jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipeline build v9 - key diagnostics in commands

Browse Source
This commit is contained in:
Josh 2025-07-31 14:15:33 +00:00
parent 5e957096b8
commit d86929db01
1 changed files with 16 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
.woodpecker.yml
View File

@ -2,29 +2,23 @@ steps:
ssh-test: ssh-test:
image: google/cloud-sdk:latest image: google/cloud-sdk:latest
commands: commands:
- 'set -eu' - |
- 'mkdir -p ~/.ssh' #!/bin/bash
- 'gcloud secrets versions access latest --secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev | base64 -d > ~/.ssh/known_hosts' set -eu
- 'chmod 644 ~/.ssh/known_hosts' mkdir -p ~/.ssh
- 'gcloud secrets versions access latest --secret=STAGING_SSH_KEY --project=aptivaai-dev > ~/.ssh/id_ed25519'
- 'chmod 600 ~/.ssh/id_ed25519'
- 'echo Key size: $(wc -c < ~/.ssh/id_ed25519) bytes'
- 'file ~/.ssh/id_ed25519 || echo file not found'
- 'head -n 5 ~/.ssh/id_ed25519'
- 'ssh -vvv -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=yes jcoakley@10.128.0.12 hostname'
# Decode known hosts # Decode known hosts
- gcloud secrets versions access latest --secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev | base64 -d > ~/.ssh/known_hosts gcloud secrets versions access latest --secret=STAGING_KNOWN_HOSTS --project=aptivaai-dev | base64 -d > ~/.ssh/known_hosts
- chmod 644 ~/.ssh/known_hosts chmod 644 ~/.ssh/known_hosts
# Inject SSH key # Inject SSH key
- gcloud secrets versions access latest --secret=STAGING_SSH_KEY --project=aptivaai-dev > ~/.ssh/id_ed25519 gcloud secrets versions access latest --secret=STAGING_SSH_KEY --project=aptivaai-dev > ~/.ssh/id_ed25519
- chmod 600 ~/.ssh/id_ed25519 chmod 600 ~/.ssh/id_ed25519
# Verify key integrity before SSH # Verify key integrity
- echo Key size: $(wc -c < ~/.ssh/id_ed25519) bytes echo "Key size: $(wc -c < ~/.ssh/id_ed25519) bytes"
- file ~/.ssh/id_ed25519 || echo file not found file ~/.ssh/id_ed25519 || echo "file not found"
- head -n 5 ~/.ssh/id_ed25519 head -n 5 ~/.ssh/id_ed25519
# Attempt SSH # Attempt SSH
- ssh -vvv -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=yes jcoakley@10.128.0.12 hostname ssh -vvv -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=yes jcoakley@10.128.0.12 hostname