From 138a9644be1e1eb338fa6912173fcf52d18c4316 Mon Sep 17 00:00:00 2001
From: Mandel Olaiya <mandeleolaiya15@icloud.com>
Date: Tue, 31 Mar 2026 01:13:58 +0200
Subject: [PATCH] Use git credential for pinned template engine install

---
 Jenkinsfile | 57 ++++++++++++++++++++++++++++-------------------------
 1 file changed, 30 insertions(+), 27 deletions(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index 5750d7b..4813ac5 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -34,34 +34,37 @@ pipeline {
         }
         stage('Build') {
             steps {
-                sh '''
-                    if command -v sudo >/dev/null 2>&1 && sudo -n true >/dev/null 2>&1; then
-                        sudo apt-get update -y
-                        sudo apt-get install -y python3-venv python3-pip make build-essential libpq-dev \
-                            libpango-1.0-0 libpangocairo-1.0-0 libcairo2 libgdk-pixbuf-2.0-0 libffi-dev shared-mime-info
-                    fi
-                    python3 -m venv .venv || {
-                        python3 -m pip --version >/dev/null 2>&1 || {
-                            curl -fsSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py
-                            python3 /tmp/get-pip.py --user
+                withCredentials([sshUserPrivateKey(credentialsId: 'gitea-ssh', keyFileVariable: 'GIT_KEYFILE')]) {
+                    sh '''
+                        export GIT_SSH_COMMAND="ssh -i $GIT_KEYFILE -o StrictHostKeyChecking=accept-new"
+                        if command -v sudo >/dev/null 2>&1 && sudo -n true >/dev/null 2>&1; then
+                            sudo apt-get update -y
+                            sudo apt-get install -y python3-venv python3-pip make build-essential libpq-dev \
+                                libpango-1.0-0 libpangocairo-1.0-0 libcairo2 libgdk-pixbuf-2.0-0 libffi-dev shared-mime-info
+                        fi
+                        python3 -m venv .venv || {
+                            python3 -m pip --version >/dev/null 2>&1 || {
+                                curl -fsSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py
+                                python3 /tmp/get-pip.py --user
+                            }
+                            python3 -m pip install --user virtualenv
+                            python3 -m virtualenv .venv
                         }
-                        python3 -m pip install --user virtualenv
-                        python3 -m virtualenv .venv
-                    }
-                    . .venv/bin/activate
-                    pip install coverage
-                    pip install --upgrade pip "setuptools==69.5.1" wheel
-                    PIP_INDEX_URL=${PIP_INDEX_URL:-https://pypi.mandelblog.com/mandel/testing/+simple/} \
-                    PIP_EXTRA_INDEX_URL=${PIP_EXTRA_INDEX_URL:-https://pypi.mandelblog.com/root/pypi/+simple/} \
-                    pip install --no-build-isolation --pre --editable . setuptools wheel --upgrade --upgrade-strategy=eager --use-deprecated=legacy-resolver
-                    cp "${JOB_BASE_NAME}/ocyan.json" "${JOB_BASE_NAME}/${JOB_BASE_NAME}.json"
-                    pip install ruff vdt.versionplugin.wheel
-                    pip install --upgrade "setuptools==69.5.1" wheel
-                    manage.py migrate --no-input --skip-checks
-                    manage.py loaddemodata || true
-                    manage.py collectstatic --no-input --verbosity=0
-                    pip install "httpx<0.28"
-                '''
+                        . .venv/bin/activate
+                        pip install coverage
+                        pip install --upgrade pip "setuptools==69.5.1" wheel
+                        PIP_INDEX_URL=${PIP_INDEX_URL:-https://pypi.mandelblog.com/mandel/testing/+simple/} \
+                        PIP_EXTRA_INDEX_URL=${PIP_EXTRA_INDEX_URL:-https://pypi.mandelblog.com/root/pypi/+simple/} \
+                        pip install --no-build-isolation --pre --editable . setuptools wheel --upgrade --upgrade-strategy=eager --use-deprecated=legacy-resolver
+                        cp "${JOB_BASE_NAME}/ocyan.json" "${JOB_BASE_NAME}/${JOB_BASE_NAME}.json"
+                        pip install ruff vdt.versionplugin.wheel
+                        pip install --upgrade "setuptools==69.5.1" wheel
+                        manage.py migrate --no-input --skip-checks
+                        manage.py loaddemodata || true
+                        manage.py collectstatic --no-input --verbosity=0
+                        pip install "httpx<0.28"
+                    '''
+                }
             }
         }
         stage('Lint') {