We want to be able to safely gather any artifacts without worrying about any possible secrets leaking. Every artifacts that we want to upload will now have to be placed in /tmp/artifacts which will then be uploaded to S3 by the executor and link to the artifacts will be provided in the logs. Only people with access to our AWS account can see them.
7 lines
234 B
Bash
Executable file
7 lines
234 B
Bash
Executable file
#!/bin/bash
|
|
|
|
# use tee, otherwise shellcheck complains
|
|
sudo journalctl --boot | tee journal-log >/dev/null
|
|
|
|
# copy journal to artifacts folder which is then uploaded to secure S3 location
|
|
cp journal-log "${ARTIFACTS:-/tmp/artifacts}"
|