Fix docs publish (#288)

Author: Jake-Shadle

.github/scripts/build-pages.rs

@@ -0,0 +1,67 @@
+use std::env::var;
+use std::fs;
+use std::io::{Read, Write};
+use std::os::unix::net::UnixStream;
+use std::os::unix::prelude::*;
+use std::process::{Command, Stdio};
+
+fn main() {
+    let slug = var("BUILD_REPOSITORY_ID").unwrap();
+    let key = var("GITHUB_DEPLOY_KEY").unwrap();
+
+    let socket = "/tmp/.github-deploy-socket";
+    run(Command::new("ssh-agent").arg("-a").arg(&socket));
+    while UnixStream::connect(&socket).is_err() {
+        std::thread::sleep(std::time::Duration::from_millis(5));
+    }
+
+    let mut decode = Command::new("base64")
+        .arg("-d")
+        .stdin(Stdio::piped())
+        .stdout(Stdio::piped())
+        .spawn()
+        .unwrap();
+    decode
+        .stdin
+        .take()
+        .unwrap()
+        .write_all(&key.as_bytes())
+        .unwrap();
+    let mut key = Vec::new();
+    decode.stdout.take().unwrap().read_to_end(&mut key).unwrap();
+    decode.wait().unwrap();
+
+    let path = "_the_key";
+    fs::write(&path, key).unwrap();
+    fs::set_permissions(&path, fs::Permissions::from_mode(0o600)).unwrap();
+    run(Command::new("ssh-add")
+        .arg(&path)
+        .env("SSH_AUTH_SOCK", &socket));
+    fs::remove_file(&path).unwrap();
+
+    let sha = var("BUILD_SOURCEVERSION").unwrap();
+    let msg = format!("Deploy {sha} to gh-pages");
+
+    drop(fs::remove_dir_all(".git"));
+    run(Command::new("git").arg("init"));
+    run(Command::new("git")
+        .arg("config")
+        .arg("user.name")
+        .arg("Deploy from CI"));
+    run(Command::new("git").arg("config").arg("user.email").arg(""));
+    run(Command::new("git").arg("add").arg("."));
+    run(Command::new("git").arg("commit").arg("-m").arg(&msg));
+    run(Command::new("git")
+        .arg("push")
+        .arg(format!("[email protected]:{}", slug))
+        .arg("master:gh-pages")
+        .env("GIT_SSH_COMMAND", "ssh -o StrictHostKeyChecking=no")
+        .env("SSH_AUTH_SOCK", &socket)
+        .arg("-f"));
+}
+
+fn run(cmd: &mut Command) {
+    println!("{cmd:?}");
+    let status = cmd.status().unwrap();
+    assert!(status.success());
+}

.github/workflows/rust-ci.yml

@@ -177,20 +177,19 @@ jobs:
     runs-on: ubuntu-22.04
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     steps:
+      - uses: actions/checkout@v4
       - name: Download book
         uses: actions/download-artifact@v4
         with:
           name: doc-book
-      - name: Assemble gh-pages
-        run: |
-          mv doc-book gh-pages
+          path: gh-pages
       # If this is a push to the main branch push to the `gh-pages` using a
       # deploy key. Note that a deploy key is necessary for now because otherwise
       # using the default token for github actions doesn't actually trigger a page
       # rebuild.
       - name: Push to gh-pages
         # Uses a rust script to setup and push to the gh-pages branch
-        run: curl -LsSf https://git.io/fhJ8n | rustc - && (cd gh-pages && ../rust_out)
+        run: rustc .github/scripts/build-pages.rs && (cd gh-pages && ../build-pages)
         env:
           GITHUB_DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
           BUILD_REPOSITORY_ID: ${{ github.repository }}