{"id":148400,"date":"2020-09-01T15:49:26","date_gmt":"2020-09-01T07:49:26","guid":{"rendered":"http:\/\/4563.org\/?p=148400"},"modified":"2020-09-01T15:49:26","modified_gmt":"2020-09-01T07:49:26","slug":"%e4%bd%bf%e7%94%a8-ssh-%e8%bf%9e%e6%8e%a5-github-action-%e6%9c%8d%e5%8a%a1%e5%99%a8","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=148400","title":{"rendered":"\u4f7f\u7528 SSH \u8fde\u63a5 GitHub Action \u670d\u52a1\u5668"},"content":{"rendered":"\n

\t\t\t\t\tzxxx<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

\u4f7f\u7528 SSH \u8fde\u63a5 GitHub Action \u670d\u52a1\u5668<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 zxxx \u4e8e 2020-9-1 16:10 \u7f16\u8f91 <\/p>\n

1. \u5728\u00a0ngrok \u7684\u5b98\u7f51\u6ce8\u518c\u4e00\u4e2a\u8d26\u6237<\/p>\n

https:\/\/www.ngrok.com\/<\/p>\n

2. \u67e5\u770b Authtoken<\/p>\n

https:\/\/dashboard.ngrok.com\/auth\/your-authtoken<\/p>\n

3. \u5728 GitHub \u521b\u5efa\u4e00\u4e2a Repo<\/p>\n

4. \u7ed9 Repo \u6dfb\u52a0 Secrects<\/p>\n

NGROK_TOKEN \uff1a 1gtVf———————-yVqbyAXX9
SSH_PASSWORD \uff1aThisIsMySshServerPassword <\/p>\n

5. \u6dfb\u52a0\u6587\u4ef6 ssh-server.sh \u5230 Repo<\/p>\n

#!\/bin\/bash<\/p>\n

if [[ -z "$NGROK_TOKEN" ]]; then
echo "Please set ‘NGROK_TOKEN’"
exit 2
fi<\/p>\n

if [[ -z "$SSH_PASSWORD" ]]; then
echo "Please set ‘SSH_PASSWORD’ for user: $USER"
exit 3
fi<\/p>\n

wget -q https:\/\/bin.equinox.io\/c\/4VmDzA7iaHb\/ngrok-stable-linux-386.zip
unzip ngrok-stable-linux-386.zip
chmod +x .\/ngrok<\/p>\n

echo -e "$SSH_PASSWORDn$SSH_PASSWORD" | sudo passwd "$USER"<\/p>\n

rm -f .ngrok.log
.\/ngrok authtoken "$NGROK_TOKEN"
.\/ngrok tcp 22 –log ".ngrok.log" &<\/p>\n

sleep 10<\/p>\n

HAS_ERRORS=$(grep "command failed" < .ngrok.log)<\/p>\n

if [[ -z "$HAS_ERRORS" ]]; then
echo ""
echo "To connect: $(grep -o -E "tcp:\/\/(.+)" < .ngrok.log | sed "s\/tcp:\/\/\/ssh $USER@\/" | sed "s\/:\/ -p \/")"
echo ""
else
echo "$HAS_ERRORS"
exit 4
fi<\/p>\n

6. \u521b\u5efa workflow\uff1assh-server.yml<\/p>\n

name: SSH Server
on: push
jobs:
build:
    runs-on: ubuntu-latest
    steps:
   – uses: actions\/checkout@v2<\/p>\n

   – name: Failed
       run: .\/dummy.sh<\/p>\n

   – name: Start SSH Server
       if: ${{ failure() }}
       env:
         NGROK_TOKEN: ${{ secrets.NGROK_TOKEN }}
         SSH_PASSWORD: ${{ secrets.SSH_PASSWORD }}
       run: |
          chmod +x .\/ssh-server.sh &&.\/ssh-server.sh<\/p>\n

   – name: Sleep
       if: ${{ failure() }}
       run: sleep 1h
https:\/\/cdn.jsdelivr.net\/gh\/hishis\/forum-master\/public\/images\/patch.gif\t\t\t\t<\/p>\n

\t\t\t\t\tzxxx<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 zxxx \u4e8e 2020-9-1 15:07 \u7f16\u8f91 <\/p>\n

ssh runner@0.tcp.ngrok.io -p 17527
The authenticity of host ‘:17527 (:17527)’ can’t be established.
ECDSA key fingerprint is SHA256:v1Eaojx3SuZJSsLdFT+FDZl3iBzcEvtirxJJeQaOVrs.
Are you sure you want to continue connecting (yes\/no)? yes
Warning: Permanently added ‘:17527,:17527’ (ECDSA) to the list of known hosts.
runner@0.tcp.ngrok.io’s password:
Welcome to Ubuntu 18.04.5 LTS (GNU\/Linux 5.3.0-1034-azure x86_64)<\/p>\n

* Documentation:https:\/\/help.ubuntu.com
* Management:   https:\/\/landscape.canonical.com
* Support:      https:\/\/ubuntu.com\/advantage<\/p>\n

System information as of Tue Sep1 06:35:40 UTC 2020<\/p>\n

System load:0.47               Processes:            151
Usage of \/:   69.6% of 83.18GB   Users logged in:      0
Memory usage: 14%                IP address for eth0:    10.1.0.4
Swap usage:   0%               IP address for docker0: 172.17.0.1<\/p>\n

* Kubernetes 1.19 is out! Get it in one command with:<\/p>\n

   sudo snap install microk8s –channel=1.19 –classic<\/p>\n

   https:\/\/microk8s.io\/ has docs and details.<\/p>\n

* Canonical Livepatch is available for installation.
   – Reduce system reboots and improve kernel security. Activate at:
   https:\/\/ubuntu.com\/livepatch<\/p>\n

12 packages can be updated.
0 updates are security updates.<\/p>\n

The programs included with the Ubuntu system are free software;
the exact distribution terms for each program are described in the
individual files in \/usr\/share\/doc\/*\/copyright.<\/p>\n

Ubuntu comes with ABSOLUTELY NO WARRANTY, to the extent permitted by
applicable law.<\/p>\n

runner@fv-az71:\/$ uname -a
Linux fv-az71 5.3.0-1034-azure #35~18.04.1-Ubuntu SMP Mon Jul 13 12:54:45 UTC 2020 x86_64 x86_64 x86_64 GNU\/Linux<\/p>\n

runner@fv-az71:\/proc$ cat \/proc\/cpuinfo
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model         : 63
model name      : Intel(R) Xeon(R) CPU E5-2673 v3 @ 2.40GHz
stepping      : 2
microcode       : 0xffffffff
cpu MHz         : 2397.222
cache size      : 30720 KB
physical id   : 0
siblings      : 2
core id         : 0
cpu cores       : 2
apicid          : 0
initial apicid: 0
fpu             : yes
fpu_exception   : yes
cpuid level   : 15
wp            : yes
flags         : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology cpuid pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm invpcid_single pti fsgsbase bmi1 avx2 smep bmi2 erms invpcid xsaveopt md_clear
bugs            : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit
bogomips      : 4794.44
clflush size    : 64
cache_alignment : 64
address sizes   : 46 bits physical, 48 bits virtual
power management:<\/p>\n

processor       : 1
vendor_id       : GenuineIntel
cpu family      : 6
model         : 63
model name      : Intel(R) Xeon(R) CPU E5-2673 v3 @ 2.40GHz
stepping      : 2
microcode       : 0xffffffff
cpu MHz         : 2397.222
cache size      : 30720 KB
physical id   : 0
siblings      : 2
core id         : 1
cpu cores       : 2
apicid          : 1
initial apicid: 1
fpu             : yes
fpu_exception   : yes
cpuid level   : 15
wp            : yes
flags         : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology cpuid pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm invpcid_single pti fsgsbase bmi1 avx2 smep bmi2 erms invpcid xsaveopt md_clear
bugs            : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit
bogomips      : 4794.44
clflush size    : 64
cache_alignment : 64
address sizes   : 46 bits physical, 48 bits virtual
power management:<\/p>\n

runner@fv-az71:\/$ df -h
Filesystem      SizeUsed Avail Use% Mounted on
udev            3.4G   03.4G   0% \/dev
tmpfs         696M984K695M   1% \/run
\/dev\/sdb1      84G   58G   26G70% \/
tmpfs         3.4G8.0K3.4G   1% \/dev\/shm
tmpfs         5.0M   05.0M   0% \/run\/lock
tmpfs         3.4G   03.4G   0% \/sys\/fs\/cgroup
\/dev\/loop1       40M   40M   0 100% \/snap\/hub\/43
\/dev\/loop0       97M   97M   0 100% \/snap\/core\/9804
\/dev\/sdb15      105M3.6M101M   4% \/boot\/efi
\/dev\/sda1      14G4.1G9.0G32% \/mnt
tmpfs         696M   0696M   0% \/run\/user\/1001<\/p>\n

runner@fv-az71:\/$ free -h
            total      used      free      sharedbuff\/cache   available
Mem:         6.8G      501M      4.3G         26M      2.0G      6.0G
Swap:          4.0G          0B      4.0G<\/p>\n

https:\/\/cdn.jsdelivr.net\/gh\/hishis\/forum-master\/public\/images\/patch.gif\t\t\t\t<\/p>\n

\t\t\t\t\tzxxx<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\trunner@fv-az71:~$curl -sL yabs.sh | bash
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## #
#            Yet-Another-Bench-Script            #
#                     v2020-06-20                  #
# https:\/\/github.com\/masonr\/yet-another-bench-script #
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## #<\/p>\n

Tue Sep1 06:47:29 UTC 2020<\/p>\n

Basic System Information:
———————————
Processor: Intel(R) Xeon(R) CPU E5-2673 v3 @ 2.40GHz
CPU cores: 2 @ 2397.222 MHz
AES-NI   : \u2714 Enabled
VM-x\/AMD-V : \u274c Disabled
RAM      : 6.8G
Swap       : 4.0G
Disk       : 97G<\/p>\n

fio Disk Speed Tests (Mixed R\/W 50\/50):
———————————
Block Size | 4k            (IOPS) | 64k         (IOPS)
——   | —            —-| —-         —-
Read       | 16.72 MB\/s    (4.1k) | 34.97 MB\/s   (546)
Write      | 16.71 MB\/s    (4.1k) | 35.35 MB\/s   (552)
Total      | 33.43 MB\/s    (8.3k) | 70.32 MB\/s    (1.0k)
         |                      |                     
Block Size | 512k          (IOPS) | 1m            (IOPS)
——   | —            —-| —-         —-
Read       | 34.04 MB\/s      (66) | 33.74 MB\/s      (32)
Write      | 36.24 MB\/s      (70) | 36.57 MB\/s      (35)
Total      | 70.29 MB\/s   (136) | 70.32 MB\/s      (67)<\/p>\n

iperf3 Network Speed Tests (IPv4):
———————————
Provider                  | Location (Link)         | Send Speed      | Recv Speed   
                        |                           |               |               
Bouygues Telecom          | Paris, FR (10G)         | 1.29 Gbits\/sec| 2.33 Gbits\/sec
Online.net                | Paris, FR (10G)         | 1.31 Gbits\/sec| 2.34 Gbits\/sec
WorldStream               | The Netherlands (10G)   | 823 Mbits\/sec   | 2.05 Gbits\/sec
wilhelm.tel               | Hamburg, DE (10G)         | 1.23 Gbits\/sec| 1.98 Gbits\/sec
Biznet                  | Bogor, Indonesia (1G)   | 256 Mbits\/sec   | 15.2 Mbits\/sec
Hostkey                   | Moscow, RU (1G)         | 854 Mbits\/sec   | 861 Mbits\/sec
Velocity Online         | Tallahassee, FL, US (10G) | 1.36 Gbits\/sec| 2.85 Gbits\/sec
Airstream Comms         | Eau Claire, WI, US (10G)| 1.33 Gbits\/sec| 3.60 Gbits\/sec
Hurricane Electric      | Fremont, CA, US (10G)   | busy            | busy         <\/p>\n

Geekbench 5 Benchmark Test:
———————————
Test            | Value                        
                |                              
Single Core   | 715                           
Multi Core      | 1401                        
Full Test       | https:\/\/browser.geekbench.com\/v5\/cpu\/3508973\t\t\t\t<\/p>\n

\t\t\t\t\tzxxx<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 zxxx \u4e8e 2020-9-1 15:57 \u7f16\u8f91 <\/p>\n

ssh runner@0.tcp.ngrok.io -p 17527
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The ECDSA host key for :17527 has changed,
and the key for the corresponding IP address :17527
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!   @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:uZPVEk7PlOYFFru1JAeU9CORMMXVMN79opqJswO8vnw.
Please contact your system administrator.
Add correct host key in \/root\/.ssh\/known_hosts to get rid of this message.
Offending ECDSA key in \/root\/.ssh\/known_hosts:1
remove with:
ssh-keygen -f "\/root\/.ssh\/known_hosts" -R ":17527"
ECDSA host key for :17527 has changed and you have requested strict checking.
Host key verification failed.\t\t\t\t<\/p>\n

\t\t\t\t\tbacklitz<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u7528\u6237\u6743\u9650\u53ef\u4ee5\u5b89\u88c5\u8f6f\u4ef6\u5417\uff1f\u9650\u5236\u591a\u5c11?\t\t\t\t<\/p>\n

\t\t\t\t\tbugrun<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u521a\u5728\u516c\u4f17\u53f7\u770b\u5230\u60f3\u53d1\u88ab\u4f60\u53d1\u4e86 https:\/\/i.loli.net\/2020\/09\/01\/IpeEc4OunmvkWRw.png\t\t\t\t<\/p>\n

\t\t\t\t\tbugrun<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u80fd\u642d\u7f51\u9875\u670d\u52a1\u5668\u5417\t\t\t\t<\/p>\n

\t\t\t\t\tZeros<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u4e3a\u4e86\u4e16\u754c\u548c\u5e73\uff0c\u8fd8\u662f\u4e0d\u5f04\u4e86:lolhttps:\/\/cdn.jsdelivr.net\/gh\/hishis\/forum-master\/public\/images\/patch.gif\t\t\t\t<\/p>\n

\t\t\t\t\tvan<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u8fd9\u4e2a\u53ef\u4ee5\u81ea\u5df1\u5b89\u8f6f\u4ef6\u5417\uff1f\t\t\t\t<\/p>\n

\t\t\t\t\t\u4e00\u9897\u8d5b\u8247<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u767d**\u5927\u519b\u6b63\u5728\u8d76\u6765\u7684\u8def\u4e0a…\t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

zxxx \u5927\u4f6c\u6709\u8bdd\u8bf4 : \u4f7f\u7528 S…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/148400"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=148400"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/148400\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=148400"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=148400"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=148400"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}