From 1897492a5da9fd6d017cdfaf22ce6bfeb9555441 Mon Sep 17 00:00:00 2001
From: Andrea Ciceri <andrea.ciceri@autistici.org>
Date: Fri, 16 May 2025 17:44:46 +0200
Subject: [PATCH] Allow CI to fetch private GitHub repos

---
 .forgejo/workflows/build.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.forgejo/workflows/build.yaml b/.forgejo/workflows/build.yaml
index ee456fc..cd5b626 100644
--- a/.forgejo/workflows/build.yaml
+++ b/.forgejo/workflows/build.yaml
@@ -9,6 +9,16 @@ jobs:
         name: Checkout repository
       - name: Attic login
         run: attic login nixfleet http://sisko.wg.aciceri.dev:8081 ${{secrets.ATTIC_NIXFLEET_TOKEN}}
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{secrets.FORGEJO_SSH_KEY}}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          ssh-keyscan github.com >> ~/.ssh/known_hosts
+          ssh-keyscan sisko.wg.aciceri.dev >> ~/.ssh/known_hosts
+          mkdir -p /home/ccr/.ssh
+          ln -s ~/.ssh/id_ed25519 /home/ccr/.ssh/id_rsa
+          ls -l /home/ccr/.ssh -l
       - name: Build with nix
         run: nix-fast-build --no-nom --systems "x86_64-linux aarch64-linux" --attic-cache "nixfleet" --skip-cached --result-file result.json || true
       - name: Report checks