From 7859d9610bbd759b725363f78076ee0673fe4712 Mon Sep 17 00:00:00 2001
From: joshsiv-mulga <mrk@mulgadc.com>
Date: Thu, 14 May 2026 14:01:22 +1000
Subject: [PATCH] fix(ci): write bm-ci key to RUNNER_TEMP and derive .pub for
 bm-bootstrap

---
 .github/workflows/e2e-baremetal.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/e2e-baremetal.yml b/.github/workflows/e2e-baremetal.yml
index 8c2d380ad..abd88b1dc 100644
--- a/.github/workflows/e2e-baremetal.yml
+++ b/.github/workflows/e2e-baremetal.yml
@@ -44,9 +44,9 @@ jobs:
 
       - name: Install SSH Key
         run: |
-          install -m 0700 -d ~/.ssh
-          echo "${{ secrets.BM_SSH_PRIVATE_KEY }}" > ~/.ssh/bm-ci
-          chmod 0600 ~/.ssh/bm-ci
+          echo "${{ secrets.BM_SSH_PRIVATE_KEY }}" > "${RUNNER_TEMP}/bm-ci"
+          chmod 0600 "${RUNNER_TEMP}/bm-ci"
+          ssh-keygen -y -f "${RUNNER_TEMP}/bm-ci" > "${RUNNER_TEMP}/bm-ci.pub"
 
       - name: Build Artifacts
         run: |
@@ -82,7 +82,7 @@ jobs:
       - name: Run Bare-Metal E2E
         env:
           BM_CI_PASSWORD: ${{ secrets.BM_CI_PASSWORD }}
-          BM_SSH_KEY: /home/tf-user/.ssh/bm-ci
+          BM_SSH_KEY: ${{ runner.temp }}/bm-ci
           BM_EPDU_ENV: ${{ runner.temp }}/epdu.env
           SPX_EXTERNAL_POOL: ${{ env.SPINIFEX_CI_POOL }}
         run: |