blob: 69f79f3bfef3f8301dd3abb0839301017d5a573b (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
kind: pipeline
name: ssh_and_execute
# Define a step to execute the SSH command on the server
steps:
- name: ssh_execute
image: alpine:latest # Lightweight base image (adjust if needed)
# Fetch the private key securely from Drone secrets
environment:
KEY_DATA:
from_secret: SSH_KEY_SECRET
commands:
# Ensure key data is not accidentally logged
- apk update
- apk add openssh
- echo "$KEY_DATA" | tr -d '\r' > /tmp/drone_key # Remove carriage returns (if any) and store in temp file
- chmod 600 /tmp/drone_key # Set strict permissions
- eval "$(ssh-agent -s)" # Start SSH agent
# Add the private key to the agent securely
- ssh-add /tmp/drone_key
# Replace with actual server details (host, username, command)
- ssh crystal@tilde.institute -i /tmp/drone_key "touch hello_im_emu"
|