44 DEBUG : napi:*
55 APP_NAME : python-node
66 MACOSX_DEPLOYMENT_TARGET : ' 10.13'
7+ CARGO_NET_GIT_FETCH_WITH_CLI : ' true'
78
89permissions :
910 contents : write
2324 - docs/**
2425 pull_request :
2526
27+ concurrency :
28+ group : ${{ github.workflow }}-${{ github.ref }}-ci
29+ cancel-in-progress : true
30+
2631jobs :
2732 build :
2833 strategy :
9095 run : |
9196 set -x
9297
98+ export CARGO_NET_GIT_FETCH_WITH_CLI=true
99+
93100 # Install apt dependencies
94101 apt-get update -y
95102 apt-get install -y openssh-client
@@ -98,16 +105,36 @@ jobs:
98105 corepack disable
99106 npm i -gf pnpm
100107
101- # Set up SSH key (to checkout private repos with cargo)
108+ # Set up SSH keys (to checkout private repos with cargo)
102109 mkdir -p ~/.ssh
103- chmod -R 400 ~/.ssh
104- touch ~/.ssh/config ~/.ssh/known_hosts
110+ chmod 700 ~/.ssh
111+
112+ # Save SSH keys to files
113+ echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_handler_key
114+ echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_rewriter_key
115+ chmod 600 ~/.ssh/http_handler_key
116+ chmod 600 ~/.ssh/http_rewriter_key
117+
118+ # Start ssh-agent and add keys
105119 eval `ssh-agent -s`
106- echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
107- echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
120+ ssh-add ~/.ssh/http_handler_key
121+ ssh-add ~/.ssh/http_rewriter_key
108122 ssh-add -l
123+
124+ # Add GitHub to known hosts
109125 ssh-keyscan -t rsa github.com >> ~/.ssh/known_hosts
110126
127+ # Create SSH config that tries both keys for GitHub
128+ cat > ~/.ssh/config <<'EOF'
129+ Host github.com
130+ HostName github.com
131+ User git
132+ IdentityFile ~/.ssh/http_handler_key
133+ IdentityFile ~/.ssh/http_rewriter_key
134+ IdentitiesOnly yes
135+ EOF
136+ chmod 600 ~/.ssh/config
137+
111138 ${{ matrix.settings.build }}
112139 - name : Build
113140 run : ${{ matrix.settings.build }}
@@ -232,6 +259,8 @@ jobs:
232259 run : |
233260 set -x
234261
262+ export CARGO_NET_GIT_FETCH_WITH_CLI=true
263+
235264 # Install apt dependencies
236265 apt-get update -y
237266 apt-get install -y openssh-client curl
@@ -240,16 +269,36 @@ jobs:
240269 curl https://sh.rustup.rs -sSf | bash -s -- -y -t ${{ matrix.settings.target }}
241270 source "$HOME/.cargo/env"
242271
243- # Set up SSH key (to checkout private repos with cargo)
272+ # Set up SSH keys (to checkout private repos with cargo)
244273 mkdir -p ~/.ssh
245- chmod -R 400 ~/.ssh
246- touch ~/.ssh/config ~/.ssh/known_hosts
274+ chmod 700 ~/.ssh
275+
276+ # Save SSH keys to files
277+ echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_handler_key
278+ echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_rewriter_key
279+ chmod 600 ~/.ssh/http_handler_key
280+ chmod 600 ~/.ssh/http_rewriter_key
281+
282+ # Start ssh-agent and add keys
247283 eval `ssh-agent -s`
248- echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
249- echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
284+ ssh-add ~/.ssh/http_handler_key
285+ ssh-add ~/.ssh/http_rewriter_key
250286 ssh-add -l
287+
288+ # Add GitHub to known hosts
251289 ssh-keyscan -t rsa github.com >> ~/.ssh/known_hosts
252290
291+ # Create SSH config that tries both keys for GitHub
292+ cat > ~/.ssh/config <<'EOF'
293+ Host github.com
294+ HostName github.com
295+ User git
296+ IdentityFile ~/.ssh/http_handler_key
297+ IdentityFile ~/.ssh/http_rewriter_key
298+ IdentitiesOnly yes
299+ EOF
300+ chmod 600 ~/.ssh/config
301+
253302 cargo test --target ${{ matrix.settings.target }}
254303 - name : Test bindings
255304 uses : addnab/docker-run-action@v3
0 commit comments