44 DEBUG : napi:*
55 APP_NAME : python-node
66 MACOSX_DEPLOYMENT_TARGET : ' 10.13'
7+ CARGO_NET_GIT_FETCH_WITH_CLI : ' true'
78
89permissions :
910 contents : write
2324 - docs/**
2425 pull_request :
2526
27+ concurrency :
28+ group : ${{ github.workflow }}-${{ github.ref }}-ci
29+ cancel-in-progress : true
30+
2631jobs :
2732 build :
2833 strategy :
9095 run : |
9196 set -x
9297
98+ export CARGO_NET_GIT_FETCH_WITH_CLI=true
99+
93100 # Install apt dependencies
94101 apt-get update -y
95102 apt-get install -y openssh-client
@@ -98,16 +105,45 @@ jobs:
98105 corepack disable
99106 npm i -gf pnpm
100107
101- # Set up SSH key (to checkout private repos with cargo)
108+ # Set up SSH keys (to checkout private repos with cargo)
102109 mkdir -p ~/.ssh
103- chmod -R 400 ~/.ssh
104- touch ~/.ssh/config ~/.ssh/known_hosts
110+ chmod 700 ~/.ssh
111+
112+ # Save SSH keys to files
113+ echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_handler_key
114+ echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_rewriter_key
115+ chmod 600 ~/.ssh/http_handler_key
116+ chmod 600 ~/.ssh/http_rewriter_key
117+
118+ # Start ssh-agent and add keys
105119 eval `ssh-agent -s`
106- echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
107- echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
120+ ssh-add ~/.ssh/http_handler_key
121+ ssh-add ~/.ssh/http_rewriter_key
108122 ssh-add -l
123+
124+ # Add GitHub to known hosts
109125 ssh-keyscan -t rsa github.com >> ~/.ssh/known_hosts
110126
127+ # Create SSH config
128+ cat > ~/.ssh/config <<'EOF'
129+ Host github-http-handler
130+ HostName github.com
131+ User git
132+ IdentityFile ~/.ssh/http_handler_key
133+ IdentitiesOnly yes
134+
135+ Host github-http-rewriter
136+ HostName github.com
137+ User git
138+ IdentityFile ~/.ssh/http_rewriter_key
139+ IdentitiesOnly yes
140+ EOF
141+ chmod 600 ~/.ssh/config
142+
143+ # Configure git to use the correct SSH hosts
144+ git config --global url."git@github-http-handler:platformatic/http-handler.git".insteadOf "git@github.com:platformatic/http-handler.git"
145+ git config --global url."git@github-http-rewriter:platformatic/http-rewriter.git".insteadOf "git@github.com:platformatic/http-rewriter.git"
146+
111147 ${{ matrix.settings.build }}
112148 - name : Build
113149 run : ${{ matrix.settings.build }}
@@ -232,6 +268,8 @@ jobs:
232268 run : |
233269 set -x
234270
271+ export CARGO_NET_GIT_FETCH_WITH_CLI=true
272+
235273 # Install apt dependencies
236274 apt-get update -y
237275 apt-get install -y openssh-client curl
@@ -240,16 +278,45 @@ jobs:
240278 curl https://sh.rustup.rs -sSf | bash -s -- -y -t ${{ matrix.settings.target }}
241279 source "$HOME/.cargo/env"
242280
243- # Set up SSH key (to checkout private repos with cargo)
281+ # Set up SSH keys (to checkout private repos with cargo)
244282 mkdir -p ~/.ssh
245- chmod -R 400 ~/.ssh
246- touch ~/.ssh/config ~/.ssh/known_hosts
283+ chmod 700 ~/.ssh
284+
285+ # Save SSH keys to files
286+ echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_handler_key
287+ echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' > ~/.ssh/http_rewriter_key
288+ chmod 600 ~/.ssh/http_handler_key
289+ chmod 600 ~/.ssh/http_rewriter_key
290+
291+ # Start ssh-agent and add keys
247292 eval `ssh-agent -s`
248- echo "${{ secrets.HTTP_HANDLER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
249- echo "${{ secrets.HTTP_REWRITER_ACCESS_TOKEN }}" | tr -d '\r' | ssh-add -
293+ ssh-add ~/.ssh/http_handler_key
294+ ssh-add ~/.ssh/http_rewriter_key
250295 ssh-add -l
296+
297+ # Add GitHub to known hosts
251298 ssh-keyscan -t rsa github.com >> ~/.ssh/known_hosts
252299
300+ # Create SSH config
301+ cat > ~/.ssh/config <<'EOF'
302+ Host github-http-handler
303+ HostName github.com
304+ User git
305+ IdentityFile ~/.ssh/http_handler_key
306+ IdentitiesOnly yes
307+
308+ Host github-http-rewriter
309+ HostName github.com
310+ User git
311+ IdentityFile ~/.ssh/http_rewriter_key
312+ IdentitiesOnly yes
313+ EOF
314+ chmod 600 ~/.ssh/config
315+
316+ # Configure git to use the correct SSH hosts
317+ git config --global url."git@github-http-handler:platformatic/http-handler.git".insteadOf "git@github.com:platformatic/http-handler.git"
318+ git config --global url."git@github-http-rewriter:platformatic/http-rewriter.git".insteadOf "git@github.com:platformatic/http-rewriter.git"
319+
253320 cargo test --target ${{ matrix.settings.target }}
254321 - name : Test bindings
255322 uses : addnab/docker-run-action@v3
0 commit comments