86 lines
No EOL
2.2 KiB
YAML
86 lines
No EOL
2.2 KiB
YAML
name: ssh-test
|
|
run-name: ${{ github.actor }} - ssh-test
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
ssh-test:
|
|
runs-on: docker
|
|
container:
|
|
image: alpine:edge
|
|
options: --volume /dev/net/tun:/dev/net/tun
|
|
steps:
|
|
- name: "Setup: Runner"
|
|
run: |
|
|
apk update
|
|
apk add git nodejs nix openssh-client qemu tailscale --repository=http://dl-cdn.alpinelinux.org/alpine/edge/testing/
|
|
|
|
- name: "Setup: SSH"
|
|
run: |
|
|
mkdir /root/.ssh
|
|
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
|
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
|
|
chmod 700 /root/.ssh
|
|
chmod 600 /root/.ssh/id_ed25519
|
|
chmod 644 /root/.ssh/id_ed25519.pub
|
|
|
|
- name: "Setup: Headscale"
|
|
run: |
|
|
echo "tailscaled --cleanup"
|
|
tailscaled --cleanup
|
|
echo ""
|
|
echo "tailscaled -state=mem &"
|
|
tailscaled -state=mem:
|
|
echo ""
|
|
echo "tailscale up"
|
|
tailscale up \
|
|
--login-server=https://headscale.sysctl.io \
|
|
--accept-routes \
|
|
--accept-dns \
|
|
--authkey ${{ secrets.TAILSCALE_KEY }} \
|
|
--hostname forgejo-runner \
|
|
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
|
|
tailscale status
|
|
tailscale netcheck
|
|
|
|
- uses: actions/checkout@v3
|
|
- name: "Directory Structure"
|
|
run: |
|
|
ls ${{ github.workspace }}/*
|
|
|
|
- name: "Runner: Node Info"
|
|
run: |
|
|
echo "pwd"
|
|
pwd
|
|
echo "ls -lah"
|
|
ls -lah
|
|
echo 'id'
|
|
id
|
|
echo "uname -a"
|
|
uname -a
|
|
echo "hostname"
|
|
hostname
|
|
echo "/etc/os-release"
|
|
cat /etc/os-release
|
|
echo "whoami"
|
|
whoami
|
|
echo "cat /etc/resolv.conf"
|
|
cat /etc/resolv.conf
|
|
|
|
- name: "Nix Version"
|
|
run: |
|
|
nix --version
|
|
# - name: "Nix build"
|
|
# run: |
|
|
# echo "Running Nix Build"
|
|
# nix --extra-experimental-features "nix-command flakes" \
|
|
# build /workspace/albert/nix#imageConfigurations.nixos-iso-desktop
|
|
# echo "Results:"
|
|
# ls -lah result/iso/
|
|
|
|
- if: always()
|
|
run: rm -rf /.cache
|
|
- if: always()
|
|
run: rm -rf ${{ github.worksspace }} |