[ci] Move to private runner instead of SSH

  IMAGE_NAME: sc07/canvas:edge

publish:

  image: docker

  stage: publish

  tags:

    - docker-in-docker

  services:

    - docker:dind

    - red

  before_script:

    - echo $PAT | docker login $REGISTRY -u $GITLAB_USER_LOGIN --password-stdin

  script:

    - docker push $REGISTRY/$IMAGE_NAME

deploy:

  image: ubuntu:latest

  stage: deploy

  tags:

    - red

  only:

    - main

  before_script:

    ##

    ## Install ssh-agent if not already installed, it is required by Docker.

    ## (change apt-get to yum if you use an RPM-based image)

    ##

    - "command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )"

    ##

    ## Run ssh-agent (inside the build environment)

    ##

    - eval $(ssh-agent -s)

    ##

    ## Give the right permissions, otherwise ssh-add will refuse to add files

    ## Add the SSH key stored in SSH_PRIVATE_KEY file type CI/CD variable to the agent store

    ##

    - chmod 400 "$SSH_PRIVATE_KEY"

    - ssh-add "$SSH_PRIVATE_KEY"

    ##

    ## Create the SSH directory and give it the right permissions

    ##

    - mkdir -p ~/.ssh

    - chmod 700 ~/.ssh

    - ssh-keyscan -H $SSH_HOST > ~/.ssh/known_hosts

  script:

    - ssh $SSH_USER@$SSH_HOST "cd $WORK_DIR && docker compose pull && docker compose up -d && exit"

  after_script:

    - rm -rf ~/.ssh

    - cd $WORK_DIR

    - docker compose pull

    - docker compose up -d