From 64d6f47b4b3c7daff1ebd6596c51c9bffee4cf64 Mon Sep 17 00:00:00 2001 From: Sidney Date: Fri, 17 Jul 2026 19:49:28 -0300 Subject: [PATCH] =?UTF-8?q?ci:=20adiciona=20inje=C3=A7=C3=A3o=20multi-usu?= =?UTF-8?q?=C3=A1rio=20e=20diagn=C3=B3stico=20de=20logs=20para=20chave=20s?= =?UTF-8?q?sh?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/deploy.yml | 31 ++++++++++++++++++++++++------- 1 file changed, 24 insertions(+), 7 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index f98c293..737ee64 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -60,12 +60,29 @@ jobs: - name: Autorizar Chave SSH da VPS run: | # Como o runner executa dentro de um container Docker isolado, usamos o docker daemon - # do host para rodar um container temporário e gravar a chave diretamente no /home/ubuntu real da VPS. - docker run --rm -v /home/ubuntu:/host-ubuntu alpine sh -c ' - mkdir -p /host-ubuntu/.ssh && - echo "ssh-rsa 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 sidney@DESKTOP-DMF9AJU" >> /host-ubuntu/.ssh/authorized_keys && - chmod 700 /host-ubuntu/.ssh && - chmod 600 /host-ubuntu/.ssh/authorized_keys && - chown -R 1000:1000 /host-ubuntu/.ssh + # do host para rodar um container temporário e gravar a chave nos usuários e root da VPS. + docker run --rm -v /home:/host-home -v /root:/host-root alpine sh -c ' + KEY="ssh-rsa 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 sidney@DESKTOP-DMF9AJU" + + echo "=== Diretorios Home no Host ===" + ls -la /host-home + + for u in ubuntu opc admin sidney debian; do + if [ -d "/host-home/$u" ]; then + echo "Cadastrando chave para o usuario: $u" + mkdir -p "/host-home/$u/.ssh" + echo "$KEY" >> "/host-home/$u/.ssh/authorized_keys" + chmod 700 "/host-home/$u/.ssh" + chmod 600 "/host-home/$u/.ssh/authorized_keys" + UID_GID=$(stat -c "%u:%g" "/host-home/$u") + chown -R $UID_GID "/host-home/$u/.ssh" + fi + done + + echo "Cadastrando chave para o usuario: root" + mkdir -p /host-root/.ssh + echo "$KEY" >> /host-root/.ssh/authorized_keys + chmod 700 /host-root/.ssh + chmod 600 /host-root/.ssh/authorized_keys '