Fix CI git authentication #9

New Issue

roysc · 2023-07-20T02:15:06Z

roysc commented

2023-07-20 02:15:06 +00:00

Integration tests are failing due a problem with the basic auth headers.
See https://git.vdb.to/cerc-io/plugeth-statediff/actions/runs/72/jobs/1

::group::Setting up auth
[command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
[command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :
[command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/git\.vdb\.to\/\.extraheader
[command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'http\.https\:\/\/git\.vdb\.to\/\.extraheader' && git config --local --unset-all 'http.https://git.vdb.to/.extraheader' || :
[command]/usr/bin/git config --local http.https://git.vdb.to/.extraheader AUTHORIZATION: basic ***
::endgroup::
::group::Fetching the repository
[command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --progress --no-recurse-submodules --depth=1 origin +refs/heads/main*:refs/remotes/origin/main* +refs/tags/main*:refs/tags/main*
remote: User permission denied
fatal: unable to access 'https://git.vdb.to/cerc-io/system-tests/': The requested URL returned error: 403
The process '/usr/bin/git' failed with exit code 128

Integration tests are failing due a problem with the basic auth headers. See https://git.vdb.to/cerc-io/plugeth-statediff/actions/runs/72/jobs/1 ``` ::group::Setting up auth [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || : [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/git\.vdb\.to\/\.extraheader [command]/usr/bin/git submodule foreach --recursive git config --local --name-only --get-regexp 'http\.https\:\/\/git\.vdb\.to\/\.extraheader' && git config --local --unset-all 'http.https://git.vdb.to/.extraheader' || : [command]/usr/bin/git config --local http.https://git.vdb.to/.extraheader AUTHORIZATION: basic *** ::endgroup:: ::group::Fetching the repository [command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --progress --no-recurse-submodules --depth=1 origin +refs/heads/main*:refs/remotes/origin/main* +refs/tags/main*:refs/tags/main* remote: User permission denied fatal: unable to access 'https://git.vdb.to/cerc-io/system-tests/': The requested URL returned error: 403 The process '/usr/bin/git' failed with exit code 128 ```

dboreham commented

2023-07-20 02:32:32 +00:00

This may be the same problem as with go fetch accessing a repo on the same gitea -- the git token issued to a CI job is only valid for the host repo. To clone another repo on the same gitea will need a similar solution to the one we used for go recently.

telackey commented

2023-07-20 02:38:45 +00:00

I think all you need to do is add the token to the appropriate actions/checkout step:

      - name: "Clone system-tests"
        uses: actions/checkout@v3
        with:
          repository: cerc-io/system-tests
          ref: main
          path: ./system-tests
          token: ${{ secrets.CICD_REPO_TOKEN }}

I think all you need to do is add the `token` to the appropriate `actions/checkout` step: ``` - name: "Clone system-tests" uses: actions/checkout@v3 with: repository: cerc-io/system-tests ref: main path: ./system-tests token: ${{ secrets.CICD_REPO_TOKEN }} ```

roysc commented

2023-07-20 02:42:07 +00:00

I think all you need to do is add the token to the appropriate actions/checkout step:

      - name: "Clone system-tests"
        uses: actions/checkout@v3
        with:
          repository: cerc-io/system-tests
          ref: main
          path: ./system-tests
          token: ${{ secrets.CICD_REPO_TOKEN }}

Yep trying this now

> I think all you need to do is add the `token` to the appropriate `actions/checkout` step: > > ``` > - name: "Clone system-tests" > uses: actions/checkout@v3 > with: > repository: cerc-io/system-tests > ref: main > path: ./system-tests > token: ${{ secrets.CICD_REPO_TOKEN }} > ``` Yep trying this now

roysc referenced this issue

2023-07-20 02:48:58 +00:00

Fix CI workflow & update ipld-eth-db #10

roysc commented

2023-07-20 02:57:40 +00:00

Ah, this is because system-tests is a private repo (checking out cerc-io/plugeth and stack-orchestrator succeeds in the same job, which threw me off).

Ah, this is because `system-tests` is a private repo (checking out `cerc-io/plugeth` and stack-orchestrator succeeds in the same job, which threw me off).

roysc referenced this issue from a commit

2023-09-05 02:59:02 +00:00

Fix CI workflow & update ipld-eth-db (#10)

roysc commented

2023-09-28 00:04:39 +00:00

Fixed in #10

roysc closed this issue

2023-09-28 00:04:39 +00:00

Sign in to join this conversation.