fix(ci): use verified Jenkins SSH key path for deploy stage

Reviewed-on: http://gitea.lan:3000/robbond/pleskSaas/pulls/54

Jenkinsfile

@@ -85,53 +85,68 @@ pipeline {
 
 stage('Deploy') {
   steps {
-    withCredentials([sshUserPrivateKey(
-      credentialsId: "${env.DEPLOY_SSH_CREDENTIAL_ID}",
-      keyFileVariable: 'SSH_KEY'
-    )]) {
     sh '''
-bash -eo pipefail <<EOF
-set -euo pipefail
+bash <<EOF
+set -euxo pipefail
 
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" "mkdir -p $DEPLOY_PATH/scripts"
+SSH_KEY="/var/lib/jenkins/.ssh/plesk_agency_deploy"
+SSH_USER="deploy"
+SSH_OPTS="-i ${SSH_KEY} -o BatchMode=yes -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"
 
-rsync -az \
-  -e "ssh -i $SSH_KEY" \
-  docker-compose.prod.yml \
-  "$APP_USER@$APP_HOST:$DEPLOY_PATH/"
+echo "SSH user from configured deploy key: ${SSH_USER}"
+echo "SSH key file path: ${SSH_KEY}"
+ls -l "${SSH_KEY}"
+ssh-keygen -y -f "${SSH_KEY}"
 
-rsync -az \
-  -e "ssh -i $SSH_KEY" \
-  scripts/ \
-  "$APP_USER@$APP_HOST:$DEPLOY_PATH/scripts/"
+echo "Testing remote SSH connectivity"
+ssh ${SSH_OPTS} "${SSH_USER}@${APP_HOST}" "whoami && hostname && pwd"
 
 echo "Deploying image tag: ${IMAGE_BUILD}"
+docker image inspect "${IMAGE_BUILD}" --format='{{.Id}} {{.RepoTags}}'
+
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" "mkdir -p $DEPLOY_PATH/scripts"
+
+rsync -az \
+  -e "ssh ${SSH_OPTS}" \
+  docker-compose.prod.yml \
+  "$SSH_USER@$APP_HOST:$DEPLOY_PATH/"
+
+rsync -az \
+  -e "ssh ${SSH_OPTS}" \
+  scripts/ \
+  "$SSH_USER@$APP_HOST:$DEPLOY_PATH/scripts/"
 
 IMAGE_TAR="plesk-agency-portal-build.tar"
 echo "Creating image archive: ${IMAGE_TAR}"
 docker save -o "${IMAGE_TAR}" "${IMAGE_BUILD}"
 ls -lh "${IMAGE_TAR}"
+sha256sum "${IMAGE_TAR}"
 
 echo "Copying image archive to remote host via scp"
-scp -i "$SSH_KEY" "${IMAGE_TAR}" "$APP_USER@$APP_HOST:$DEPLOY_PATH/"
+scp ${SSH_OPTS} "${IMAGE_TAR}" "$SSH_USER@$APP_HOST:$DEPLOY_PATH/"
 
 echo "Verifying image archive exists on remote host"
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" "ls -lh $DEPLOY_PATH/plesk-agency-portal-build.tar"
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" "ls -lh $DEPLOY_PATH/plesk-agency-portal-build.tar"
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" "sha256sum $DEPLOY_PATH/plesk-agency-portal-build.tar"
 
 echo "Loading image archive on remote host"
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" "docker load -i $DEPLOY_PATH/plesk-agency-portal-build.tar"
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" "docker load -i $DEPLOY_PATH/plesk-agency-portal-build.tar"
 
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" "docker images | grep plesk-agency-portal || true"
+echo "Verifying exact image tag is available on remote host"
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" "docker image inspect ${IMAGE_BUILD} --format='{{.Id}} {{.RepoTags}}'"
 
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" \
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" \
   "cd $DEPLOY_PATH && chmod +x ./scripts/deploy-prod.sh ./scripts/smoke-check.sh ./scripts/rollback-prod.sh"
 
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" \
+echo "Running remote deploy script with exact image tag"
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" \
   "cd $DEPLOY_PATH && APP_IMAGE='${IMAGE_BUILD}' ./scripts/deploy-prod.sh"
+
+echo "Printing final running container image metadata"
+ssh ${SSH_OPTS} "$SSH_USER@$APP_HOST" "docker inspect plesk-agency-portal --format='{{.Image}} {{.Created}}'"
 EOF
     '''
   }
-  }
 }
 
     stage('Smoke check') {