Refactor CVMFS deployment workflow steps

Author: atsareg

.github/workflows/cvmfs.yml

@@ -7,34 +7,39 @@ jobs:
   deploy_CVMFS:
     runs-on: "ubuntu-latest"
     steps:
-
-    # 1️⃣ Checkout your repository
     - name: Checkout repo
       uses: actions/checkout@v3
 
-    # 2️⃣ Install system dependencies
-    - name: Install system packages
+    # 1️⃣ Create Conda environment with Grid packages
+    - name: Create Conda environment
       run: |
-        sudo apt-get update
-        sudo apt-get install -y \
-          fetch-crl \
+        curl -sSL https://repo.anaconda.com/miniconda/Miniconda3-latest-Linux-x86_64.sh -o miniconda.sh
+        bash miniconda.sh -b -p $HOME/miniconda
+        export PATH="$HOME/miniconda/bin:$PATH"
+        conda init bash
+        eval "$(conda shell.bash hook)"
+        conda create -y -c conda-forge -n cvmfs-env \
           ca-policy-lcg \
-          grid-proxy-utils \
           gct \
           gsissh \
-          ssh-client \
-          openssl \
-          curl \
-          wget
+          openssl=3.0.7 \
+          voms-proxy-init
 
-    # 3️⃣ Set up grid trust anchors and fetch CRLs
-    - name: Update CRLs
+    # 2️⃣ Activate Conda environment and set CA path
+    - name: Setup Grid environment
       run: |
-        export X509_CERT_DIR=/etc/grid-security/certificates
-        sudo fetch-crl -v
+        eval "$(conda shell.bash hook)"
+        conda activate cvmfs-env
+        export X509_CERT_DIR=$CONDA_PREFIX/etc/grid-security/certificates
+
+        # Fetch CRLs
+        fetch-crl -v
+
+        # Debug
         ls -l $X509_CERT_DIR | head
+        grid-proxy-info -all || true
 
-    # 4️⃣ Decode the proxy and set environment
+    # 3️⃣ Decode the proxy and set environment
     - name: Set X509 Proxy
       env:
         CVMFS_PROXY_BASE64: ${{ secrets.CVMFS_PROXY_BASE64 }}
@@ -44,14 +49,14 @@ jobs:
         export X509_USER_PROXY=$PWD/cvmfs.proxy
         grid-proxy-info -all
 
-    # 5️⃣ Prepare SSH known_hosts
-    - name: SSH Known Hosts
+    # 4️⃣ Prepare SSH known_hosts
+    - name: SSH known_hosts
       run: |
         mkdir -p ~/.ssh
         ssh-keyscan -p 1975 cvmfs-uploader-egi.gridpp.rl.ac.uk >> ~/.ssh/known_hosts
         chmod 644 ~/.ssh/known_hosts
 
-    # 6️⃣ Run CVMFS deployment via gsissh
+    # 5️⃣ Run CVMFS deployment via gsissh
     - name: Deploy via gsissh
       run: |
         gsissh -vvv -p 1975 -t cvmfs-uploader-egi.gridpp.rl.ac.uk \