banlv/cozsweet-frontend-nextjs
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: encode domestic SSH key secret

Browse Source
This commit is contained in:
Codex
2026-07-28 18:26:14 +08:00
parent 17fad9ecc0
commit ba6d3605b7
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/domestic-test.yml
+3 -3
View File
@@ -21,17 +21,17 @@ jobs:
env: env:
SSH_HOST: ${{ secrets.DOMESTIC_TEST_SSH_HOST }} SSH_HOST: ${{ secrets.DOMESTIC_TEST_SSH_HOST }}
SSH_PORT: ${{ secrets.DOMESTIC_TEST_SSH_PORT }} SSH_PORT: ${{ secrets.DOMESTIC_TEST_SSH_PORT }}
SSH_PRIVATE_KEY: ${{ secrets.DOMESTIC_TEST_SSH_PRIVATE_KEY }} SSH_PRIVATE_KEY_B64: ${{ secrets.DOMESTIC_TEST_SSH_PRIVATE_KEY_B64 }}
SSH_KNOWN_HOSTS: ${{ secrets.DOMESTIC_TEST_SSH_KNOWN_HOSTS }} SSH_KNOWN_HOSTS: ${{ secrets.DOMESTIC_TEST_SSH_KNOWN_HOSTS }}
run: | run: |
set -eu set -eu
if [ -z "$SSH_HOST" ] || [ -z "$SSH_PRIVATE_KEY" ] || [ -z "$SSH_KNOWN_HOSTS" ]; then if [ -z "$SSH_HOST" ] || [ -z "$SSH_PRIVATE_KEY_B64" ] || [ -z "$SSH_KNOWN_HOSTS" ]; then
echo "Missing domestic test SSH secrets" >&2 echo "Missing domestic test SSH secrets" >&2
exit 1 exit 1
fi fi
mkdir -p "$HOME/.ssh" mkdir -p "$HOME/.ssh"
chmod 700 "$HOME/.ssh" chmod 700 "$HOME/.ssh"
printf '%s\n' "$SSH_PRIVATE_KEY" > "$HOME/.ssh/domestic_test_deploy_key" printf '%s' "$SSH_PRIVATE_KEY_B64" | base64 -d > "$HOME/.ssh/domestic_test_deploy_key"
printf '%s\n' "$SSH_KNOWN_HOSTS" > "$HOME/.ssh/known_hosts" printf '%s\n' "$SSH_KNOWN_HOSTS" > "$HOME/.ssh/known_hosts"
chmod 600 "$HOME/.ssh/domestic_test_deploy_key" "$HOME/.ssh/known_hosts" chmod 600 "$HOME/.ssh/domestic_test_deploy_key" "$HOME/.ssh/known_hosts"
scripts/contracts/__tests__/domestic-test-workflow.test.mjs
+2 -1
View File
@@ -18,7 +18,8 @@ test("domestic frontend workflow is manual and registry-free", async () => {
assert.doesNotMatch(workflow, /\bpush:/); assert.doesNotMatch(workflow, /\bpush:/);
assert.doesNotMatch(workflow, /REGISTRY_IMAGE/); assert.doesNotMatch(workflow, /REGISTRY_IMAGE/);
assert.match(workflow, /docker save/); assert.match(workflow, /docker save/);
assert.match(workflow, /DOMESTIC_TEST_SSH_PRIVATE_KEY/); assert.match(workflow, /DOMESTIC_TEST_SSH_PRIVATE_KEY_B64/);
assert.match(workflow, /base64 -d/);
}); });
test("domestic frontend workflow pins the China test API and isolated port", async () => { test("domestic frontend workflow pins the China test API and isolated port", async () => {