git-echo/linux_patch_manager
Private
Public Access
1
0
Fork 0
Code Releases 8 Wiki Activity

ci: Add explicit PATH export to every step for linux:host runner
Some checks failed
CI Pipeline / Clippy Lints (push) Failing after 0s
Details
CI Pipeline / Rust Format Check (push) Successful in 3s
Details
CI Pipeline / Rust Unit Tests (push) Failing after 0s
Details
CI Pipeline / Frontend Lint & Type Check (push) Failing after 0s
Details
CI Pipeline / Security Audit (push) Failing after 2s
Details
CI Pipeline / Build .deb & Release (push) Has been skipped
Details

Browse Source 
- The global env: PATH variable doesn't propagate to act_runner shell scripts
- Added export PATH=... at the start of every run: block
- Fixes 'apt-get: command not found' and 'curl: command not found' errors
- Removed global PATH from env: section (was ineffective)
This commit is contained in:
Echo
2026-04-24 15:55:11 +00:00
parent da4632f44e
commit 5fc0d65b16
1 changed files with 42 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
.gitea/workflows/ci.yml
View File

@ -10,7 +10,6 @@ on:
env: env:
CARGO_TERM_COLOR: always CARGO_TERM_COLOR: always
RUST_BACKTRACE: 1 RUST_BACKTRACE: 1
PATH: "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/home/echo/.cargo/bin"
jobs: jobs:
# ─── Quality Gates (run on every push/PR/tag) ─── # ─── Quality Gates (run on every push/PR/tag) ───
@ -21,12 +20,14 @@ jobs:
steps: steps:
- name: Install checkout dependencies - name: Install checkout dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends curl ca-certificates $SUDO apt-get install -y --no-install-recommends curl ca-certificates
- name: Checkout repository - name: Checkout repository
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}" TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}"
curl -sf -H "Authorization: token ${TOKEN}" \ curl -sf -H "Authorization: token ${TOKEN}" \
"http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \ "http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \
@ -36,6 +37,7 @@ jobs:
- name: Ensure Rust toolchain - name: Ensure Rust toolchain
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" 2>/dev/null || true . "$HOME/.cargo/env" 2>/dev/null || true
if ! command -v cargo &>/dev/null; then if ! command -v cargo &>/dev/null; then
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
@ -47,6 +49,7 @@ jobs:
- name: Check formatting - name: Check formatting
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" . "$HOME/.cargo/env"
cargo fmt --check --all 2>&1 cargo fmt --check --all 2>&1
@ -56,18 +59,21 @@ jobs:
steps: steps:
- name: Install checkout dependencies - name: Install checkout dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends curl ca-certificates $SUDO apt-get install -y --no-install-recommends curl ca-certificates
- name: Install system dependencies - name: Install system dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends pkg-config libssl-dev $SUDO apt-get install -y --no-install-recommends pkg-config libssl-dev
- name: Checkout repository - name: Checkout repository
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}" TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}"
curl -sf -H "Authorization: token ${TOKEN}" \ curl -sf -H "Authorization: token ${TOKEN}" \
"http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \ "http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \
@ -77,6 +83,7 @@ jobs:
- name: Ensure Rust toolchain - name: Ensure Rust toolchain
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" 2>/dev/null || true . "$HOME/.cargo/env" 2>/dev/null || true
if ! command -v cargo &>/dev/null; then if ! command -v cargo &>/dev/null; then
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
@ -87,6 +94,7 @@ jobs:
- name: Run Clippy - name: Run Clippy
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" . "$HOME/.cargo/env"
cargo clippy --all-targets --all-features 2>&1 cargo clippy --all-targets --all-features 2>&1
@ -96,18 +104,21 @@ jobs:
steps: steps:
- name: Install checkout dependencies - name: Install checkout dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends curl ca-certificates $SUDO apt-get install -y --no-install-recommends curl ca-certificates
- name: Install system dependencies - name: Install system dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends pkg-config libssl-dev $SUDO apt-get install -y --no-install-recommends pkg-config libssl-dev
- name: Checkout repository - name: Checkout repository
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}" TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}"
curl -sf -H "Authorization: token ${TOKEN}" \ curl -sf -H "Authorization: token ${TOKEN}" \
"http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \ "http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \
@ -117,6 +128,7 @@ jobs:
- name: Ensure Rust toolchain - name: Ensure Rust toolchain
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" 2>/dev/null || true . "$HOME/.cargo/env" 2>/dev/null || true
if ! command -v cargo &>/dev/null; then if ! command -v cargo &>/dev/null; then
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
@ -126,6 +138,7 @@ jobs:
- name: Run tests - name: Run tests
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" . "$HOME/.cargo/env"
cargo test --workspace --all-features 2>&1 cargo test --workspace --all-features 2>&1
@ -135,12 +148,14 @@ jobs:
steps: steps:
- name: Install checkout dependencies - name: Install checkout dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends curl ca-certificates $SUDO apt-get install -y --no-install-recommends curl ca-certificates
- name: Checkout repository - name: Checkout repository
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}" TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}"
curl -sf -H "Authorization: token ${TOKEN}" \ curl -sf -H "Authorization: token ${TOKEN}" \
"http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \ "http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \
@ -150,6 +165,7 @@ jobs:
- name: Ensure Rust toolchain - name: Ensure Rust toolchain
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" 2>/dev/null || true . "$HOME/.cargo/env" 2>/dev/null || true
if ! command -v cargo &>/dev/null; then if ! command -v cargo &>/dev/null; then
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
@ -159,11 +175,13 @@ jobs:
- name: Install cargo-audit - name: Install cargo-audit
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" . "$HOME/.cargo/env"
cargo install cargo-audit 2>&1 cargo install cargo-audit 2>&1
- name: Run security audit - name: Run security audit
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" . "$HOME/.cargo/env"
cargo audit 2>&1 cargo audit 2>&1
@ -173,12 +191,14 @@ jobs:
steps: steps:
- name: Install checkout dependencies - name: Install checkout dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends curl ca-certificates $SUDO apt-get install -y --no-install-recommends curl ca-certificates
- name: Checkout repository - name: Checkout repository
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}" TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}"
curl -sf -H "Authorization: token ${TOKEN}" \ curl -sf -H "Authorization: token ${TOKEN}" \
"http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \ "http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \
@ -188,15 +208,21 @@ jobs:
- name: Install Node.js dependencies - name: Install Node.js dependencies
working-directory: frontend working-directory: frontend
run: npm ci run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
npm ci
- name: Run ESLint - name: Run ESLint
working-directory: frontend working-directory: frontend
run: npx eslint src/ --ext .ts,.tsx --max-warnings 0 2>&1 run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
npx eslint src/ --ext .ts,.tsx --max-warnings 0 2>&1
- name: TypeScript type check - name: TypeScript type check
working-directory: frontend working-directory: frontend
run: npx tsc --noEmit 2>&1 run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
npx tsc --noEmit 2>&1
# ─── Build & Release (only on tag pushes, gated by quality checks) ─── # ─── Build & Release (only on tag pushes, gated by quality checks) ───
@ -208,6 +234,7 @@ jobs:
steps: steps:
- name: Install system dependencies - name: Install system dependencies
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo" SUDO=""; [ "$(id -u)" -ne 0 ] && SUDO="sudo"
$SUDO apt-get update -qq $SUDO apt-get update -qq
$SUDO apt-get install -y --no-install-recommends \ $SUDO apt-get install -y --no-install-recommends \
@ -216,6 +243,7 @@ jobs:
- name: Checkout repository - name: Checkout repository
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}" TOKEN="${GITHUB_TOKEN:-$GITEA_TOKEN}"
curl -sf -H "Authorization: token ${TOKEN}" \ curl -sf -H "Authorization: token ${TOKEN}" \
"http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \ "http://192.168.2.189:3000/api/v1/repos/${GITHUB_REPOSITORY}/archive/${GITHUB_SHA}.tar.gz" \
@ -225,6 +253,7 @@ jobs:
- name: Ensure Rust toolchain - name: Ensure Rust toolchain
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" 2>/dev/null || true . "$HOME/.cargo/env" 2>/dev/null || true
if ! command -v cargo &>/dev/null; then if ! command -v cargo &>/dev/null; then
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
@ -234,41 +263,50 @@ jobs:
- name: Build Rust backend (release) - name: Build Rust backend (release)
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" . "$HOME/.cargo/env"
cargo build --release 2>&1 cargo build --release 2>&1
- name: Run Rust tests - name: Run Rust tests
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env" . "$HOME/.cargo/env"
cargo test --workspace --all-features 2>&1 cargo test --workspace --all-features 2>&1
- name: Strip binaries - name: Strip binaries
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
strip target/release/pm-web target/release/pm-worker strip target/release/pm-web target/release/pm-worker
- name: Build frontend - name: Build frontend
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
cd frontend && npm ci && npm run build cd frontend && npm ci && npm run build
- name: Determine version - name: Determine version
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
VERSION=$(grep '^version' Cargo.toml | head -1 | sed 's/.*=.*"\(.*\)"/\1/') VERSION=$(grep '^version' Cargo.toml | head -1 | sed 's/.*=.*"\(.*\)"/\1/')
echo "VERSION=${VERSION}" >> "$GITHUB_ENV" echo "VERSION=${VERSION}" >> "$GITHUB_ENV"
echo "Building version: ${VERSION}" echo "Building version: ${VERSION}"
- name: Assemble .deb package - name: Assemble .deb package
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
chmod +x scripts/build-package.sh chmod +x scripts/build-package.sh
scripts/build-package.sh scripts/build-package.sh
- name: Verify package - name: Verify package
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
ls -la target/package/*.deb ls -la target/package/*.deb
dpkg-deb -I target/package/linux-patch-manager_*.deb dpkg-deb -I target/package/linux-patch-manager_*.deb
- name: Create Gitea Release (tags only) - name: Create Gitea Release (tags only)
if: startsWith(github.ref, 'refs/tags/v') if: startsWith(github.ref, 'refs/tags/v')
run: | run: |
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$HOME/.cargo/bin:$PATH"
. "$HOME/.cargo/env"
VERSION=$(grep '^version' Cargo.toml | head -1 | sed 's/.*=.*"\(.*\)"/\1/') VERSION=$(grep '^version' Cargo.toml | head -1 | sed 's/.*=.*"\(.*\)"/\1/')
REPO="${GITHUB_REPOSITORY:-echo/linux_patch_manager}" REPO="${GITHUB_REPOSITORY:-echo/linux_patch_manager}"
REF_NAME="${GITHUB_REF_NAME:-v${VERSION}}" REF_NAME="${GITHUB_REF_NAME:-v${VERSION}}"