Commit `9f46bbe627`

9f46bbe6276d827173ae41e82f57d18bfb2d55b8

parent: 78d4c2ac2f

Verified · cmc ci/daily-pull: failure

cmc <hello@cleberg.net> · 2026-09-10 03:25 UTC

ci: write the ssh config where ssh reads it

ssh expands ~ from the passwd entry, /root in the container, while the
shell's ~ is the build home. The config landed where ssh never looked
and every connection failed host key verification.

Layout: unified · split

.gitbay/ci.yml +5 −2

         test -n "$GITBAY_SSH" || { echo "ERROR: GITBAY_SSH is not set; the runner is too old"; exit 1; }
         umask 077
         printf '%s\n' "$BOT_SSH_KEY" > "$PWD/.bot_key"
-        mkdir -p ~/.ssh
+        # ssh expands ~ from the passwd entry, not $HOME; in the build's
-        printf 'Host %s\n  IdentityFile %s\n  IdentitiesOnly yes\n  StrictHostKeyChecking accept-new\n' "${GITBAY_SSH#*@}" "$PWD/.bot_key" > ~/.ssh/config
+        # container that is /root while $HOME is the build home.
+        sshhome=$(getent passwd "$(id -u)" | cut -d: -f6)
+        mkdir -p "$sshhome/.ssh"
+        printf 'Host %s\n  IdentityFile %s\n  IdentitiesOnly yes\n  StrictHostKeyChecking accept-new\n' "${GITBAY_SSH#*@}" "$PWD/.bot_key" > "$sshhome/.ssh/config"
         ssh "$GITBAY_SSH" whoami
       - |
         set -e

Commit 9f46bbe627

Commit `9f46bbe627`