尝试进行Git克隆时出现"Permission denied (publickey)"错误

Question

我知道这是一个常见的问题，但即使花了一个小时查看帖子，我仍然找不到解决方案，因此在这里发布。基本上，在运行git clone时，我遇到了以下错误：

   Permission denied (publickey).
   fatal: Could not read from remote repository.

   Please make sure you have the correct access rights
   and the repository exists.

我在我的 .ssh 目录中有一个 id_rsa 和一个 id_rsa.pub，这个密钥与我在 GitHub 上的 ssh 密钥部分匹配。所以这不是问题。然而，我意识到我没有 id_dsa 文件或任何其他文件（除了一个 knownhosts 文件）。当运行

ssh -T [e-mail]

    I get Permission denied (publickey).

运行ssh -vT [e-mail]时，我得到以下信息：

OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to github.com [192.30.252.123] port 22.
debug1: Connection established.
debug1: identity file /home/parallels/.ssh/id_rsa type 1
debug1: identity file /home/parallels/.ssh/id_rsa-cert type -1
debug1: identity file /home/parallels/.ssh/id_dsa type 2
debug1: identity file /home/parallels/.ssh/id_dsa-cert type -1
debug1: identity file /home/parallels/.ssh/id_ecdsa type 3
debug1: identity file /home/parallels/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/parallels/.ssh/id_ed25519 type -1
debug1: identity file /home/parallels/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
debug1: Remote protocol version 2.0, remote software version libssh-0.7.0
debug1: no match: libssh-0.7.0
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-sha1 none
debug1: kex: client->server aes128-ctr hmac-sha1 none
debug1: sending SSH2_MSG_KEX_ECDH_INIT
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: RSA 16:27:ac:a5:76:28:2d:36:63:1b:56:4d:eb:df:a6:48
debug1: Host 'github.com' is known and matches the RSA host key.
debug1: Found key in /home/parallels/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering ECDSA public key: /home/parallels/.ssh/id_ecdsa
debug1: Authentications that can continue: publickey
debug1: Offering RSA public key: /home/parallels/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Offering DSA public key: /home/parallels/.ssh/id_dsa
debug1: Authentications that can continue: publickey
debug1: Trying private key: /home/parallels/.ssh/id_ed25519
debug1: No more authentication methods to try.
Permission denied (publickey).

这是我运行 ssh -vvvT [e-mail] 的输出结果：

OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to github.com [192.30.252.121] port 22.
debug1: Connection established.
debug3: Incorrect RSA1 identifier
debug3: Could not load "/home/parallels/.ssh/id_rsa" as a RSA1 public key
debug1: identity file /home/parallels/.ssh/id_rsa type 1
debug1: identity file /home/parallels/.ssh/id_rsa-cert type -1
debug3: Incorrect RSA1 identifier
debug3: Could not load "/home/parallels/.ssh/id_dsa" as a RSA1 public key
debug1: identity file /home/parallels/.ssh/id_dsa type 2
debug1: identity file /home/parallels/.ssh/id_dsa-cert type -1
debug3: Incorrect RSA1 identifier
debug3: Could not load "/home/parallels/.ssh/id_ecdsa" as a RSA1 public key
debug1: identity file /home/parallels/.ssh/id_ecdsa type 3
debug1: identity file /home/parallels/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/parallels/.ssh/id_ed25519 type -1
debug1: identity file /home/parallels/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
debug1: Remote protocol version 2.0, remote software version libssh-0.7.0
debug1: no match: libssh-0.7.0
debug2: fd 3 setting O_NONBLOCK
debug3: load_hostkeys: loading entries for host "github.com" from file "/home/parallels/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /home/parallels/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys
debug3: order_hostkeyalgs: prefer hostkeyalgs: [e-mail],[e-mail],ssh-rsa
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: [e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: [e-mail],[e-mail],ssh-rsa,[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,[e-mail],[e-mail],[e-mail],aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[e-mail]
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,[e-mail],[e-mail],[e-mail],aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[e-mail]
debug2: kex_parse_kexinit: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-md5,hmac-sha1,[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,[e-mail],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: [e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-md5,hmac-sha1,[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,[e-mail],hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,[e-mail],zlib
debug2: kex_parse_kexinit: none,[e-mail],zlib
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: kex_parse_kexinit: ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-dss,ssh-rsa
debug2: kex_parse_kexinit: [e-mail],aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc
debug2: kex_parse_kexinit: [e-mail],aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc
debug2: kex_parse_kexinit: hmac-sha1,hmac-sha2-256,hmac-sha2-512
debug2: kex_parse_kexinit: hmac-sha1,hmac-sha2-256,hmac-sha2-512
debug2: kex_parse_kexinit: none,zlib,[e-mail]
debug2: kex_parse_kexinit: none,zlib,[e-mail]
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: 
debug2: kex_parse_kexinit: first_kex_follows 0 
debug2: kex_parse_kexinit: reserved 0 
debug2: mac_setup: setup hmac-sha1
debug1: kex: server->client aes128-ctr hmac-sha1 none
debug2: mac_setup: setup hmac-sha1
debug1: kex: client->server aes128-ctr hmac-sha1 none
debug1: sending SSH2_MSG_KEX_ECDH_INIT
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: RSA 16:27:ac:a5:76:28:2d:36:63:1b:56:4d:eb:df:a6:48
debug3: load_hostkeys: loading entries for host "github.com" from file "/home/parallels/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /home/parallels/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys
debug3: load_hostkeys: loading entries for host "192.30.252.121" from file "/home/parallels/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /home/parallels/.ssh/known_hosts:4
debug3: load_hostkeys: loaded 1 keys
debug1: Host 'github.com' is known and matches the RSA host key.
debug1: Found key in /home/parallels/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /home/parallels/.ssh/id_ecdsa (0x7ffecad4c5b0),
debug2: key: /home/parallels/.ssh/id_rsa (0x7ffecad4aab0),
debug2: key: /home/parallels/.ssh/id_dsa (0x7ffecad4ab50),
debug2: key: /home/parallels/.ssh/id_ed25519 ((nil)),
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering ECDSA public key: /home/parallels/.ssh/id_ecdsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey
debug1: Offering RSA public key: /home/parallels/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey
debug1: Offering DSA public key: /home/parallels/.ssh/id_dsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey
debug1: Trying private key: /home/parallels/.ssh/id_ed25519
debug3: no such identity: /home/parallels/.ssh/id_ed25519: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (publickey).

有些奇怪的问题，但我还是无法确定问题在哪里。我已经按照GitHub文档设置了我的密钥，但仍然收到“权限被拒绝”的错误。我检查了Github上的密钥，并确保在运行~/.ssh$ ssh-keygen -lf ~/.ssh/id_rsa.pub时数字相同。

非常感谢任何帮助！

- user2677095

---

显然，密钥不匹配，因为 /home/parallels/.ssh/id_rsa 被 GitHub 拒绝了。请将 ssh -vvvT [e-mail] 的输出添加到问题中。这可能会提供一些更多的指导。 - Jakuje

@Jakuje 在上面完成的 - user2677095

Answer 1

关键是显然被拒绝了。运行

ssh-keygen -y -f ~/.ssh/id_rsa
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHFxArGbqkeamciLR8kcsCwFYnagqNe/XG1Ehqhq092mwd/xHq89Pf1kVvC3OBOrvnb4g9l4LMKH28d8ZSJ2cDvtVwolMZBMzNB5HKid+7fNARQngY8t/WE+0ZuQjsA6OelgVx7QYBz893+0gKXdpALxs2Hd69s6Oy+vGphHmxsKG9PHe7l5StJBhMGbBTwDPcO/2YuZE7g5mh3VL/i3EfmkdYLBlBz1FD7/2J8npoYSdiGxUWvrbawfUw8fQwR6byM5AXBHWgJfWyGLKP6etvSQVTdutrp0GBjWn5GFlw8pKsb3R3N6h8CVKHKDAa4Hrf8wduOTwgT22n4zQ677Np

并验证该字符串与您在GitHub帐户中存储的内容相同。从最后一次更新看，似乎您已经将其输出存储在那里。

ssh-keygen -lf ~/.ssh/id_rsa.pub
2048 SHA256:xh0IVbIJmeYwdFWnvDQp/hB4OK+mjhlPyVXYQVpHTIA jakuje@jakuje-PC219 (RSA)

或者

2048 MD5:46:e0:1e:c4:7f:de:12:66:ff:28:e6:36:81:cd:a8:b4 jakuje@jakuje-PC219 (RSA)

这不是公钥，而只是其指纹（这不足够）。你需要在你的Github账户中存储完整的公钥--文件~/.ssh/id_rsa.pub的内容。

- Jakuje

---

我现在正在执行的操作是 xclip -sel clip < ~/.ssh/id_rsa.pub，将 is_rsa.pub 的内容复制到剪贴板，然后将其粘贴为 GitHub 上的密钥值。你似乎在说 id_rsa.pub 不够，但又建议在最后复制 id_rsa.pub 的内容并将其放入 GitHub，这有点令人困惑。我这样做错了吗？ - user2677095

公钥就足够了，指纹并不重要。 - Jakuje

我觉得我可能不在正确的分支上。当我运行 git branch 时没有任何返回，所以我认为我应该在某个根或其他分支中执行此操作。这可能是一个可能的解决方案吗？ - user2677095

我添加了示例，展示了格式应该和不应该是什么样子。git branch与ssh没有任何关系。尝试使用ssh-keygen -y -f ~/.ssh/id_rsa | xclip -sel clip。 - Jakuje

我所做的只是在尝试克隆这些仓库时更改了当前目录的所有者。真是个愚蠢的错误！ - user2677095