From 8a14b9edafd6936fb43914d3daebbdccc8ffe7ec Mon Sep 17 00:00:00 2001
From: bast <bast@bast.li>
Date: Sat, 31 Oct 2026 01:28:20 +0000
Subject: [PATCH] .github/workflows/deploy.yml aktualisiert

---
 .github/workflows/deploy.yml | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index caf0ca1..3a02a99 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -8,17 +8,21 @@ on:
 jobs:
   test-and-deploy:
     runs-on: ubuntu-latest
-    # HIER: Wir wechseln auf das offizielle, öffentliche HashiCorp-Image!
-    container: hashicorp/terraform:1.7.0
+    # HIER: Das offizielle, voll ausgestattete Image der Pipeline-Macher
+    container: catthehacker/ubuntu:act-latest
     steps:
+      - name: Install Terraform
+        run: |
+          apt-get update && apt-get install -y wget gpg lsb-release
+          wget -O- https://hashicorp.com | gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
+          echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://hashicorp.com $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/hashicorp.list
+          apt-get update && apt-get install -y terraform
+
       - name: Checkout Code
         uses: actions/checkout@v4
 
-      # Da dieses Image rein für Terraform ist, führen wir deine Befehle direkt über die Shell aus
       - name: Log in to Local Registry
-        run: |
-          apk add --no-cache docker-cli
-          echo "${{ secrets.GITHUB_TOKEN }}" | docker login forgejo:3000 -u ${{ github.actor }} --password-stdin
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login forgejo:3000 -u ${{ github.actor }} --password-stdin
 
       - name: Inject Version into Dockerfile
         run: sed -i "s/{{APP_VERSION}}/${{ github.sha }}/g" Dockerfile
@@ -40,7 +44,6 @@ jobs:
 
       - name: Verify App Health
         run: |
-          apk add --no-cache curl
           echo "Warte auf das Ingress-Routing..."
           sleep 15
           curl --fail --connect-timeout 5 http://local-k3s-platform:80/ || exit 1