Commit `bf7ced2be6`

bf7ced2be63e8104728f2322d1355a4b7d1bd06c

Verified · cmc ci/build: success ci/sonar: success ci/test: skipped

cmc <hello@cleberg.net> · 2026-09-10 03:27 UTC

wiki: recommend ssh -F for a build's own config

Ref #184

.gitbay/wiki/Users.org +4 −2

		@@ -477,8 +477,10 @@ pages branch — uses =$GITBAY_SSH= with a key it holds as a secret;
477	477	the build's container has no key of its own. Two things about that
478	478	container: a secret with newlines (a private key) arrives intact, and
479	479	=ssh= expands =~= from the passwd entry, =/root=, not from =$HOME=,
480		which is the build home — write an ssh config to
481		=$(getent passwd "$(id -u)" \| cut -d: -f6)/.ssh/config=, or pass =-F=.
	480	which is the build home — so keep an ssh config in the workspace and
	481	pass it with =ssh -F= (and =GIT_SSH_COMMAND="ssh -F ..."= for git),
	482	which also works on a runner with no container, where writing to
	483	=~/.ssh= would edit that machine's own configuration.
482	484
483	485	Secrets: =repo secret set <owner/name> <NAME>= reads the value from
484	486	stdin (never argv) and injects it into the repo's builds as =$NAME=;

Commit bf7ced2be6