From 6a3608fe1f1cdf350056820f52f671ff34e8cfb4 Mon Sep 17 00:00:00 2001 From: eddie Date: Wed, 8 Oct 2025 04:51:15 -0400 Subject: [PATCH 1/3] Update .gitea/workflows/deploy.yml --- .gitea/workflows/deploy.yml | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 2ebb52b..51b4a69 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -63,18 +63,19 @@ jobs: - name: Write SSH key run: | - set -eu - install -d -m 700 ~/.ssh - printf '%s\n' "${SSH_KEY}" > ~/.ssh/id_ed25519 - sed -i 's/\r$//' ~/.ssh/id_ed25519 + mkdir -p ~/.ssh + chmod 700 ~/.ssh + umask 077 + printf "%s" "${SSH_KEY}" > ~/.ssh/id_ed25519 chmod 600 ~/.ssh/id_ed25519 if [ -n "${SSH_KNOWN_HOSTS}" ]; then - printf '%s\n' "${SSH_KNOWN_HOSTS}" > ~/.ssh/known_hosts + printf "%s\n" "${SSH_KNOWN_HOSTS}" > ~/.ssh/known_hosts chmod 644 ~/.ssh/known_hosts else - printf 'StrictHostKeyChecking no\n' >> ~/.ssh/config + echo "StrictHostKeyChecking no" >> ~/.ssh/config fi + - name: Upload & activate atomically run: | set -euo pipefail From 899bc2be76db8cfe9d67e2d64d638c40f04487fb Mon Sep 17 00:00:00 2001 From: eddie Date: Wed, 8 Oct 2025 04:55:58 -0400 Subject: [PATCH 2/3] Update .gitea/workflows/deploy.yml --- .gitea/workflows/deploy.yml | 14 +++++--------- 1 file changed, 5 insertions(+), 9 deletions(-) diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 51b4a69..132d6ce 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -61,19 +61,15 @@ jobs: mv "$OUT" "release/${REL}.tar.gz" - - name: Write SSH key + - name: Use host SSH key run: | mkdir -p ~/.ssh chmod 700 ~/.ssh - umask 077 - printf "%s" "${SSH_KEY}" > ~/.ssh/id_ed25519 + # Symlink to the host’s deploy key (already readable by the runner) + ln -sf /home/gitea-runner/.ssh/deploy_stellaamor ~/.ssh/id_ed25519 + echo "StrictHostKeyChecking no" >> ~/.ssh/config chmod 600 ~/.ssh/id_ed25519 - if [ -n "${SSH_KNOWN_HOSTS}" ]; then - printf "%s\n" "${SSH_KNOWN_HOSTS}" > ~/.ssh/known_hosts - chmod 644 ~/.ssh/known_hosts - else - echo "StrictHostKeyChecking no" >> ~/.ssh/config - fi + - name: Upload & activate atomically From 929b9b3090ba1a38d5751aef449a9c4f0721ae14 Mon Sep 17 00:00:00 2001 From: eddie Date: Wed, 8 Oct 2025 04:56:18 -0400 Subject: [PATCH 3/3] Update .gitea/workflows/deploy.yml --- .gitea/workflows/deploy.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 132d6ce..3faa53f 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -65,7 +65,6 @@ jobs: run: | mkdir -p ~/.ssh chmod 700 ~/.ssh - # Symlink to the host’s deploy key (already readable by the runner) ln -sf /home/gitea-runner/.ssh/deploy_stellaamor ~/.ssh/id_ed25519 echo "StrictHostKeyChecking no" >> ~/.ssh/config chmod 600 ~/.ssh/id_ed25519