From 790f0b9410246f11d46aafd99b0f6a2f708b3771 Mon Sep 17 00:00:00 2001 From: L HEREEC Kevin INNOV/PTFM Date: Mon, 13 Jul 2026 12:37:14 +0200 Subject: [PATCH] ci: use SSH key mounted directly in runner container instead of secret --- .gitea/workflows/build.yml | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index 064b23f..31b0203 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -54,13 +54,11 @@ jobs: run: | apk add --no-cache openssh-client - # Installer la clé privée SSH - mkdir -p ~/.ssh - echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519 - chmod 600 ~/.ssh/id_ed25519 - ssh-keyscan -H 192.168.1.39 >> ~/.ssh/known_hosts + # Clé montée directement dans le runner via volume Docker + chmod 600 /root/.ssh/id_ed25519 + ssh-keyscan -H 192.168.1.39 >> /root/.ssh/known_hosts - SSH="ssh -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=no Stude12@192.168.1.39" + SSH="ssh -i /root/.ssh/id_ed25519 -o StrictHostKeyChecking=no Stude12@192.168.1.39" # Copier docker-compose.prod.yml sur le NAS cat docker-compose.prod.yml | $SSH \