Skip to content

ci(deploy): retry the :22 smoke test instead of failing on the first probe - #137

Merged
ralyodio merged 1 commit into
mainfrom
ci/deploy-smoke-retry
Oct 1, 2026
Merged

ralyodio merged 1 commit into
mainfrom
ci/deploy-smoke-retry

Conversation

@ralyodio

@ralyodio ralyodio commented Oct 1, 2026

Copy link
Copy Markdown
Contributor

The deploy job's ":22 smoke test" has failed on 4 of the last 5 deploys while agentbbs was fine. The redeploy step restarts agentbbs, and the smoke test runs immediately after: on the #136 deploy it probed 0.3 s after the restart, before :22 was re-bound.

Change: probe up to 12 times, 10 s apart (about 2 minutes), pass on the first answer, fail only if :22 never comes back. It still uses ssh-keyscan only, so it never completes a handshake and never registers an account.

Tested: ran the step's script locally. Against bbs.profullstack.com it passes on attempt 1; against an unroutable address it retries and then fails as before.

🤖 Generated with Claude Code

The redeploy restarts agentbbs, and the smoke test could run before it had
re-bound :22 (0.3 s after on the #136 deploy). One probe made most deploys go
red while the BBS answered moments later. Probe up to 12 times, 10 s apart,
and fail only if :22 never answers. Still a keyscan only, so no account is
ever registered.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

10 finding(s)

HIGH/CRITICAL: 7 | LOW: 3

Severity Rule Location
HIGH secret-generic-credential deploy/ergo/ircd.yaml:162
HIGH secret-generic-credential deploy/ergo/ircd.yaml:221
HIGH secret-generic-credential deploy/ergo/ircd.yaml:638
HIGH secret-generic-credential deploy/ergo/ircd.yaml:787
HIGH secret-database-url deploy/ergo/ircd.yaml:893
HIGH secret-generic-credential deploy/ergo/ircd.yaml:1025
HIGH secret-generic-credential deploy/ergo/ircd.yaml:1033
LOW secret-generic-credential deploy/ergo/ircd.yaml:772
LOW tls-verification-disabled internal/mail/mail.go:109
LOW secret-generic-credential internal/mailu/mailu_test.go:44

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit eccfe67 into main Oct 1, 2026
6 checks passed
@ralyodio
ralyodio deleted the ci/deploy-smoke-retry branch October 1, 2026 10:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant