Jafner/Jafner.net
1
0
Fork 0
Code Issues 16 Pull Requests Actions Packages Projects Releases Wiki Activity

#17 Disable SSH known_hosts config and test

Browse Source 
Can we get away with this?
This commit is contained in:
Joey Hafner 2024-10-25 20:30:37 -07:00
parent 6de9876adc
commit edb7cbce8d
No known key found for this signature in database
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
.gitea/workflows/silver-flame-deploy.yaml
View File

@ -35,17 +35,17 @@ jobs:
run: | run: |
nix eval --json .#deploy.nodes --apply 'builtins.attrValues' |\ nix eval --json .#deploy.nodes --apply 'builtins.attrValues' |\
jq -r '.[].hostname' | xargs echo > /tmp/hostlist jq -r '.[].hostname' | xargs echo > /tmp/hostlist
- name: Add known hosts # - name: Add known hosts
run: | # run: |
mkdir -p ~/.ssh && touch ~/.ssh/known_hosts && chmod 600 ~/.ssh/known_hosts # mkdir -p ~/.ssh && touch ~/.ssh/known_hosts && chmod 600 ~/.ssh/known_hosts
for host in $(cat /tmp/hostlist); do # for host in $(cat /tmp/hostlist); do
ssh-keyscan -t ed25519 $host >> ~/.ssh/known_hosts # ssh-keyscan -t ed25519 $host >> ~/.ssh/known_hosts
done # done
- name: Test SSH connections # - name: Test SSH connections
run: | # run: |
for host in $(cat /tmp/hostlist); do # for host in $(cat /tmp/hostlist); do
ssh -i /tmp/key root@$host 'whoami; echo $HOSTNAME' # ssh -i /tmp/key root@$host 'whoami; echo $HOSTNAME'
done # done
- name: Run deploy-rs from flake - name: Run deploy-rs from flake
run: | run: |
nix run github:serokell/deploy-rs#defaultPackage.x86_64-linux -- --ssh-opts '-i /tmp/key' --dry-activate nix run github:serokell/deploy-rs#defaultPackage.x86_64-linux -- --ssh-opts '-i /tmp/key' --dry-activate