debug host key pinning in nginx workflow

2026-03-20 16:40:37 -04:00
parent 77e08f34cf
commit 6e2ec87ccf
1 changed files with 4 additions and 2 deletions
@@ -13,10 +13,12 @@ jobs:
      - name: Deploy via SSH
        run: |
          mkdir -p ~/.ssh
-          echo "${{ vars.DEPLOY_HOST_KEY }}" > ~/.ssh/known_hosts
+          echo "${{ vars.DEPLOY_HOST_KEY }}" >> ~/.ssh/known_hosts
+          chmod 644 ~/.ssh/known_hosts
          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
          chmod 600 ~/.ssh/deploy_key
-          ssh -o StrictHostKeyChecking=yes -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-nginx
+          cat ~/.ssh/known_hosts
+          ssh -v -o StrictHostKeyChecking=yes -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-nginx

  test:
    needs: deploy