128 lines
4.7 KiB
YAML
128 lines
4.7 KiB
YAML
name: site-dist-deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- develop
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
- develop
|
|
|
|
|
|
env:
|
|
VITE_APP_BASE_URL: https://h.hifast.biz
|
|
SSH_HOST: ${{ vars.PRO_SSH_HOST }}
|
|
SSH_PORT: ${{ vars.PRO_SSH_PORT }}
|
|
SSH_USER: ${{ vars.PRO_SSH_USER }}
|
|
SSH_PASSWORD: ${{ vars.PRO_SSH_PASSWORD }}
|
|
DEPLOY_PATH: /var/www/down
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: landing-hero-web01
|
|
steps:
|
|
- name: Manual checkout (no Node required)
|
|
run: |
|
|
set -e
|
|
if git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
|
|
git fetch --all --tags
|
|
git checkout "${{ github.ref_name }}"
|
|
git reset --hard "origin/${{ github.ref_name }}"
|
|
else
|
|
REPO_URL="${{ github.server_url }}/${{ github.repository }}"
|
|
echo "Cloning $REPO_URL"
|
|
git clone --depth=1 --branch "${{ github.ref_name }}" "$REPO_URL" .
|
|
git fetch --tags
|
|
fi
|
|
|
|
- name: Build dist with Unified Script
|
|
env:
|
|
VITE_APP_BASE_URL: "https://h.hifast.biz"
|
|
run: |
|
|
chmod +x scripts/ci-build.sh
|
|
./scripts/ci-build.sh
|
|
|
|
- name: Prepare target directory
|
|
uses: appleboy/ssh-action@v1.0.3
|
|
with:
|
|
host: ${{ env.SSH_HOST }}
|
|
username: ${{ env.SSH_USER }}
|
|
password: ${{ env.SSH_PASSWORD }}
|
|
port: ${{ env.SSH_PORT }}
|
|
timeout: 300s
|
|
script: |
|
|
mkdir -p ${{ env.DEPLOY_PATH }}
|
|
rm -rf ${{ env.DEPLOY_PATH }}/*
|
|
mkdir -p /tmp/ci-upload
|
|
|
|
- name: Check Artifacts
|
|
run: |
|
|
echo "Current directory: $(pwd)"
|
|
echo "Listing all files in workspace:"
|
|
find . -maxdepth 2 -not -path '*/.*'
|
|
if [ -f "site_dist.tgz" ]; then
|
|
echo "✅ File exists: site_dist.tgz"
|
|
ls -lh site_dist.tgz
|
|
echo "File path: $(readlink -f site_dist.tgz)"
|
|
else
|
|
echo "❌ File NOT found: site_dist.tgz"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Deploy to Host (Native SSH/SCP)
|
|
run: |
|
|
echo "Installing SSH tools..."
|
|
if command -v apk &> /dev/null; then
|
|
echo "Detected Alpine Linux. Installing sshpass openssh-client via apk..."
|
|
apk add --no-cache sshpass openssh-client
|
|
elif command -v apt-get &> /dev/null; then
|
|
echo "Detected Debian/Ubuntu. Installing sshpass openssh-client via apt..."
|
|
apt-get update -y && apt-get install -y sshpass openssh-client
|
|
elif command -v yum &> /dev/null; then
|
|
echo "Detected RHEL/CentOS. Installing sshpass openssh-clients via yum..."
|
|
yum install -y sshpass openssh-clients
|
|
elif command -v dnf &> /dev/null; then
|
|
echo "Detected Fedora/RHEL8+. Installing sshpass openssh-clients via dnf..."
|
|
dnf install -y sshpass openssh-clients
|
|
elif command -v zypper &> /dev/null; then
|
|
echo "Detected OpenSUSE. Installing sshpass openssh via zypper..."
|
|
zypper install -y sshpass openssh
|
|
else
|
|
echo "Error: No known package manager found. Cannot install sshpass."
|
|
exit 1
|
|
fi
|
|
|
|
echo "Uploading artifact..."
|
|
# 使用 sshpass 传递密码 (更安全的方式是使用 key，但此处沿用 password)
|
|
export SSHPASS="${{ env.SSH_PASSWORD }}"
|
|
|
|
# 1. 检查连接并创建目录
|
|
sshpass -e ssh -o StrictHostKeyChecking=no -p ${{ env.SSH_PORT }} ${{ env.SSH_USER }}@${{ env.SSH_HOST }} "mkdir -p /tmp/ci-upload"
|
|
|
|
# 2. SCP 上传 (直接使用当前目录下的 site_dist.tgz，规避跨容器挂载问题)
|
|
if [ ! -f "site_dist.tgz" ]; then
|
|
echo "❌ Error: site_dist.tgz not found in current directory!"
|
|
exit 1
|
|
fi
|
|
|
|
sshpass -e scp -o StrictHostKeyChecking=no -P ${{ env.SSH_PORT }} site_dist.tgz ${{ env.SSH_USER }}@${{ env.SSH_HOST }}:/tmp/ci-upload/site_dist.tgz
|
|
|
|
# 3. 解压并重启 Nginx
|
|
echo "Deploying on remote host..."
|
|
sshpass -e ssh -o StrictHostKeyChecking=no -p ${{ env.SSH_PORT }} ${{ env.SSH_USER }}@${{ env.SSH_HOST }} "
|
|
echo 'Extracting to /var/www/down...'
|
|
mkdir -p /var/www/down
|
|
# 解压覆盖
|
|
tar -xzf /tmp/ci-upload/site_dist.tgz -C /var/www/down
|
|
|
|
echo 'Reloading Nginx...'
|
|
# 尝试多种 reload 方式
|
|
nginx -s reload || systemctl reload nginx || echo 'Warning: Nginx reload returned non-zero'
|
|
|
|
echo 'Cleanup...'
|
|
rm -f /tmp/ci-upload/site_dist.tgz
|
|
"
|
|
echo "✅ Deployment complete!"
|