sidney
/
edumanagerpro2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: adiciona injeção multi-usuário e diagnóstico de logs para chave ssh
Build and Deploy (Gitea) / build-and-deploy (push) Successful in 1m58s Details

This commit is contained in:
Sidney 2026-07-17 19:49:28 -03:00
parent 30c047ab48
commit 64d6f47b4b
1 changed files with 24 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
.github/workflows/deploy.yml vendored
View File

@ -60,12 +60,29 @@ jobs:
- name: Autorizar Chave SSH da VPS - name: Autorizar Chave SSH da VPS
run: | run: |
# Como o runner executa dentro de um container Docker isolado, usamos o docker daemon # Como o runner executa dentro de um container Docker isolado, usamos o docker daemon
# do host para rodar um container temporário e gravar a chave diretamente no /home/ubuntu real da VPS. # do host para rodar um container temporário e gravar a chave nos usuários e root da VPS.
docker run --rm -v /home/ubuntu:/host-ubuntu alpine sh -c ' docker run --rm -v /home:/host-home -v /root:/host-root alpine sh -c '
mkdir -p /host-ubuntu/.ssh && KEY="ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDvJM3XAD2M8h23iwYDcolLtrjFdwUCrD30N2457yOnbJ79rj7FC0aIGBExqXE62V640qzR4TzI/FgRVhMwcvDD6WvGlHDppdqjABwt5U19ffO+a56fAcWr33kRkHh7sFnNqLasZ58j+fAqWUnYm/K5bD+5ionK6Hqp4hirZyh5pjeC0/+ast84MLUOx4jrIbeJcAXSCug61vv34E7hXERD/MOmwlQx4AZlfLWX3r6JKU80frdpmQHowQ4H6h4EBC8J0u19uYi97pLlwqUqcpK+MB/UYNMrkIt7KUcLyq0uGdxV777AdlyUw7MGpHPX3zy39lqSeFiiQb6MuE+Y0RvLOGNeNQUuGd8YK5W7e+ZZ09lo04hUF8r43I8QRDLyaAz71G4nVZFslm2RSEc/dk7cr5yUq/dgmcLvzNgEYjJ4lkefjaJmZir1S7sj9tbE+AshmqBUlxOaKxEKX+grAc0Jr4qrG0R+AD83LlnjlxjuFXe4MOr495AjlR8hIodx5EwirTIvNRMwDHSRAQM04MTJ1tm5tZ6iEFsBCNE92f+CZfEQ3SbBKku++rNOmjHzTELRY83IDghv3N3tKtw3HL6L6gUG5moGOqV91UH+nhElZAR1XOoDwbYM6d/L2lM1AQBc4vNcKyDN1ryAaZU4zFc6p56xlBEaEHmPmYK+qMmmsQ== sidney@DESKTOP-DMF9AJU"
echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDvJM3XAD2M8h23iwYDcolLtrjFdwUCrD30N2457yOnbJ79rj7FC0aIGBExqXE62V640qzR4TzI/FgRVhMwcvDD6WvGlHDppdqjABwt5U19ffO+a56fAcWr33kRkHh7sFnNqLasZ58j+fAqWUnYm/K5bD+5ionK6Hqp4hirZyh5pjeC0/+ast84MLUOx4jrIbeJcAXSCug61vv34E7hXERD/MOmwlQx4AZlfLWX3r6JKU80frdpmQHowQ4H6h4EBC8J0u19uYi97pLlwqUqcpK+MB/UYNMrkIt7KUcLyq0uGdxV777AdlyUw7MGpHPX3zy39lqSeFiiQb6MuE+Y0RvLOGNeNQUuGd8YK5W7e+ZZ09lo04hUF8r43I8QRDLyaAz71G4nVZFslm2RSEc/dk7cr5yUq/dgmcLvzNgEYjJ4lkefjaJmZir1S7sj9tbE+AshmqBUlxOaKxEKX+grAc0Jr4qrG0R+AD83LlnjlxjuFXe4MOr495AjlR8hIodx5EwirTIvNRMwDHSRAQM04MTJ1tm5tZ6iEFsBCNE92f+CZfEQ3SbBKku++rNOmjHzTELRY83IDghv3N3tKtw3HL6L6gUG5moGOqV91UH+nhElZAR1XOoDwbYM6d/L2lM1AQBc4vNcKyDN1ryAaZU4zFc6p56xlBEaEHmPmYK+qMmmsQ== sidney@DESKTOP-DMF9AJU" >> /host-ubuntu/.ssh/authorized_keys &&
chmod 700 /host-ubuntu/.ssh && echo "=== Diretorios Home no Host ==="
chmod 600 /host-ubuntu/.ssh/authorized_keys && ls -la /host-home
chown -R 1000:1000 /host-ubuntu/.ssh
for u in ubuntu opc admin sidney debian; do
if [ -d "/host-home/$u" ]; then
echo "Cadastrando chave para o usuario: $u"
mkdir -p "/host-home/$u/.ssh"
echo "$KEY" >> "/host-home/$u/.ssh/authorized_keys"
chmod 700 "/host-home/$u/.ssh"
chmod 600 "/host-home/$u/.ssh/authorized_keys"
UID_GID=$(stat -c "%u:%g" "/host-home/$u")
chown -R $UID_GID "/host-home/$u/.ssh"
fi
done
echo "Cadastrando chave para o usuario: root"
mkdir -p /host-root/.ssh
echo "$KEY" >> /host-root/.ssh/authorized_keys
chmod 700 /host-root/.ssh
chmod 600 /host-root/.ssh/authorized_keys
' '