Commit `5448d39270`

5448d39270e4b9104a4ea08a52ec022bf852f083

parent: 6146bc1a9f

Verified · cmc ci/pages: failure ci/test: failure

cmc <hello@cleberg.net> · 2026-08-30 17:07 UTC

Reach the forge on the host the runner cloned from

Steps do not inherit the runner's GIT_SSH_COMMAND, so a hardcoded gitbay.org
fails host key verification as ci-runner. Both scripts now derive the host from
origin.

Layout: unified · split

.gitbay/pages.sh +1 −1

	@@ -31,6 +31,6 @@ git -C "$work" -c user.name=gitbay-ci -c user.email=ci@orgo.krz.sh commit -q \
31	-m "Publish the documentation site	31	-m "Publish the documentation site
32		32
33	Built from ${GITBAY_SHA} by \`orgo build docs -o _site --strict\`."	33	Built from ${GITBAY_SHA} by \`orgo build docs -o _site --strict\`."
34	git -C "$work" push -q --force "ssh://git@gitbay.org/${GITBAY_REPO}.git" HEAD:refs/heads/pages	34	git -C "$work" push -q --force "$(git remote get-url origin)" HEAD:refs/heads/pages
35		35
36	echo "published the site from ${GITBAY_SHA} to the pages branch"	36	echo "published the site from ${GITBAY_SHA} to the pages branch"

.gitbay/release.sh +6 −2

 	exit 1
 fi
+# Reach the forge on whatever host the runner cloned from, rather than a name it
+# may not have in known_hosts.
+host=$(git remote get-url origin | sed 's#.*://[^@]*@##; s#[:/].*##')
 dist=dist
 mkdir -p "$dist"
 # Notes come from the annotated tag, so the person cutting the release writes
 # them at the moment they decide to cut it (`git tag -a "$tag" -F notes.md`).
 git tag -l --format='%(contents)' "$tag" |
-	ssh git@gitbay.org release create "$repo" "$tag" --title "${tag#v}" --file -
+	ssh "git@$host" release create "$repo" "$tag" --title "${tag#v}" --file -
 for f in "$dist"/*; do
-	ssh git@gitbay.org release asset add "$repo" "$tag" "$(basename "$f")" <"$f"
+	ssh "git@$host" release asset add "$repo" "$tag" "$(basename "$f")" <"$f"
 	echo "attached $(basename "$f")"
 done

Commit 5448d39270

Commit `5448d39270`