{"action":"created","issue":{"url":"https://api.github.com/repos/pypa/pip/issues/3061","labels_url":"https://api.github.com/repos/pypa/pip/issues/3061/labels{/name}","comments_url":"https://api.github.com/repos/pypa/pip/issues/3061/comments","events_url":"https://api.github.com/repos/pypa/pip/issues/3061/events","html_url":"https://github.com/pypa/pip/issues/3061","id":103713457,"number":3061,"title":"Feature request: add option to disable strict host checking","user":{"login":"dkoppstein","id":10901251,"avatar_url":"https://avatars.githubusercontent.com/u/10901251?v=3","gravatar_id":"","url":"https://api.github.com/users/dkoppstein","html_url":"https://github.com/dkoppstein","followers_url":"https://api.github.com/users/dkoppstein/followers","following_url":"https://api.github.com/users/dkoppstein/following{/other_user}","gists_url":"https://api.github.com/users/dkoppstein/gists{/gist_id}","starred_url":"https://api.github.com/users/dkoppstein/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkoppstein/subscriptions","organizations_url":"https://api.github.com/users/dkoppstein/orgs","repos_url":"https://api.github.com/users/dkoppstein/repos","events_url":"https://api.github.com/users/dkoppstein/events{/privacy}","received_events_url":"https://api.github.com/users/dkoppstein/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-08-28T12:48:50Z","updated_at":"2015-08-31T17:11:05Z","closed_at":null,"body":"If you host a python package in a private repo and want to install with git+ssh, occasionally pip install will give you, e.g.:\r\n\r\n```\r\nInitialized empty Git repository in /var/git/secret-project.debuggable.com/.git/\r\nThe authenticity of host 'github.com (65.74.177.129)' can't be established.\r\nRSA key fingerprint is 16:27:ac:a5:76:28:2d:36:63:1b:56:4d:eb:df:a6:48.\r\nAre you sure you want to continue connecting (yes/no)?\r\n```\r\n\r\nThis is problematic for some automated builds, since they will halt at that particular repo. For ssh commands, you can disable strict host checking on a per-command basis using `ssh -o StrictHostKeyChecking=no` but as far as I can tell there's no way to pass these parameters from pip to git's (or mercurial's) ssh clone. \r\n\r\nYou can get around this by editing ~/.ssh/config, but that permanently modifies it for everything. It'd be nice to have something like `pip install --no-strict-check`. "},"comment":{"url":"https://api.github.com/repos/pypa/pip/issues/comments/136431218","html_url":"https://github.com/pypa/pip/issues/3061#issuecomment-136431218","issue_url":"https://api.github.com/repos/pypa/pip/issues/3061","id":136431218,"user":{"login":"dkoppstein","id":10901251,"avatar_url":"https://avatars.githubusercontent.com/u/10901251?v=3","gravatar_id":"","url":"https://api.github.com/users/dkoppstein","html_url":"https://github.com/dkoppstein","followers_url":"https://api.github.com/users/dkoppstein/followers","following_url":"https://api.github.com/users/dkoppstein/following{/other_user}","gists_url":"https://api.github.com/users/dkoppstein/gists{/gist_id}","starred_url":"https://api.github.com/users/dkoppstein/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkoppstein/subscriptions","organizations_url":"https://api.github.com/users/dkoppstein/orgs","repos_url":"https://api.github.com/users/dkoppstein/repos","events_url":"https://api.github.com/users/dkoppstein/events{/privacy}","received_events_url":"https://api.github.com/users/dkoppstein/received_events","type":"User","site_admin":false},"created_at":"2015-08-31T17:11:05Z","updated_at":"2015-08-31T17:11:05Z","body":"It certainly does work. However, this requires modifying ~/.ssh/config permanently. I was hoping there would be something similar to using `ssh-agent bash -c` to disable strict checking on a per-command basis rather than having to modify config files, especially if this is being run on a lot of short-lived compute instances. "}}