Examples: query, "exact match", wildcard*, wild?ard, wild*rd
Fuzzy search: cake~ (finds cakes, bake)
Term boost: "red velvet"^4, chocolate^2
Field grouping: tags:(+work -"fun-stuff")
Escaping: Escape characters +-&|!(){}[]^"~*?:\ with \, e.g. \+
Range search: properties.timestamp:[1587729413488 TO *] (inclusive), properties.title:{A TO Z}(excluding A and Z)
Combinations: chocolate AND vanilla, chocolate OR vanilla, (chocolate OR vanilla) NOT "vanilla pudding"
Field search: properties.title:"The Title" AND text
Answered
Hello, I Don'T Really Like The Idea Of Providing My Own Github Credentials To The Clearml Agent. We Have A Local Clearml Deployment. Is There A Way To:

Hello, I don't really like the idea of providing my own github credentials to the ClearML agent. We have a local ClearML deployment.

Is there a way to:

  • forward my SSH credentials using ssh -A and then starting the clearml agent? I thought this should work:
(clearml) [mikulas@~]$ echo "$SSH_AUTH_SOCK"
/tmp/ssh-upKbRrv8rX/agent.38205
(clearml) [mikulas@~]$ clearml-agent daemon --queue services
...
clearml_agent: ERROR: Failed cloning repository. (128)
(this doesn't work but I would like it to - the agent still cannot access the git repo accessible by SSH_AUTH_SOCK)
  • create a repo-specific git deploy key and configure that for the clearml agent?
    Thank you :)
  
  
Posted 10 months ago
Votes Newest

Answers 6


the host .ssh is empty, because all it has is the forwarded agent

it turns out the approach outlined in the issue 45 above works just fine, the problem was me not having the local keychain setup properly, sorry about that

so tl;dr: following None and just adding those two extra docker arguments indeed makes the whole pipeline local ssh -> forward -A to server -> start an agent with extra docker args -> agent can correctly use local git credentials work 🙂

  
  
Posted 10 months ago

I think 1. is described here: None

but I don't think there's a complete working example of how to achieve it in the docs

  
  
Posted 10 months ago

Apparently None should have fixed this exact issue, however, I'm unfortunately unable to reproduce it 😞

  
  
Posted 10 months ago

hi @<1523701205467926528:profile|AgitatedDove14> , thank you

  • owning the agent helps, but still it's much better if the credentials don't show up in logs, console, files... I mean there's a reason ssh agent forwarding is preferred, it simply is more secure :)
  • how does force_git_ssh_protocol help please? it doesn't solve the issue of the agent simply not having access
  
  
Posted 10 months ago

owning the agent helps, but still it's much better if the credentials don't show up in logs,

They are not, they are always filtered out,

  • how does force_git_ssh_protocol help please? it doesn't solve the issue of the agent simply not having accessIt automatically maps the host .ssh into the container, so that git can use SSH to clone.
    What exactly is not working?
    and how are you configuring it?
  
  
Posted 10 months ago

Hi @<1573119962950668288:profile|ObliviousSealion5>

Hello, I don't really like the idea of providing my own github credentials to the ClearML agent. We have a local ClearML deployment.

if you own the agent, that should not be an issue,, no?

forward my SSH credentials using

ssh -A

and then starting the clearml agent?

When you are running the agent and you force git clonening with SSH, it will autmatically map the .ssh into the container for the git to use

Basically just set the following and you should be fine
None

  
  
Posted 10 months ago