From d7b2cb3885951aa0f7e87bb95104309568bf0bca Mon Sep 17 00:00:00 2001 From: "Gan, Jimmy" Date: Tue, 3 Mar 2026 01:22:24 +0800 Subject: [PATCH] fix: mount SSH key for server2 preload in runner job Mount a read-only SSH key into the claude-dev deploy runner container and use it explicitly for server2 preload so the fast-path image transfer can authenticate. Co-Authored-By: Claude Opus 4.6 (1M context) --- .gitea/workflows/deploy-claude-dev-dev.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/deploy-claude-dev-dev.yml b/.gitea/workflows/deploy-claude-dev-dev.yml index f083fe8..c518716 100644 --- a/.gitea/workflows/deploy-claude-dev-dev.yml +++ b/.gitea/workflows/deploy-claude-dev-dev.yml @@ -22,6 +22,7 @@ jobs: volumes: - /var/packages/ContainerManager/target/usr/bin/docker:/usr/bin/docker - /volume1/docker/claude-dev:/claude-dev-runtime + - /volume1/docker/nas-dashboard/ssh/vps_terminal:/runner-ssh/server2_key:ro steps: - name: Checkout exact commit run: | @@ -56,7 +57,8 @@ jobs: if: env.ROLLBACK_ONLY == '0' run: | set -euo pipefail - if ssh -o StrictHostKeyChecking=accept-new jimmyg@158.101.140.85 "podman pull docker.io/library/node:20-bookworm-slim >/dev/null && podman save docker.io/library/node:20-bookworm-slim" | docker load; then + chmod 600 /runner-ssh/server2_key + if ssh -i /runner-ssh/server2_key -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new jimmyg@158.101.140.85 "podman pull docker.io/library/node:20-bookworm-slim >/dev/null && podman save docker.io/library/node:20-bookworm-slim" | docker load; then echo "Preloaded node:20-bookworm-slim from server2" else echo "Preload from server2 failed; continuing with registry pull during docker build"