如何修复“kex_exchange_identification：读取：对等方重置连接”？

我想复制数据scp在使用 PRIVATE_KEY 的 GitLab 管道中。

错误是：

kex_exchange_identification: read: Connection reset by peer
Connection reset by x.x.x.x port 22
lost connection

管道日志：

$ mkdir -p ~/.ssh

$ echo "$SSH_PRIVATE_KEY" | tr -d '\r' > ~/.ssh/id_rsa

$ chmod 600 ~/.ssh/id_rsa

$ eval "$(ssh-agent -s)"
Agent pid 22

$ ssh-add ~/.ssh/id_rsa
Identity added: /root/.ssh/id_rsa (/root/.ssh/id_rsa)

$ ssh-keyscan -H $IP >> ~/.ssh/known_hosts
# x.x.x.x:22 SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10
# x.x.x.x:22 SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

$ scp -rv api.yml root@$IP:/home/services/test/

Executing: program /usr/bin/ssh host x.x.x.x, user root, command scp -v -r -t /home/services/test/

OpenSSH_8.6p1, OpenSSL 1.1.1l  24 Aug 2021
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
debug1: Connecting to x.x.x.x [x.x.x.x] port 22.
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa type -1
debug1: identity file /root/.ssh/id_ecdsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa_sk type -1
debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /root/.ssh/id_ed25519 type -1
debug1: identity file /root/.ssh/id_ed25519-cert type -1
debug1: identity file /root/.ssh/id_ed25519_sk type -1
debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /root/.ssh/id_xmss type -1
debug1: identity file /root/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.6
kex_exchange_identification: read: Connection reset by peer
Connection reset by x.x.x.x port 22
lost connection

kex_exchange_identification: read: Connection reset by peer

当 SSH 客户端连接到 SSH 服务器时，服务器首先向客户端发送版本字符串。您收到的错误意味着，当客户端等待来自服务器的数据时，即 TCP 连接打开后，从客户端到服务器的 TCP 连接“异常关闭”。

实际上，它可能意味着以下两件事之一：

1. SSH 服务器进程出现故障（崩溃），或者可能检测到一些严重问题导致其立即退出。
2. 某些防火墙正在干扰与 ssh 服务器的连接。

它看起来像ssh 密钥扫描程序能够连接到服务器并获取版本字符串，没有错误。因此，SSH 服务器进程显然能够与客户端通信而不会崩溃。

您应该与该 x.x.x.x 主机及其所连接的网络的管理员联系，看看他们是否可以从他们的一端识别出问题。有可能某些东西（防火墙或 ssh 服务器进程本身）首先从ssh 密钥扫描过程，然后由scp程序，作为入侵尝试。它阻止了第二次连接尝试。