From 602a604b673be2796f3361bce0d4342942e0e827 Mon Sep 17 00:00:00 2001
From: CI Bot <ci-bot@xiaoxiajianji.com>
Date: Mon, 20 Jul 2026 12:58:42 +0800
Subject: [PATCH] =?UTF-8?q?fix(ci):=20P0-1=20preview=20deploy=E5=A2=9E?=
 =?UTF-8?q?=E5=8A=A0SSH=E5=AF=86=E9=92=A5=E5=AE=8C=E6=95=B4=E6=80=A7?=
 =?UTF-8?q?=E8=87=AA=E6=A3=80=EF=BC=8C=E6=8D=9F=E5=9D=8F=E6=97=B6=E6=98=8E?=
 =?UTF-8?q?=E7=A1=AE=E6=8A=A5=E9=94=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/preview-deploy.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.gitea/workflows/preview-deploy.yml b/.gitea/workflows/preview-deploy.yml
index e5ad2f0c0..22cd780ab 100755
--- a/.gitea/workflows/preview-deploy.yml
+++ b/.gitea/workflows/preview-deploy.yml
@@ -184,6 +184,16 @@ jobs:
           exit 1
         fi
 
+        # SSH密钥完整性自检
+        if ! ssh-keygen -y -f "$key_path" > /dev/null 2>&1; then
+          echo "ERROR: SSH密钥损坏（private key contents do not match public）"
+          echo "请检查 PREVIEW_SSH_KEY secret 中的私钥是否完整正确"
+          echo "私钥文件大小: $(wc -c < "$key_path") 字节"
+          head -2 "$key_path"
+          exit 1
+        fi
+        echo "SSH key integrity check passed"
+
         ssh-keyscan -p "$preview_port" -H "$preview_host" >> ~/.ssh/known_hosts 2>/dev/null
         echo "SSH keyscan done"
 
-- 
2.54.0