ci: fix Nix GC cleanup job SSH key secret for Booster-role
This commit is contained in:
@@ -102,10 +102,11 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
VPS_HOST: ${{ secrets.VPS_HOST }}
|
VPS_HOST: ${{ secrets.VPS_HOST }}
|
||||||
VPS_USER: ${{ secrets.VPS_USER }}
|
VPS_USER: ${{ secrets.VPS_USER }}
|
||||||
SSH_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
|
VPS_SSH_KEY: ${{ secrets.VPS_SSH_KEY }}
|
||||||
run: |
|
run: |
|
||||||
mkdir -p ~/.ssh
|
key_file=$(mktemp /tmp/gc-key.XXXXXX)
|
||||||
echo "$SSH_KEY" > ~/.ssh/id_ed25519
|
printf '%s\n' "$VPS_SSH_KEY" > "$key_file"
|
||||||
chmod 600 ~/.ssh/id_ed25519
|
chmod 600 "$key_file"
|
||||||
ssh-keyscan -H "$VPS_HOST" >> ~/.ssh/known_hosts 2>/dev/null
|
sed -i 's/\r$//' "$key_file"
|
||||||
ssh "$VPS_USER@$VPS_HOST" "sudo /usr/local/bin/nix-gc-vps.sh" || echo "⚠️ Nix GC gagal (non-fatal)"
|
ssh -i "$key_file" -o StrictHostKeyChecking=no "${VPS_USER}@${VPS_HOST}" "sudo /usr/local/bin/nix-gc-vps.sh" || echo "⚠️ Nix GC gagal (non-fatal)"
|
||||||
|
rm -f "$key_file"
|
||||||
|
|||||||
Reference in New Issue
Block a user