Warning! The list of commands run in a builds.sr.ht job, as well as their stdout and stderr, are visible to the public — even if the job uses a private repository. Take care not to leak any secrets this way.

builds.sr.ht can use private repos on git.sr.ht and elsewhere, but you have to configure each job with an SSH key that has access to your account.

  1. Generate an SSH key (without a passphrase)
  2. Add the public key to your account
  3. Add the private key as a secret using the secrets management page
  4. Copy the secret's UUID into your build manifest's secrets list.
  5. Update your sources list to use the SSH clone URL — not the https clone URL.

The resulting build manifest should look something like this:

image: # ...
- c043e12e-a297-4ece-b09c-bb5a99dc4094
- git@git.sr.ht:~yourname/your-private-repo

About this wiki

commit 616473467c929dd567ebba0a2f04a77c7608cd31
Author: Drew DeVault <sir@cmpwn.com>
Date:   2021-09-21T14:49:10+02:00

paste.sr.ht: drop webhooks
Clone this wiki
https://git.sr.ht/~sircmpwn/sr.ht-docs (read-only)
git@git.sr.ht:~sircmpwn/sr.ht-docs (read/write)