diff options
| author | seth <[email protected]> | 2023-11-19 05:24:17 -0500 |
|---|---|---|
| committer | seth <[email protected]> | 2023-11-19 05:28:03 -0500 |
| commit | a35d149e0a9071a9892a8148022abc645d24ea6e (patch) | |
| tree | a15509833f4b65b4b8283d36bba2a80763349fc4 /.github/workflows/deploy.yaml | |
| parent | 07a6858fd7ef6ea6794cc37323d7c9cf1162d5b6 (diff) | |
actions: don't disable host key verification
Diffstat (limited to '.github/workflows/deploy.yaml')
| -rw-r--r-- | .github/workflows/deploy.yaml | 26 |
1 files changed, 13 insertions, 13 deletions
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml index dd47015..b9691a5 100644 --- a/.github/workflows/deploy.yaml +++ b/.github/workflows/deploy.yaml @@ -1,4 +1,4 @@ -name: deploy systems +name: Deploy systems on: check_suite: @@ -22,28 +22,28 @@ jobs: steps: - uses: actions/checkout@v4 - - name: install nix + - name: Install Nix uses: nixbuild/nix-quick-install-action@v26 - - name: connect to tailscale + - name: Connect to Tailscale uses: tailscale/github-action@v2 with: - oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }} - oauth-secret: ${{ secrets.TS_OAUTH_SECRET }} - tags: tag:gha + oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }} + oauth-secret: ${{ secrets.TS_OAUTH_SECRET }} + tags: tag:gha - - name: disable host key verification for ssh + - name: run: | set -eux [ ! -d ~/.ssh ] && mkdir -p ~/.ssh - cat >> ~/.ssh/config << EOF - Host * - StrictHostKeyChecking no - UserKnownHostsFile=/dev/null - EOF + pubkeys=( + "atlas ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC7YiSYYx/+zmVOPSCERHzSsMeUQtA+Vt1W0sLUw4YhK" + ) - - name: deploy all systems + for key in "${pubkeys[@]}"; do echo "$key" >> ~/.ssh/known_hosts; done + + - name: Run deploy run: | nix develop --accept-flake-config \ --command bash \ |