fix(ci): setup ssh key safely COMPASS-7621 (#5431)

fix(ci): setup ssh key safely
mongodb-js · Feb 9, 2024 · 3553e6c · 3553e6c
1 parent 1390ae2
commit 3553e6c
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 6 deletions.
diff --git a/.evergreen/functions.yml b/.evergreen/functions.yml
@@ -331,16 +331,16 @@ functions:
         wait: true
     # copy ssh key (this key will be used to connect to ssh server)
     - command: shell.exec
+      silent: true
       params:
+        working_dir: src
         shell: bash
+        env:
+          __project_aws_ssh_key_value: ${__project_aws_ssh_key_value}
         script: |
           set -e
-          {
-          set +x
-          echo '${__project_aws_ssh_key_value}' > ~/.ssh/mcipacker.pem
-          chmod 0600 ~/.ssh/mcipacker.pem
-          set -x
-          }
+          .evergreen/setup-ssh-key.sh
+
     # wait for host to be ready
     - command: shell.exec
       params:

diff --git a/.evergreen/setup-ssh-key.sh b/.evergreen/setup-ssh-key.sh
@@ -0,0 +1,6 @@
+#! /usr/bin/env bash
+
+set -e
+set +x
+echo "${__project_aws_ssh_key_value}" > ~/.ssh/mcipacker.pem
+chmod 0600 ~/.ssh/mcipacker.pem