refactor(ci): simplify SSH step to directly copy and use /root/.ssh/gitea_ci_key with 600 permissions
This commit is contained in:
@@ -129,20 +129,16 @@ jobs:
|
|||||||
docker run --rm --net=host \
|
docker run --rm --net=host \
|
||||||
-v "$(pwd):/workspace" -w /workspace \
|
-v "$(pwd):/workspace" -w /workspace \
|
||||||
-v "/root/.ssh:/root/.ssh:ro" \
|
-v "/root/.ssh:/root/.ssh:ro" \
|
||||||
-v "/home/ubuntu/.ssh:/home/ubuntu/.ssh:ro" \
|
|
||||||
-e TARGET_HOST="${TARGET_HOST}" \
|
-e TARGET_HOST="${TARGET_HOST}" \
|
||||||
-e TARGET_USER="${TARGET_USER}" \
|
-e TARGET_USER="${TARGET_USER}" \
|
||||||
-e PORT="${PORT}" \
|
-e PORT="${PORT}" \
|
||||||
-e DEST_DIR="${DEST_DIR}" \
|
-e DEST_DIR="${DEST_DIR}" \
|
||||||
alpine:latest sh -c '
|
alpine:latest sh -c '
|
||||||
apk add --no-cache openssh-client rsync && \
|
apk add --no-cache openssh-client rsync && \
|
||||||
KEY_ARG="" && \
|
mkdir -p ~/.ssh && \
|
||||||
for k in /root/.ssh/gitea_ci_key /home/ubuntu/.ssh/gitea_ci_key /root/.ssh/id_ed25519 /root/.ssh/id_rsa; do \
|
cp /root/.ssh/gitea_ci_key ~/.ssh/id_rsa && \
|
||||||
if [ -f "$k" ]; then \
|
chmod 600 ~/.ssh/id_rsa && \
|
||||||
KEY_ARG="-i $k -o IdentitiesOnly=yes" && break ; \
|
SSH_CMD="ssh -p ${PORT} -i ~/.ssh/id_rsa -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \
|
||||||
fi ; \
|
|
||||||
done && \
|
|
||||||
SSH_CMD="ssh -p ${PORT} ${KEY_ARG} -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \
|
|
||||||
echo "Deploying backup script and .env to DB Server (${TARGET_USER}@${TARGET_HOST}:${DEST_DIR})..." && \
|
echo "Deploying backup script and .env to DB Server (${TARGET_USER}@${TARGET_HOST}:${DEST_DIR})..." && \
|
||||||
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \
|
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \
|
||||||
rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" && \
|
rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" && \
|
||||||
|
|||||||
Reference in New Issue
Block a user