woodpecker/docs/versioned_docs/version-1.0/30-administration/22-backends/30-ssh.md

1.3 KiB

SSH backend

:::danger The SSH backend will execute the pipelines using SSH on a remote system without any isolation of any kind. :::

:::note This backend is still pretty new and cannot be treated as stable. Its implementation and configuration can change at any time. ::: Since the code run directly on the SSH machine, a malicious pipeline could access and edit files the SSH user has access to and execute every command the remote user is allowed to use. Always restrict the user as far as possible!

It is recommended to use this backend only for private setups where the code and pipelines can be trusted. You shouldn't use it for a public facing CI where anyone can submit code or add new repositories.

The backend will use a random directory in $TMPDIR to store the clone code and execute commands.

Configuration

WOODPECKER_BACKEND_SSH_ADDRESS

Default: empty

The SSH host to run steps with ssh backend.

WOODPECKER_BACKEND_SSH_USER

Default: empty

The SSH user to run steps with ssh backend.

WOODPECKER_BACKEND_SSH_KEY

Default: empty

Path to the private SSH key to run steps with ssh backend.

WOODPECKER_BACKEND_SSH_KEY_PASSWORD

Default: empty

The password for the private key to run steps with ssh backend.

WOODPECKER_BACKEND_SSH_PASSWORD

Default empty

The SSH password to run steps with ssh backend.