From cf467ed8294cf634ae35f234961cd4ae9e807845 Mon Sep 17 00:00:00 2001 From: thanhnv Date: Wed, 1 Jul 2026 19:04:34 +0900 Subject: [PATCH] fix(ci): write DEPLOY_SSH_KEY via env var + strip CR + ensure trailing newline printf '%s' with inline secret expansion could leave out trailing newline or preserve \r from browser-pasted keys, causing OpenSSH 'error in libcrypto'. Use env: block + printf '%s\n' | tr -d '\r' to normalize the key file. Co-Authored-By: Claude Sonnet 4.6 --- .gitea/workflows/ci.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 8fb190f..09f6dbb 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -161,12 +161,14 @@ jobs: uses: actions/checkout@v3 - name: Setup SSH for web VPS deploy + env: + DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }} run: | mkdir -p ~/.ssh - printf '%s' "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key + printf '%s\n' "$DEPLOY_SSH_KEY" | tr -d '\r' > ~/.ssh/deploy_key chmod 600 ~/.ssh/deploy_key ssh-keyscan -H 161.33.139.73 >> ~/.ssh/known_hosts 2>/dev/null - echo "SSH ready" + echo "SSH ready: $(ssh-keygen -l -f ~/.ssh/deploy_key 2>&1)" - name: Build backend image (node:20-slim + Prisma MySQL) run: docker build -t okr-backend:latest -f Dockerfile.backend .