From 815eb72834c0690c983278f61a5ccb6b24ccd67f Mon Sep 17 00:00:00 2001
From: Youssef <youssef.kaouachi@gmail.com>
Date: Thu, 3 Sep 2026 14:56:31 +0200
Subject: [PATCH] fix(ci): copy key to /tmp/id_rsa instead of ~/.ssh/id_rsa to
 avoid read-only mount error

---
 .gitea/workflows/ci-prod.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/ci-prod.yml b/.gitea/workflows/ci-prod.yml
index b692480..6b0067e 100644
--- a/.gitea/workflows/ci-prod.yml
+++ b/.gitea/workflows/ci-prod.yml
@@ -141,22 +141,21 @@ jobs:
             -e KEY_CONTENT="${KEY_CONTENT}" \
             alpine:latest sh -c '
               apk add --no-cache openssh-client rsync && \
-              mkdir -p ~/.ssh && \
               FOUND_KEY="" && \
               for k in /home/ubuntu/.ssh/gitea_ci_key /root/.ssh/gitea_ci_key /home/ubuntu/.ssh/id_ed25519 /root/.ssh/id_ed25519 /home/ubuntu/.ssh/id_rsa /root/.ssh/id_rsa; do \
                 if [ -f "$k" ]; then FOUND_KEY="$k"; break; fi ; \
               done && \
               if [ -n "$FOUND_KEY" ]; then \
                 echo "Using SSH key from file: $FOUND_KEY" && \
-                cp "$FOUND_KEY" ~/.ssh/id_rsa ; \
+                cp "$FOUND_KEY" /tmp/id_rsa ; \
               elif [ -n "$KEY_CONTENT" ]; then \
                 echo "Using SSH key from Gitea secret" && \
-                printf "%s\n" "$KEY_CONTENT" | tr -d "\r" > ~/.ssh/id_rsa ; \
+                printf "%s\n" "$KEY_CONTENT" | tr -d "\r" > /tmp/id_rsa ; \
               else \
                 echo "ERROR: No SSH key found!" && exit 1 ; \
               fi && \
-              chmod 600 ~/.ssh/id_rsa && \
-              SSH_CMD="ssh -p ${PORT} -i ~/.ssh/id_rsa -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \
+              chmod 600 /tmp/id_rsa && \
+              SSH_CMD="ssh -p ${PORT} -i /tmp/id_rsa -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \
               echo "Deploying backup script and .env to DB Server (${TARGET_USER}@${TARGET_HOST}:${DEST_DIR})..." && \
               $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \
               rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" && \