nix/.forgejo/workflows/ssh-test.yml

name: ssh-test
run-name: ${{ github.actor }} - ssh-test
on:
  push:
    branches:
    - main
 
jobs:
  ssh-test:
    runs-on: docker
    container: 
      image: alpine:edge
      options: --volume /dev/net/tun:/dev/net/tun
    steps:
    - name:  "Setup: Runner"
      run: |
        apk update
        apk add git nodejs nix openssh-client qemu tailscale --repository=http://dl-cdn.alpinelinux.org/alpine/edge/testing/

    - name:  "Setup: SSH"
      run: |
        mkdir /root/.ssh
        echo "${{ secrets.SSH_PUBLIC_KEY }}"  > /root/.ssh/id_ed25519.pub 
        echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
        chmod 700 /root/.ssh
        chmod 600 /root/.ssh/id_ed25519 
        chmod 644 /root/.ssh/id_ed25519.pub

    - name: "Setup:  Headscale"
      run: | 
        echo "tailscaled --cleanup"
        tailscaled --cleanup
        echo ""
        echo "tailscaled --state=mem 2> ~/tailscaled.log &"
        tailscaled --state=mem:
        echo ""
        echo "tailscale up"
        tailscale up \
            --login-server=https://headscale.sysctl.io \
            --accept-routes \
            --accept-dns \
            --authkey ${{ secrets.TAILSCALE_KEY }}  \
            --hostname forgejo-runner \
            --advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
        tailscale status 
        tailscale netcheck

    - uses: actions/checkout@v3
    - name: "Directory Structure"
      run: | 
        ls ${{ github.workspace }}/*

    - name: "Runner:  Node Info"
      run: |
        echo "pwd"
        pwd
        echo "ls -lah"
        ls -lah 
        echo 'id'
        id
        echo "uname -a"
        uname -a
        echo "hostname"
        hostname
        echo "/etc/os-release"
        cat /etc/os-release
        echo "whoami"
        whoami
        echo "cat /etc/resolv.conf" 
        cat /etc/resolv.conf

    - name: "Nix Version"
      run:  | 
        nix --version
   #  - name: "Nix build"
   #    run: | 
   #      echo "Running Nix Build"
   #      nix --extra-experimental-features "nix-command flakes" \
   #        build /workspace/albert/nix#imageConfigurations.nixos-iso-desktop
   #      echo "Results:"
   #      ls -lah result/iso/

    - if: always()
      run:  rm -rf /.cache
    - if: always()
      run: rm -rf ${{ github.worksspace }}