Commit `9ca6d18f96`

9ca6d18f96d773551cf67b83e367a16753dcdf23

Verified · cmc ci/build: success ci/test: skipped

cmc <hello@cleberg.net> · 2026-09-10 03:25 UTC

wiki: Users notes ssh's home inside a build container

Ref #184

.gitbay/wiki/Users.org +5 −1

		@@ -474,7 +474,11 @@ from a runner elsewhere; inside a container on the server's own runner
474	474	the host is at a private address the runner fills in). A job that
475	475	talks back to the instance — a release asset, a comment, a push to a
476	476	pages branch — uses =$GITBAY_SSH= with a key it holds as a secret;
477		the build's container has no key of its own.
	477	the build's container has no key of its own. Two things about that
	478	container: a secret with newlines (a private key) arrives intact, and
	479	=ssh= expands =~= from the passwd entry, =/root=, not from =$HOME=,
	480	which is the build home — write an ssh config to
	481	=$(getent passwd "$(id -u)" \| cut -d: -f6)/.ssh/config=, or pass =-F=.
478	482
479	483	Secrets: =repo secret set <owner/name> <NAME>= reads the value from
480	484	stdin (never argv) and injects it into the repo's builds as =$NAME=;

Commit 9ca6d18f96