~sircmpwn/sr.ht-discuss

2 2

Private git.sr.ht repositories and builds.sr.ht: authenticating without sharing my SSH key

Details
Message ID
<86sf1m67wo.fsf@aarsen.me>
DKIM signature
pass
Download raw message
Hi!

I'd like to run builds via the git.sr.ht integration for builds.sr.ht,
but it'd appear that they don't automatically authenticate the build
runner with the git.sr.ht repository, requiring installing a SSH key via
a secret.

As there are no per-repo keys or anything of the sort, this'd require an
alternate account with a key added, and with write access to the
git.sr.ht repo in question, AFAICT.

Is there a better solution?

TIA, have a lovely day!
-- 
Arsen Arsenović
Details
Message ID
<d475b6b0-3820-4c60-8d08-db4abc62c8b0@jacksonchen666.com>
In-Reply-To
<86sf1m67wo.fsf@aarsen.me> (view parent)
DKIM signature
pass
Download raw message
On 2024-02-21 00:13, Arsen Arsenović wrote:
> As there are no per-repo keys or anything of the sort, this'd require an
> alternate account with a key added, and with write access to the
> git.sr.ht repo in question, AFAICT.
I just checked and it is possible to give read-only access to git repos.

> Is there a better solution?
I can't think of anything other than the workaround of using an alt 
account with read-only repo access, with the accompanying SSH key for 
that alt account.

(Resent because I forgot to reply all again)
Details
Message ID
<86a5nt5x55.fsf@aarsen.me>
In-Reply-To
<d475b6b0-3820-4c60-8d08-db4abc62c8b0@jacksonchen666.com> (view parent)
DKIM signature
pass
Download raw message
Hi Jackson,

Jackson <jackson@jacksonchen666.com> writes:

> On 2024-02-21 00:13, Arsen Arsenović wrote:
>> As there are no per-repo keys or anything of the sort, this'd require an
>> alternate account with a key added, and with write access to the
>> git.sr.ht repo in question, AFAICT.
> I just checked and it is possible to give read-only access to git repos.
>
>> Is there a better solution?
> I can't think of anything other than the workaround of using an alt account
> with read-only repo access, with the accompanying SSH key for that alt account.

I've done so for now at least.  Didn't think to use RO access, thanks
for the tip!

Have a lovely night.
-- 
Arsen Arsenović
Reply to thread Export thread (mbox)