Merge pull request #120 from dokku/116-passphrase

feat: add support for setting an ssh passphrase to use for ssh commands

README.md

@@ -87,6 +87,10 @@ The following environment variables are supported:
 - `SSH_PRIVATE_KEY`:
   - description: A private SSH key that has push acces to your Dokku instance
   - required: true
+- `SSH_PASSPHRASE`:
+  - description: If set, the passphrase to use when interacting with an SSH key that has a passphrase
+  - required: false
+  - default: ''
 - `TRACE`:
   - description: Allows users to debug what the action is performing by enabling shell trace mode
   - required: false

bin/setup-ssh

@@ -38,6 +38,14 @@ else
   chmod 600 "/root/.ssh/known_hosts"
 fi
 
+if [ -n "$SSH_PASSPRHASE" ]; then
+  export SSH_ASKPASS="/root/.ssh/askpass.sh"
+  export SSH_ASKPASS_REQUIRE=force
+  # shellcheck disable=SC2016
+  printf '#!/bin/sh\necho "$SSH_PASSPRHASE"\n' >"$SSH_ASKPASS"
+  chmod +x "$SSH_ASKPASS"
+fi
+
 log-info "Adding SSH Key to ssh-agent"
 eval "$(ssh-agent -s)"
 ssh-add /root/.ssh/id_rsa