错误：权限被拒绝（公钥）

Should the sudo command or elevated privileges be used with Git?

You should not be using the sudo command or elevated privileges, such as administrator permissions, with Git.

If you have a very good reason you must use sudo, then ensure you are using it with every command. If you generate SSH keys without sudo and then try to use a command like sudo git push, you won't be using the same keys that you generated.

Check that you are connecting to the correct server

To make sure you are connecting to the right domain, you can enter the following command:

ssh -vT git@HOSTNAME

ssh -vT git@HOSTNAME

You should see this output:

> OpenSSH_8.1p1, LibreSSL 2.7.3
> debug1: Reading configuration data /Users/YOU/.ssh/config
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: /etc/ssh/ssh_config line 47: Applying options for *
> debug1: Connecting to HOSTNAME port 22.

The connection should be made on port 22.

Always use the "git" user

All connections, including those for remote URLs, must be made as the "git" user. If you try to connect with your GitHub Enterprise Server username, it will fail:

$ ssh -T GITHUB-USERNAME@HOSTNAME
> Permission denied (publickey).

If your connection failed and you're using a remote URL with your GitHub Enterprise Server username, you can change the remote URL to use the "git" user.

You should verify your connection by typing:

ssh -T git@HOSTNAME

ssh -T git@HOSTNAME

You should see this output:

> Hi USERNAME! You've successfully authenticated...

Make sure you have a key that is being used

The ssh-add command should print out a long string of numbers and letters. If it does not print anything, you will need to generate a new SSH key and associate it with GitHub Enterprise Server.

Getting more details

You can also check that the key is being used by trying to connect to git@HOSTNAME:

ssh -vT git@HOSTNAME

ssh -vT git@HOSTNAME

You'll see output like this:

> ...
> debug1: identity file /Users/YOU/.ssh/id_rsa type -1
> debug1: identity file /Users/YOU/.ssh/id_rsa-cert type -1
> debug1: identity file /Users/YOU/.ssh/id_dsa type -1
> debug1: identity file /Users/YOU/.ssh/id_dsa-cert type -1
> ...
> debug1: Authentications that can continue: publickey
> debug1: Next authentication method: publickey
> debug1: Trying private key: /Users/YOU/.ssh/id_rsa
> debug1: Trying private key: /Users/YOU/.ssh/id_dsa
> debug1: No more authentication methods to try.
> Permission denied (publickey).

In this example, SSH did not find any keys.

• "-1" at the end of the "identity file" lines means SSH couldn't find a file to use.
• "Trying private key" lines indicate that no file was found.

If a file existed, those lines would be "1" and "Offering public key", as in this output:

> ...
> debug1: identity file /Users/YOU/.ssh/id_rsa type 1
> ...
> debug1: Authentications that can continue: publickey
> debug1: Next authentication method: publickey
> debug1: Offering RSA public key: /Users/YOU/.ssh/id_rsa

Verify the public key is attached to your account

You must provide your public key to GitHub Enterprise Server to establish a secure connection.

If you don't see your public key in GitHub Enterprise Server, you'll need to add your SSH key to GitHub Enterprise Server to associate it with your computer.