Chamber of Secrets?
Jam with honey & without pectin has a saucy consistency always
Realistic, logical way for men with medieval-era weaponry to compete with much larger and physically stronger foes
Is all-caps blackletter no longer taboo?
Automating Azure DevOps Linux Agents
How do I prompt for Yes/No/Cancel input in a Linux shell script?How to symlink a file in Linux?How do I change permissions for a folder and all of its subfolders and files in one step in Linux?How to change the output color of echo in LinuxHow do I copy folder with files to another folder in Unix/Linux?How do I find all files containing specific text on Linux?Azure DevOps Build SubmoduleSecurely Signing ClickOnce Applications in Azure DevOps PipelineUnable to download artifacts from Azure DevOps git repository from Linux agent
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I am automating the build of my Azure DevOps Linux Agents and I am trying to figure out how I can allow the agent access to other servers. When building the VM in Azure I supply the public key of my administrative user, but I want to inject the private key somehow without compromising security. I thought about trying to add a certificate at deploy time and then using that certificate to connect to a Key Vault and pull down the ssh private key. Any thoughts on other ways to accomplish this?
linux automation
azure-devops agent asked Mar 25 at 1:22
Scott HeathScott Heath
393
add a comment |
I am automating the build of my Azure DevOps Linux Agents and I am trying to figure out how I can allow the agent access to other servers. When building the VM in Azure I supply the public key of my administrative user, but I want to inject the private key somehow without compromising security. I thought about trying to add a certificate at deploy time and then using that certificate to connect to a Key Vault and pull down the ssh private key. Any thoughts on other ways to accomplish this?
linux automation
azure-devops agent asked Mar 25 at 1:22
Scott HeathScott Heath
393
AppVeyor has an article on how to save the key to environment and then inject into the actual agent when the build task starts, appveyor.com/docs/how-to/private-git-sub-modules You can use the same approach on Azure DevOps.
– Lex Li
Mar 25 at 3:08
either key vault or scriptdsc extension, cloudinit, perhaps
– 4c74356b41
Mar 25 at 5:38
add a comment |
I am automating the build of my Azure DevOps Linux Agents and I am trying to figure out how I can allow the agent access to other servers. When building the VM in Azure I supply the public key of my administrative user, but I want to inject the private key somehow without compromising security. I thought about trying to add a certificate at deploy time and then using that certificate to connect to a Key Vault and pull down the ssh private key. Any thoughts on other ways to accomplish this?
linux automation
azure-devops agent asked Mar 25 at 1:22
Scott HeathScott Heath
393
I am automating the build of my Azure DevOps Linux Agents and I am trying to figure out how I can allow the agent access to other servers. When building the VM in Azure I supply the public key of my administrative user, but I want to inject the private key somehow without compromising security. I thought about trying to add a certificate at deploy time and then using that certificate to connect to a Key Vault and pull down the ssh private key. Any thoughts on other ways to accomplish this?
linux automation
azure-devops agent linux automation
azure-devops agent asked Mar 25 at 1:22
Scott HeathScott Heath
393
asked Mar 25 at 1:22
Scott HeathScott Heath
393
asked Mar 25 at 1:22
Scott HeathScott Heath
393
asked Mar 25 at 1:22
Scott HeathScott Heath
393
asked Mar 25 at 1:22
Scott HeathScott Heath
393
393
AppVeyor has an article on how to save the key to environment and then inject into the actual agent when the build task starts, appveyor.com/docs/how-to/private-git-sub-modules You can use the same approach on Azure DevOps.
– Lex Li
Mar 25 at 3:08
either key vault or scriptdsc extension, cloudinit, perhaps
– 4c74356b41
Mar 25 at 5:38
add a comment |
AppVeyor has an article on how to save the key to environment and then inject into the actual agent when the build task starts, appveyor.com/docs/how-to/private-git-sub-modules You can use the same approach on Azure DevOps.
– Lex Li
Mar 25 at 3:08
either key vault or scriptdsc extension, cloudinit, perhaps
– 4c74356b41
Mar 25 at 5:38
AppVeyor has an article on how to save the key to environment and then inject into the actual agent when the build task starts, appveyor.com/docs/how-to/private-git-sub-modules You can use the same approach on Azure DevOps.
– Lex Li
Mar 25 at 3:08
AppVeyor has an article on how to save the key to environment and then inject into the actual agent when the build task starts, appveyor.com/docs/how-to/private-git-sub-modules You can use the same approach on Azure DevOps.
– Lex Li
Mar 25 at 3:08
either key vault or scriptdsc extension, cloudinit, perhaps
– 4c74356b41
Mar 25 at 5:38
either key vault or scriptdsc extension, cloudinit, perhaps
– 4c74356b41
Mar 25 at 5:38
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55330218%2fautomating-azure-devops-linux-agents%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55330218%2fautomating-azure-devops-linux-agents%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
AppVeyor has an article on how to save the key to environment and then inject into the actual agent when the build task starts, appveyor.com/docs/how-to/private-git-sub-modules You can use the same approach on Azure DevOps.
– Lex Li
Mar 25 at 3:08
either key vault or scriptdsc extension, cloudinit, perhaps
– 4c74356b41
Mar 25 at 5:38