ci: use credentials of a service account for making new commits (#66)

Co-authored-by: @zimeg <[email protected]>

Author: theorderingmachine

.github/workflows/versioning.yml

@@ -21,6 +21,7 @@ jobs:
         run: |
           git config user.name '@theorderingmachine'
           git config user.email '[email protected]'
+          git remote set-url origin [email protected]:zimeg/.DOTFILES.git
       - name: Reflect existing Nix
         id: darwin
         continue-on-error: true

CHANGELOG.md

@@ -6,6 +6,7 @@ versioning is done in a continuous fashion without worries of breaking changes.
 
 ## patches
 
+- `ci`: use credentials of a service account for making new commits 2025-12-07
 - `ollama`: split the cuda configurations into separate compilation 2025-12-07
 - `ci`: include the fast fetch package alongside a runners packages 2025-12-07
 - `fastfetch`: print specs of the setup running the self hosted job 2025-12-07

machines/tim/configuration.nix

@@ -46,6 +46,10 @@
         owner = "_github-runner";
         group = "_github-runner";
       };
+      "github/ssh" = {
+        key = "ssh/private";
+        owner = "_github-runner";
+      };
       "ssh/public" = {
         owner = input.config.users.users.ez.name;
         path = "/Users/ez/.ssh/id_ed25519.pub";

machines/tim/programs/gh/default.nix

@@ -4,15 +4,15 @@
     hosts = {
       "github.com" = {
         git_protocol = "ssh";
-        user = "zimeg";
+        user = "theorderingmachine";
       };
     };
   };
   programs.git = {
     settings = {
       user = {
-        email = "[email protected]";
-        name = "@zimeg";
+        email = "[email protected]";
+        name = "@theorderingmachine";
       };
     };
   };

machines/tim/services/github-runners/default.nix

@@ -8,7 +8,11 @@
       extraLabels = [
         "tim"
       ];
+      extraEnvironment = {
+        GIT_SSH_COMMAND = "ssh -i /run/secrets/github/ssh -o StrictHostKeyChecking=accept-new";
+      };
       extraPackages = [
+        pkgs.openssh # https://github.com/openssh/openssh-portable
         pkgs.fastfetch # https://github.com/fastfetch-cli/fastfetch
       ];
       name = "tim";