ucef/as-talange
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): copy key to /tmp/id_rsa instead of ~/.ssh/id_rsa to avoid read-only mount error

Browse Source
This commit is contained in:
ucef
2026-09-03 14:56:31 +02:00
parent e6de9836fc
commit 75611d147c
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci-prod.yml
+4 -5
View File
@@ -141,22 +141,21 @@ jobs:
-e KEY_CONTENT="${KEY_CONTENT}" \ -e KEY_CONTENT="${KEY_CONTENT}" \
alpine:latest sh -c ' alpine:latest sh -c '
apk add --no-cache openssh-client rsync && \ apk add --no-cache openssh-client rsync && \
mkdir -p ~/.ssh && \
FOUND_KEY="" && \ FOUND_KEY="" && \
for k in /home/ubuntu/.ssh/gitea_ci_key /root/.ssh/gitea_ci_key /home/ubuntu/.ssh/id_ed25519 /root/.ssh/id_ed25519 /home/ubuntu/.ssh/id_rsa /root/.ssh/id_rsa; do \ for k in /home/ubuntu/.ssh/gitea_ci_key /root/.ssh/gitea_ci_key /home/ubuntu/.ssh/id_ed25519 /root/.ssh/id_ed25519 /home/ubuntu/.ssh/id_rsa /root/.ssh/id_rsa; do \
if [ -f "$k" ]; then FOUND_KEY="$k"; break; fi ; \ if [ -f "$k" ]; then FOUND_KEY="$k"; break; fi ; \
done && \ done && \
if [ -n "$FOUND_KEY" ]; then \ if [ -n "$FOUND_KEY" ]; then \
echo "Using SSH key from file: $FOUND_KEY" && \ echo "Using SSH key from file: $FOUND_KEY" && \
cp "$FOUND_KEY" ~/.ssh/id_rsa ; \ cp "$FOUND_KEY" /tmp/id_rsa ; \
elif [ -n "$KEY_CONTENT" ]; then \ elif [ -n "$KEY_CONTENT" ]; then \
echo "Using SSH key from Gitea secret" && \ echo "Using SSH key from Gitea secret" && \
printf "%s\n" "$KEY_CONTENT" | tr -d "\r" > ~/.ssh/id_rsa ; \ printf "%s\n" "$KEY_CONTENT" | tr -d "\r" > /tmp/id_rsa ; \
else \ else \
echo "ERROR: No SSH key found!" && exit 1 ; \ echo "ERROR: No SSH key found!" && exit 1 ; \
fi && \ fi && \
chmod 600 ~/.ssh/id_rsa && \ chmod 600 /tmp/id_rsa && \
SSH_CMD="ssh -p ${PORT} -i ~/.ssh/id_rsa -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \ SSH_CMD="ssh -p ${PORT} -i /tmp/id_rsa -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \
echo "Deploying backup script and .env to DB Server (${TARGET_USER}@${TARGET_HOST}:${DEST_DIR})..." && \ echo "Deploying backup script and .env to DB Server (${TARGET_USER}@${TARGET_HOST}:${DEST_DIR})..." && \
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \ $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \
rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" && \ rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" && \