From fc1dc0bc92bbecca7ede649f274c254a9a050125 Mon Sep 17 00:00:00 2001 From: "fairdm-bot[bot]" Date: Mon, 2 Nov 2026 17:41:35 +0100 Subject: [PATCH 1/2] Start the portal with a backup key in the image check FairDM 0.3 refuses to start in production without BACKUP_PUBLIC_KEY, so the image check failed for every portal on it. The check now makes a key for the run. --- .github/workflows/image.yml | 4 ++++ CHANGELOG.md | 5 +++++ 2 files changed, 9 insertions(+) diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml index 7db2bb1..483fdff 100644 --- a/.github/workflows/image.yml +++ b/.github/workflows/image.yml @@ -145,8 +145,12 @@ jobs: - name: Start the portal and wait for it to answer run: | secret_key=$(head -c 48 /dev/urandom | od -An -tx1 | tr -d ' \n') + # FairDM refuses to start in production without a backup key. This one lasts the run. + gpg --batch --passphrase '' --quick-generate-key portal-ci@example.invalid + backup_key=$(gpg --armor --export portal-ci@example.invalid) docker run -d --name portal --network host \ -e DJANGO_SECRET_KEY="$secret_key" \ + -e BACKUP_PUBLIC_KEY="$backup_key" \ -e DJANGO_SITE_DOMAIN=localhost \ -e POSTGRES_HOST=localhost -e POSTGRES_PORT=5432 \ -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=postgres -e POSTGRES_DB=portal \ diff --git a/CHANGELOG.md b/CHANGELOG.md index fea3920..16a6fe7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,11 @@ All notable changes to this repository are recorded here. The format follows ## [Unreleased] +### Fixed + +- The image workflow starts the portal with a backup key made for the run. FairDM 0.3 refuses to + start in production without `BACKUP_PUBLIC_KEY`, so every portal on it failed this check. + ## [v0.1.0] - 2026-10-19 ### Added From 11f7efb04d5b2e85fe031b487a1b5a506e209247 Mon Sep 17 00:00:00 2001 From: "fairdm-bot[bot]" Date: Mon, 2 Nov 2026 17:41:37 +0100 Subject: [PATCH 2/2] Hand the branch back to the bot