mirror of
https://github.com/cs341-illinois/coursebook.git
synced 2026-10-02 08:04:38 +08:00
Lawrence Angrave
c688b2dd43
Every deploy has been failing at the push with "git@github.com: Permission denied (publickey)". The repo has no deploy keys registered at all, so the keys inside site-deploy.enc and wiki-deploy.enc cannot authenticate - most likely lost in the illinois-cs241 -> cs341-illinois org rename. GPG decryption itself still works, so GPG_PASSPHRASE is not the problem. Comment out the gpg/ssh-agent machinery and push over https with the built-in GITHUB_TOKEN, granting the job contents: write. Nothing to rotate, and it survives future renames. site_deploy.sh stays disabled: it pushes to a different repo to nudge the website into rebuilding, which GITHUB_TOKEN cannot do, and it still names the twice-stale illinois-cs241/illinois-cs241.github.io.
55 lines
1.5 KiB
Bash
55 lines
1.5 KiB
Bash
#!/bin/bash
|
|
|
|
set -e;
|
|
|
|
if test $BUILD_FOCUS = WIKI
|
|
then
|
|
# Set environment variables used in the next script
|
|
export NUM_RETRIES=3;
|
|
export BUILD_TIME=10;
|
|
export CLONE_DIR=`mktemp -d`;
|
|
|
|
# Run the actual script
|
|
bash _scripts/push_to_wiki.sh;
|
|
else
|
|
# Copy main to a tempfile, so we don't get any checkout errors
|
|
TMP_DIR=`mktemp -d`;
|
|
|
|
if test $BUILD_FOCUS = "PDF"
|
|
then
|
|
find . -maxdepth 2 -iname "*.pdf" -exec mv {} $TMP_DIR \;
|
|
BRANCH="pdf_deploy"
|
|
else
|
|
find . -iname "*.epub" -exec mv {} $TMP_DIR \;
|
|
BRANCH="epub_deploy"
|
|
fi
|
|
|
|
# Grab an orphaned branch, so git doesn't calculate diffs
|
|
git checkout --orphan $BRANCH;
|
|
|
|
# Set up ssh
|
|
# git config --global core.sshCommand "ssh -i /tmp/deploy_wiki -F /dev/null";
|
|
|
|
|
|
# Remove all other files, we won't need them
|
|
rm -rf * || true;
|
|
rm -rf .github .gitattributes .gitignore || true;
|
|
|
|
# Move the tempfile back to the coursebook pdf
|
|
mv $TMP_DIR/* .;
|
|
|
|
# Git add commit
|
|
git add -A;
|
|
git commit -m "Adding build on $(date)" --author "$COMMITTER_EMAIL <$AUTHOR_NAME>" || true
|
|
|
|
# Push over https with the built-in GITHUB_TOKEN. Actions masks the
|
|
# token in the log, and it is scoped to this repo only.
|
|
OLD_ORIGIN=`git remote get-url origin`;
|
|
git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git";
|
|
git push origin --force $BRANCH;
|
|
|
|
# Swap it back
|
|
git remote set-url origin ${OLD_ORIGIN};
|
|
fi
|
|
|