Clarify who is running this command
Some checks are pending
Some checks are pending
This commit is contained in:
parent
f0e67a5e08
commit
f304597070
1 changed files with 9 additions and 0 deletions
|
@ -835,10 +835,19 @@ sudo systemctl restart docker
|
|||
|
||||
#### 6.1 Generate SSH Key Pair
|
||||
|
||||
**Important**: Run this command as the **DEPLOY_USER** (not root or SERVICE_USER). The DEPLOY_USER is responsible for deployment orchestration and SSH communication with the production server.
|
||||
|
||||
```bash
|
||||
ssh-keygen -t ed25519 -C "ci-cd-server" -f ~/.ssh/id_ed25519 -N ""
|
||||
```
|
||||
|
||||
**What this does**:
|
||||
- Creates an SSH key pair for secure communication between CI/CD and production servers
|
||||
- The DEPLOY_USER uses this key to SSH to the production server for deployments
|
||||
- The key is stored in the DEPLOY_USER's home directory for security
|
||||
|
||||
**Security Note**: The DEPLOY_USER handles deployment orchestration, while the SERVICE_USER runs the actual CI pipeline. This separation provides better security through the principle of least privilege.
|
||||
|
||||
#### 6.2 Create SSH Config
|
||||
|
||||
```bash
|
||||
|
|
Loading…
Add table
Reference in a new issue