Skip to content

Commit

Permalink
actions: don't disable host key verification
Browse files Browse the repository at this point in the history
  • Loading branch information
getchoo committed Nov 19, 2023
1 parent 07a6858 commit a35d149
Show file tree
Hide file tree
Showing 5 changed files with 24 additions and 21 deletions.
4 changes: 2 additions & 2 deletions .github/workflows/autobot.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: auto-merge dependabot
name: Auto-merge Dependabot

on: pull_request

Expand All @@ -17,7 +17,7 @@ jobs:
with:
github-token: ${{ github.token }}

- name: enable auto-merge
- name: Enable auto-merge
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
run: gh pr merge --auto --rebase "$PR"
env:
Expand Down
26 changes: 13 additions & 13 deletions .github/workflows/deploy.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: deploy systems
name: Deploy systems

on:
check_suite:
Expand All @@ -22,28 +22,28 @@ jobs:
steps:
- uses: actions/checkout@v4

- name: install nix
- name: Install Nix
uses: nixbuild/nix-quick-install-action@v26

- name: connect to tailscale
- name: Connect to Tailscale
uses: tailscale/github-action@v2
with:
oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
tags: tag:gha
oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
tags: tag:gha

- name: disable host key verification for ssh
- name:
run: |
set -eux
[ ! -d ~/.ssh ] && mkdir -p ~/.ssh
cat >> ~/.ssh/config << EOF
Host *
StrictHostKeyChecking no
UserKnownHostsFile=/dev/null
EOF
pubkeys=(
"atlas ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC7YiSYYx/+zmVOPSCERHzSsMeUQtA+Vt1W0sLUw4YhK"
)
- name: deploy all systems
for key in "${pubkeys[@]}"; do echo "$key" >> ~/.ssh/known_hosts; done
- name: Run deploy
run: |
nix develop --accept-flake-config \
--command bash \
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/update-inputs.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: update all flake inputs
name: Update all flake inputs

on:
schedule:
Expand Down
11 changes: 7 additions & 4 deletions .github/workflows/update-lock.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: update flake lock
name: Update flake.lock

on:
workflow_call:
Expand All @@ -20,11 +20,14 @@ on:
jobs:
update:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
- uses: nixbuild/nix-quick-install-action@v26

- name: update lockfile
- name: Install Nix
uses: nixbuild/nix-quick-install-action@v26

- name: Update lockfile & make PR
uses: DeterminateSystems/update-flake-lock@v20
id: update
with:
Expand All @@ -33,7 +36,7 @@ jobs:
pr-title: ${{ inputs.commit-msg }}
token: ${{ secrets.token }}

- name: enable auto-merge
- name: Enable auto-merge
shell: bash
run: gh pr merge --auto --rebase "$PR_ID"
env:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/update-nixpkgs.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: update nixpkgs flake inputs
name: Update nixpkgs flake inputs

on:
schedule:
Expand Down

0 comments on commit a35d149

Please sign in to comment.