Problems on self-hosted runner .. idea?

[robertklaus-bosch]

I am trying this action (v14, v16) on GitHub Enterprise (version 2.x) with a self-hosted runner (not under my control).

Problem is, that I never get this to work as the runner setup is different from the GitHub cloud runners.
When using stCarolas/setup-maven@v4 the settings are never found as the maven installation does not pick up the settings from the user home.
When I try to configre the settings with --settings I get a stacktrace as below.

Only thing I can think of is that maybe it helps if this action could (optionally) generate the settings.xml in a folder specified in the workflow. Maybe that would work.

Any ideas how to solve this?

[DEBUG] Message scheme: color
[DEBUG] Message styles: debug info warning error success failure strong mojo project
[DEBUG] Reading global settings from /home/<user>/actions-runner/_work/_tool/maven/3.8.1/x64/conf/settings.xml
[DEBUG] Reading user settings from /home/<user>/.m2/settings.xml
[DEBUG] Reading global toolchains from /home/<user>/actions-runner/_work/_tool/maven/3.8.1/x64/conf/toolchains.xml
[DEBUG] Reading user toolchains from /home/<user>/.m2/toolchains.xml
[DEBUG] Using local repository at /home/<user>/.m2/repository
[DEBUG] Using manager EnhancedLocalRepositoryManager with priority 10.0 for /home/<user>/.m2/repository
[DEBUG] Failed to decrypt password for server github: org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException: java.io.FileNotFoundException: /home/<user>/.m2/settings-security.xml (No such file or directory)

(Note replaced actual user with <user>)

[zteater]

@robertklaus-bosch sounds like you're using an encrypted password in your settings.xml, which requires settings-security.xml to decrypt. This action unfortunately only creates the settings.xml. See maven encryption for more information

However, I see 2 paths forward for you:

1. we could create a new action to generate a settings-security.xml, in a similar manner to this action, or
2. use GH secrets to inject a plain-text password into settings.xml

- name: maven-settings-xml-action
  uses: whelk-io/maven-settings-xml-action@v16
  with:
    repositories: |
      [
        { 
          "id": "some-repository", 
          "url": "http://some.repository.url" 
        }
      ]
    servers: |
      [
         { 
           "id": "github", 
           "username": ${{ secrets.MY_USERNAME }}, 
           "password": ${{ secrets.MY_PASSWORD }} 
         }
      ]

[zteater]

@robertklaus-bosch what do you think about this:

- uses: whelk-io/maven-settings-xml-action@v18
  with:
    output_file: foo/custom.xml

To generate the following file in the home directory: /home/runner/foo/custom.xml

Which can be referenced in your maven steps like this: mvn -s /home/runner/foo/custom.xml test

[robertklaus-bosch]

I like the output_file - I would just like to use GITHUB_WORKSPACE if possible, maybe like so:

- uses: whelk-io/maven-settings-xml-action@v18
  with:
    output_file:  ${{ env.GITHUB_WORKSPACE }}/foo/custom.xml

then using mvn -s ${{ env.GITHUB_WORKSPACE }}/foo/custom.xml

Makes sense?

[zteater]

ok, so the GH env variables were a bit trickey, but I got it worked out. I had to make sure node was resolving the env variables and we have to pass them slightly different:

    steps:
      - uses: actions/checkout@v2.3.4
      - uses: whelk-io/maven-settings-xml-action@v18
        with:
          output_file: $GITHUB_WORKSPACE/custom.xml
      - uses: actions/setup-java@v1.4.3
        with:
          java-version: 11
      - run: |
          ./mvnw -s $GITHUB_WORKSPACE/custom.xml clean test

[robertklaus-bosch]

Tested today with version/branch feature/custom-output-file-path and it worked 👍
($GITHUB_WORKSPACE/custom.xml and $GITHUB_WORKSPACE/foo/custom.xml)

[zteater]

Went ahead and published v18. Thank you for the feedback!