Github Storage - Permission denied (publickey)

[ikwtif]

See Edit below
Seems to be a permission issue with the wikijs user

Host Info:

• OS: Proxmox Virtual Environment 6.3-4
• LXC container with Docker version 20.10.5, build 55c4c88
• Wiki.js version: 2.5.191
• Database engine: PostgreSQL 11.11

Issue
I can't seem to be able to get Github Storage working.

1. Created the Docker containers with the example docker-compose file from the wiki.js docs (see below, changed docker-compose to version "2", changed username and passwords)
2. Followed the Github setup from the docs and created the ssh key inside the wikijs_wiki_1 container
3. Added the pub key to my github repo and filled out the Git setup for wikijs

Error Message

Load key "/wiki/github.pem": Permission denied git@github.com: Permission denied (publickey). fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists. error: Could not fetch origin

Screenshots

Additional Info
Not sure what additional info I can provide or how to properly debug this, so if I can do something let me know. While setting this up someone else on version 2.5.170 mentioned his Github storage wasn't working either for 10 days now.

version: "3"
services:

  db:
    image: postgres:11-alpine
    environment:
      POSTGRES_DB: wiki
      POSTGRES_PASSWORD: wikijsrocks
      POSTGRES_USER: wikijs
    logging:
      driver: "none"
    restart: unless-stopped
    volumes:
      - db-data:/var/lib/postgresql/data

  wiki:
    image: requarks/wiki:2
    depends_on:
      - db
    environment:
      DB_TYPE: postgres
      DB_HOST: db
      DB_PORT: 5432
      DB_USER: wikijs
      DB_PASS: wikijsrocks
      DB_NAME: wiki
    restart: unless-stopped
    ports:
      - "80:3000"

volumes:
  db-data:

---

---

Edit
Seems to be a permission issue with the wikijs user.
I was looking around in the issues and found this https://github.com/Requarks/wiki/issues/2560
I tried this from the answer

1. Login Docker Container
2. Switch to the Git directory (for me it was cd /wiki/data/repo)
3. Create a file there and push it to the repo (to initialize everything)
   3.1 echo "testfile" > test
   3.2 git add test
   3.3 git commit -m "init"
   3.4 git push origin (the branch in my case was master)

I logged into the container as Root user and performed those commands, now the files appear in my github repository, but I'm getting a new error when trying to force sync trough wikijs

error: cannot lock ref 'refs/remotes/origin/master': Unable to create '/wiki/data/repo/.git/refs/remotes/origin/master.lock': Permission denied error: could not remove reference refs/remotes/origin/master

Which from what I found might be because I used the user Root inside the docker container with the git command. So I removed the master file and I'm back to the first error I got. I logged into the container as the wikijs user and that gives the same error as wikijs (see screenshot). I also tried to just enter the private key as content in wikijs and then try a git push with the wikijs user inside the Docker Container, but that still gives me a permission error.

Screenshots with root user commands
Repo With Files

Docker Container Commands

Screenshot wikijs user
Docker Container Commands

Screenshot wikijs user with private key content added to wikijs

[NGPixel]

Please don't create the key directly into the container, this is very bad practice and your key will be lost if you upgrade the container to a newer image. Paste the key directly into the web administration area instead...

As to why you're having this error: your file permissions to the key are incorrect. The wiki.js process user must have read access to the file. But again, creating the key directly into the container is a big no no.

[ikwtif]

Thank you for the info, I did not think about having the key in the container to be an issue.
As for the permission issues, I haven't been able to solve that.

node:x:1000:1000:Linux User,,,:/home/node:/bin/sh
mayne:x:1001:1001:Linux User,,,:/home/mayne:/bin/ash

everything in data is owned by the node user, while mayne is my administrater user in wikijs.

-rw-r--r--    1 node     node         34520 Mar 13 05:39 LICENSE
drwxr-xr-x    8 node     node          4096 Mar 13 05:46 assets
drwxr-xr-x    3 node     node          4096 Mar 15 20:11 backup
drwxr-xr-x    5 node     node          4096 Mar 15 21:05 backupdata
-rw-r--r--    1 node     node           363 Mar 13 05:39 config.yml
drwxr-xr-x    1 node     node          4096 Mar 14 19:41 data
drwxr-xr-x  826 node     node         32768 Mar 13 05:46 node_modules
-rw-------    1 node     node         11749 Mar 13 05:39 package.json
drwxr-xr-x    1 node     node          4096 Mar 13 05:46 server

If I change permissions I get the following error
EACCES: permission denied, open '/wiki/data/secure/git-ssh.pem'

-rwx------    1 mayne    mayne         3181 Mar 17 13:45 git-ssh.pem

I tried setting read access for only one user as well but gives me the same error

-------r--    1 mayne    mayne         3181 Mar 17 13:45 git-ssh.pem

[ikwtif]

I got it working. I removed the git-ssh.pem file a couple times and retried because suddenly it was throwing a wrong format error. I added -----BEGIN RSA PRIVATE KEY----- and -----END RSA PRIVATE KEY----- because I never copied those lines. But now it started syncing.
The only change I notice (besides the content I added) is this.

-rw-------    1 node     node          3243 Mar 17 17:30 git-ssh.pem

Now it only shows rw in the access rights for some reason, maybe that was the issue? Not sure why that changed because I never created the file myself, but I'm guessing it's because of the lines I added.