spalencsar/deskify
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

Fix AUR host key verification in publish workflow

Browse Source
This commit is contained in:
Sebastian Palencsar
2026-02-23 13:19:36 +01:00
parent 5b849f9820
commit 33d8d1b64b
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
.github/workflows/aur-publish.yml vendored
View File

@@ -53,7 +53,10 @@ jobs:
chmod 700 ~/.ssh chmod 700 ~/.ssh
printf "%s\n" "${AUR_SSH_PRIVATE_KEY}" > ~/.ssh/aur printf "%s\n" "${AUR_SSH_PRIVATE_KEY}" > ~/.ssh/aur
chmod 600 ~/.ssh/aur chmod 600 ~/.ssh/aur
ssh-keyscan -t rsa,ecdsa,ed25519 aur.archlinux.org >> ~/.ssh/known_hosts touch ~/.ssh/known_hosts
chmod 600 ~/.ssh/known_hosts
# Ensure host key is present for non-interactive git/ssh.
ssh-keyscan -t rsa,ecdsa,ed25519 aur.archlinux.org >> ~/.ssh/known_hosts 2>/dev/null
cat >> ~/.ssh/config <<'EOF' cat >> ~/.ssh/config <<'EOF'
Host aur.archlinux.org Host aur.archlinux.org
User aur User aur
@@ -66,6 +69,8 @@ jobs:
AUR_USERNAME: ${{ secrets.AUR_USERNAME }} AUR_USERNAME: ${{ secrets.AUR_USERNAME }}
AUR_EMAIL: ${{ secrets.AUR_EMAIL }} AUR_EMAIL: ${{ secrets.AUR_EMAIL }}
run: | run: |
export GIT_SSH_COMMAND="ssh -i ~/.ssh/aur -o IdentitiesOnly=yes -o UserKnownHostsFile=$HOME/.ssh/known_hosts -o StrictHostKeyChecking=yes"
git config --global user.name "${AUR_USERNAME:-deskify-bot}" git config --global user.name "${AUR_USERNAME:-deskify-bot}"
git config --global user.email "${AUR_EMAIL:-noreply@example.invalid}" git config --global user.email "${AUR_EMAIL:-noreply@example.invalid}"