fix: mount SSH key for server2 preload in runner job

Mount a read-only SSH key into the claude-dev deploy runner container and use it explicitly for server2 preload so the fast-path image transfer can authenticate. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-03 01:22:24 +08:00
parent 8c23aabd97
commit d7b2cb3885
1 changed files with 3 additions and 1 deletions
@@ -22,6 +22,7 @@ jobs:
      volumes:
        - /var/packages/ContainerManager/target/usr/bin/docker:/usr/bin/docker
        - /volume1/docker/claude-dev:/claude-dev-runtime
+        - /volume1/docker/nas-dashboard/ssh/vps_terminal:/runner-ssh/server2_key:ro
    steps:
      - name: Checkout exact commit
        run: |
@@ -56,7 +57,8 @@ jobs:
        if: env.ROLLBACK_ONLY == '0'
        run: |
          set -euo pipefail
-          if ssh -o StrictHostKeyChecking=accept-new jimmyg@158.101.140.85 "podman pull docker.io/library/node:20-bookworm-slim >/dev/null && podman save docker.io/library/node:20-bookworm-slim" | docker load; then
+          chmod 600 /runner-ssh/server2_key
+          if ssh -i /runner-ssh/server2_key -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new jimmyg@158.101.140.85 "podman pull docker.io/library/node:20-bookworm-slim >/dev/null && podman save docker.io/library/node:20-bookworm-slim" | docker load; then
            echo "Preloaded node:20-bookworm-slim from server2"
          else
            echo "Preload from server2 failed; continuing with registry pull during docker build"