From 0bfef139ee67feebb8d5cd7c7e512fa297858b52 Mon Sep 17 00:00:00 2001
From: cy <cy@cy7.sh>
Date: Mon, 14 Apr 2025 14:04:53 -0400
Subject: [PATCH] workflow: use runner.temp variable

---
 .github/workflows/build-machines-and-homes.yml | 12 ++++++------
 .github/workflows/build-packages.yml           |  6 +++---
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build-machines-and-homes.yml b/.github/workflows/build-machines-and-homes.yml
index 8280aea..c817c38 100644
--- a/.github/workflows/build-machines-and-homes.yml
+++ b/.github/workflows/build-machines-and-homes.yml
@@ -35,7 +35,7 @@ jobs:
           build-mount-path: /nix
 
       - name: setup binary cache key
-        run: echo "${{ secrets.NIX_CACHE_SECRET_KEY }}" >> /home/runner/cache-priv-key.pem
+        run: echo "${{ secrets.NIX_CACHE_SECRET_KEY }}" > ${{ runner.temp }}/cache-priv-key.pem
 
       - name: Install Nix
         uses: cachix/install-nix-action@v30
@@ -46,7 +46,7 @@ jobs:
             experimental-features = nix-command flakes
             accept-flake-config = true
             system-features = nixos-test benchmark big-parallel kvm
-            secret-key-files = /home/runner/cache-priv-key.pem
+            secret-key-files = ${{ runner.temp }}/cache-priv-key.pem
             extra-substituters = https://nixcache.cy7.sh https://cache.lix.systems
             extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8= cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o=
 
@@ -76,7 +76,7 @@ jobs:
           nix run github:cything/nixcp/2025-04-12 -- \
             push \
             --bucket nixcache \
-            --signing-key /home/runner/cache-priv-key.pem \
+            --signing-key ${{ runner.temp }}/cache-priv-key.pem \
             --endpoint https://s3.cy7.sh \
             -u https://nix-community.cachix.org \
             $package
@@ -107,7 +107,7 @@ jobs:
           build-mount-path: /nix
 
       - name: setup binary cache key
-        run: echo "${{ secrets.NIX_CACHE_SECRET_KEY }}" >> /home/runner/cache-priv-key.pem
+        run: echo "${{ secrets.NIX_CACHE_SECRET_KEY }}" > ${{ runner.temp }}/cache-priv-key.pem
 
       - name: Install Nix
         uses: cachix/install-nix-action@v30
@@ -118,7 +118,7 @@ jobs:
             experimental-features = nix-command flakes
             accept-flake-config = true
             system-features = nixos-test benchmark big-parallel kvm
-            secret-key-files = /home/runner/cache-priv-key.pem
+            secret-key-files = ${{ runner.temp }}/cache-priv-key.pem
             extra-substituters = https://nixcache.cy7.sh https://cache.lix.systems
             extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8= cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o=
 
@@ -147,7 +147,7 @@ jobs:
           nix run github:cything/nixcp/2025-04-12 -- \
             push \
             --bucket nixcache \
-            --signing-key /home/runner/cache-priv-key.pem \
+            --signing-key ${{ runner.temp }}/cache-priv-key.pem \
             --endpoint https://s3.cy7.sh \
             -u https://nix-community.cachix.org \
             $package
diff --git a/.github/workflows/build-packages.yml b/.github/workflows/build-packages.yml
index 367c49c..d5d3b2f 100644
--- a/.github/workflows/build-packages.yml
+++ b/.github/workflows/build-packages.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: setup binary cache key
-        run: echo "${{ secrets.NIX_CACHE_SECRET_KEY }}" >> /home/runner/cache-priv-key.pem
+        run: echo "${{ secrets.NIX_CACHE_SECRET_KEY }}" > ${{ runner.temp }}/cache-priv-key.pem
 
       - name: Install Nix
         uses: cachix/install-nix-action@v30
@@ -39,7 +39,7 @@ jobs:
             experimental-features = nix-command flakes
             accept-flake-config = true
             system-features = nixos-test benchmark big-parallel kvm
-            secret-key-files = /home/runner/cache-priv-key.pem
+            secret-key-files = ${{ runner.temp }}/cache-priv-key.pem
             extra-substituters = https://nixcache.cy7.sh https://cache.lix.systems
             extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8= cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o=
 
@@ -64,7 +64,7 @@ jobs:
           nix run github:cything/nixcp/2025-04-12 -- \
             push \
             --bucket nixcache \
-            --signing-key /home/runner/cache-priv-key.pem \
+            --signing-key ${{ runner.temp }}/cache-priv-key.pem \
             --endpoint https://s3.cy7.sh \
             -u https://nix-community.cachix.org \
             "${{ matrix.package }}"