Builder to clone private repos

[oudeismetis]

This will require builder using deploy keys when cloning the repo.

Steps:

• During registration, API will generate ssh keypair. http://stackoverflow.com/questions/2466401/how-to-generate-ssh-key-pairs-with-python
• API will then save the public and private keys to the model of the site being registered.
• API will then make a call to Github to register the public key onto the repo. https://developer.github.com/v3/repos/keys/
• During deployments, API will pass both the public and private keys to builder
• Builder will install the private key and then use the public key to execute the clone.

https://developer.github.com/guides/managing-deploy-keys/ https://github.com/blog/2024-read-only-deploy-keys

This appears to be the best/only approach.

[oudeismetis]

https://gist.github.com/lkdocs/6519378 Spoiler: Apparently pycrypto is broken in python 3.5 v2.7 will apparently fix this, but it's not live yet on pypi.

[oudeismetis]

I know this because I tried to YOLO the API side of this issue.

[oudeismetis]

Just circling back as this story is likely being worked soon. Looks like pycrypto hasn't had a version bump since 2014 and only has a couple of active contributors. We should probably investigate another way to generate the keys we need in python 3.5 They do have an experimental version of the library that may have the fix we need in it. (or we fork it and fix it ourselves, contributing back)

[oudeismetis]

Will have a PR open that implements the API side of this shortly.