简化为纯 Golang Linux 二进制构建工作流
- 移除复杂的部署逻辑和 Docker 支持 - 专注于构建 Linux AMD64 二进制文件 - 自动生成 SHA256 校验和 - 支持 GitHub Release 自动上传 - 提供简洁的构建摘要
This commit is contained in:
parent
5d18c7bb7d
commit
0d57e7eae3
349
.github/workflows/deploy-linux.yml
vendored
349
.github/workflows/deploy-linux.yml
vendored
@ -1,20 +1,10 @@
|
|||||||
name: Build and Deploy Linux Binary
|
name: Build Linux Binary
|
||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches: [ main, master ]
|
branches: [ main, master ]
|
||||||
workflow_dispatch:
|
workflow_dispatch:
|
||||||
inputs:
|
inputs:
|
||||||
mode:
|
|
||||||
description: 'Operation mode'
|
|
||||||
required: true
|
|
||||||
default: 'build-only'
|
|
||||||
type: choice
|
|
||||||
options:
|
|
||||||
- build-only
|
|
||||||
- deploy-staging
|
|
||||||
- deploy-production
|
|
||||||
- build-and-deploy
|
|
||||||
version:
|
version:
|
||||||
description: 'Version to build (leave empty for auto)'
|
description: 'Version to build (leave empty for auto)'
|
||||||
required: false
|
required: false
|
||||||
@ -24,10 +14,6 @@ on:
|
|||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
contents: write
|
contents: write
|
||||||
packages: write
|
|
||||||
|
|
||||||
env:
|
|
||||||
BINARY_NAME: ppanel-server
|
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
build:
|
build:
|
||||||
@ -37,7 +23,6 @@ jobs:
|
|||||||
outputs:
|
outputs:
|
||||||
version: ${{ steps.version.outputs.version }}
|
version: ${{ steps.version.outputs.version }}
|
||||||
binary_name: ${{ steps.build.outputs.binary_name }}
|
binary_name: ${{ steps.build.outputs.binary_name }}
|
||||||
checksum: ${{ steps.checksum.outputs.checksum }}
|
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
@ -73,7 +58,7 @@ jobs:
|
|||||||
GOOS: linux
|
GOOS: linux
|
||||||
GOARCH: amd64
|
GOARCH: amd64
|
||||||
run: |
|
run: |
|
||||||
BINARY_NAME_WITH_VERSION="${{ env.BINARY_NAME }}-${{ env.VERSION }}-linux-amd64"
|
BINARY_NAME_WITH_VERSION="ppanel-server-${{ env.VERSION }}-linux-amd64"
|
||||||
echo "binary_name=$BINARY_NAME_WITH_VERSION" >> $GITHUB_OUTPUT
|
echo "binary_name=$BINARY_NAME_WITH_VERSION" >> $GITHUB_OUTPUT
|
||||||
|
|
||||||
go build \
|
go build \
|
||||||
@ -85,90 +70,19 @@ jobs:
|
|||||||
./ppanel.go
|
./ppanel.go
|
||||||
|
|
||||||
- name: Generate checksum
|
- name: Generate checksum
|
||||||
id: checksum
|
|
||||||
run: |
|
run: |
|
||||||
CHECKSUM=$(sha256sum "${{ steps.build.outputs.binary_name }}" | awk '{print $1}')
|
sha256sum "${{ steps.build.outputs.binary_name }}" > checksum.txt
|
||||||
echo "checksum=$CHECKSUM" >> $GITHUB_OUTPUT
|
echo "Checksum: $(cat checksum.txt)"
|
||||||
echo "$CHECKSUM ${{ steps.build.outputs.binary_name }}" > checksum.txt
|
|
||||||
|
|
||||||
- name: Upload build artifacts
|
- name: Upload build artifacts
|
||||||
uses: actions/upload-artifact@v4
|
uses: actions/upload-artifact@v4
|
||||||
with:
|
with:
|
||||||
name: linux-binary
|
name: ppanel-server-linux-amd64
|
||||||
path: |
|
path: |
|
||||||
${{ steps.build.outputs.binary_name }}
|
${{ steps.build.outputs.binary_name }}
|
||||||
checksum.txt
|
checksum.txt
|
||||||
retention-days: 30
|
retention-days: 30
|
||||||
|
|
||||||
- name: Create deployment package
|
|
||||||
run: |
|
|
||||||
mkdir -p deploy-package
|
|
||||||
cp "${{ steps.build.outputs.binary_name }}" deploy-package/ppanel-server
|
|
||||||
cp checksum.txt deploy-package/
|
|
||||||
cp -r etc deploy-package/ 2>/dev/null || echo "etc directory not found, skipping"
|
|
||||||
|
|
||||||
# Create deployment script
|
|
||||||
cat > deploy-package/deploy.sh << 'EOF'
|
|
||||||
#!/bin/bash
|
|
||||||
set -e
|
|
||||||
|
|
||||||
BINARY_NAME="ppanel-server"
|
|
||||||
DEPLOY_PATH="/opt/ppanel"
|
|
||||||
CONFIG_PATH="/app/etc/ppanel.yaml"
|
|
||||||
SERVICE_NAME="ppanel-server"
|
|
||||||
|
|
||||||
# Create directories
|
|
||||||
sudo mkdir -p $DEPLOY_PATH /app/etc /opt/ppanel/logs
|
|
||||||
|
|
||||||
# Install binary
|
|
||||||
sudo cp $BINARY_NAME $DEPLOY_PATH/ppanel-server
|
|
||||||
sudo chmod +x $DEPLOY_PATH/ppanel-server
|
|
||||||
|
|
||||||
# Copy config if needed
|
|
||||||
if [ -d "etc" ] && [ ! -f "/app/etc/ppanel.yaml" ]; then
|
|
||||||
sudo cp -r etc/* /app/etc/
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Create systemd service
|
|
||||||
sudo tee /etc/systemd/system/$SERVICE_NAME.service > /dev/null << 'SERVICE_EOF'
|
|
||||||
[Unit]
|
|
||||||
Description=PPanel Server
|
|
||||||
After=network.target
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=simple
|
|
||||||
User=root
|
|
||||||
WorkingDirectory=$DEPLOY_PATH
|
|
||||||
ExecStart=$DEPLOY_PATH/ppanel-server run --config $CONFIG_PATH
|
|
||||||
Restart=always
|
|
||||||
RestartSec=5
|
|
||||||
StandardOutput=journal
|
|
||||||
StandardError=journal
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
SERVICE_EOF
|
|
||||||
|
|
||||||
# Reload and start service
|
|
||||||
sudo systemctl daemon-reload
|
|
||||||
sudo systemctl enable $SERVICE_NAME
|
|
||||||
sudo systemctl restart $SERVICE_NAME
|
|
||||||
|
|
||||||
echo "✅ Deployment completed!"
|
|
||||||
echo "📊 Service status: sudo systemctl status $SERVICE_NAME"
|
|
||||||
echo "📝 Logs: sudo journalctl -u $SERVICE_NAME -f"
|
|
||||||
EOF
|
|
||||||
|
|
||||||
chmod +x deploy-package/deploy.sh
|
|
||||||
tar -czf "${{ steps.build.outputs.binary_name }}-deploy.tar.gz" deploy-package/
|
|
||||||
|
|
||||||
- name: Upload deployment package
|
|
||||||
uses: actions/upload-artifact@v4
|
|
||||||
with:
|
|
||||||
name: deploy-package
|
|
||||||
path: "${{ steps.build.outputs.binary_name }}-deploy.tar.gz"
|
|
||||||
retention-days: 30
|
|
||||||
|
|
||||||
- name: Upload to GitHub Release (if release)
|
- name: Upload to GitHub Release (if release)
|
||||||
if: github.event_name == 'release'
|
if: github.event_name == 'release'
|
||||||
env:
|
env:
|
||||||
@ -184,254 +98,13 @@ jobs:
|
|||||||
echo "" >> $GITHUB_STEP_SUMMARY
|
echo "" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "**Binary:** ${{ steps.build.outputs.binary_name }}" >> $GITHUB_STEP_SUMMARY
|
echo "**Binary:** ${{ steps.build.outputs.binary_name }}" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "**Version:** ${{ env.VERSION }}" >> $GITHUB_STEP_SUMMARY
|
echo "**Version:** ${{ env.VERSION }}" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "**Checksum:** \`${{ steps.checksum.outputs.checksum }}\`" >> $GITHUB_STEP_SUMMARY
|
|
||||||
echo "**Size:** $(du -h ${{ steps.build.outputs.binary_name }} | cut -f1)" >> $GITHUB_STEP_SUMMARY
|
echo "**Size:** $(du -h ${{ steps.build.outputs.binary_name }} | cut -f1)" >> $GITHUB_STEP_SUMMARY
|
||||||
|
echo "**Checksum:** $(cat checksum.txt)" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "" >> $GITHUB_STEP_SUMMARY
|
echo "" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "### 📥 Download" >> $GITHUB_STEP_SUMMARY
|
echo "### 📥 Download" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "- **Binary only**: Actions → Artifacts → \`linux-binary\`" >> $GITHUB_STEP_SUMMARY
|
echo "Go to Actions → Artifacts → \`ppanel-server-linux-amd64\` to download" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "- **Deploy package**: Actions → Artifacts → \`deploy-package\`" >> $GITHUB_STEP_SUMMARY
|
|
||||||
echo "" >> $GITHUB_STEP_SUMMARY
|
echo "" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "### 🚀 Next Steps" >> $GITHUB_STEP_SUMMARY
|
echo "### 🚀 Usage" >> $GITHUB_STEP_SUMMARY
|
||||||
if [ "${{ github.event.inputs.mode }}" = "build-only" ] || [ "${{ github.event_name }}" = "push" ]; then
|
echo "1. Download the binary" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "1. Download the binary from Artifacts" >> $GITHUB_STEP_SUMMARY
|
echo "2. Extract from tar.gz" >> $GITHUB_STEP_SUMMARY
|
||||||
echo "2. Deploy manually to your server" >> $GITHUB_STEP_SUMMARY
|
echo "3. Run: chmod +x ppanel-server-* && ./ppanel-server-* run --config etc/ppanel.yaml" >> $GITHUB_STEP_SUMMARY
|
||||||
else
|
|
||||||
echo "1. Configure server secrets in repository settings" >> $GITHUB_STEP_SUMMARY
|
|
||||||
echo "2. The deployment will start automatically" >> $GITHUB_STEP_SUMMARY
|
|
||||||
fi
|
|
||||||
|
|
||||||
deploy-staging:
|
|
||||||
name: Deploy to Staging
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
needs: build
|
|
||||||
if: (github.event.inputs.mode == 'deploy-staging' || github.event.inputs.mode == 'build-and-deploy') && secrets.STAGING_HOST != ''
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- name: Download build artifacts
|
|
||||||
uses: actions/download-artifact@v4
|
|
||||||
with:
|
|
||||||
name: linux-binary
|
|
||||||
|
|
||||||
- name: Validate staging configuration
|
|
||||||
run: |
|
|
||||||
echo "✅ Checking staging configuration..."
|
|
||||||
if [ -z "${{ secrets.STAGING_HOST }}" ]; then
|
|
||||||
echo "❌ STAGING_HOST is not configured"
|
|
||||||
echo "Please set STAGING_HOST in repository secrets"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
if [ -z "${{ secrets.STAGING_USER }}" ]; then
|
|
||||||
echo "❌ STAGING_USER is not configured"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
if [ -z "${{ secrets.STAGING_SSH_KEY }}" ]; then
|
|
||||||
echo "❌ STAGING_SSH_KEY is not configured"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
echo "✅ Staging configuration validated"
|
|
||||||
|
|
||||||
- name: Deploy to staging server
|
|
||||||
uses: appleboy/ssh-action@v1.0.3
|
|
||||||
env:
|
|
||||||
BINARY_NAME: ${{ needs.build.outputs.binary_name }}
|
|
||||||
VERSION: ${{ needs.build.outputs.version }}
|
|
||||||
CHECKSUM: ${{ needs.build.outputs.checksum }}
|
|
||||||
with:
|
|
||||||
host: ${{ secrets.STAGING_HOST }}
|
|
||||||
username: ${{ secrets.STAGING_USER }}
|
|
||||||
key: ${{ secrets.STAGING_SSH_KEY }}
|
|
||||||
port: ${{ secrets.STAGING_PORT || 22 }}
|
|
||||||
timeout: 300s
|
|
||||||
script: |
|
|
||||||
set -e
|
|
||||||
BINARY="${BINARY_NAME}"
|
|
||||||
DEPLOY_PATH="/opt/ppanel"
|
|
||||||
SERVICE_NAME="ppanel-server"
|
|
||||||
|
|
||||||
echo "🚀 Deploying $BINARY to staging..."
|
|
||||||
|
|
||||||
# Create directories
|
|
||||||
sudo mkdir -p $DEPLOY_PATH /app/etc /opt/ppanel/{backups,logs}
|
|
||||||
|
|
||||||
# Backup current binary
|
|
||||||
if [ -f "$DEPLOY_PATH/ppanel-server" ]; then
|
|
||||||
sudo cp "$DEPLOY_PATH/ppanel-server" "/opt/ppanel/backups/ppanel-server-$(date +%Y%m%d_%H%M%S)"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Install new binary
|
|
||||||
chmod +x $BINARY
|
|
||||||
sudo mv $BINARY $DEPLOY_PATH/ppanel-server
|
|
||||||
|
|
||||||
# Create systemd service
|
|
||||||
sudo tee /etc/systemd/system/$SERVICE_NAME.service > /dev/null << 'EOF'
|
|
||||||
[Unit]
|
|
||||||
Description=PPanel Server
|
|
||||||
After=network.target
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=simple
|
|
||||||
User=root
|
|
||||||
WorkingDirectory=$DEPLOY_PATH
|
|
||||||
ExecStart=$DEPLOY_PATH/ppanel-server run --config /app/etc/ppanel.yaml
|
|
||||||
Restart=always
|
|
||||||
RestartSec=5
|
|
||||||
StandardOutput=journal
|
|
||||||
StandardError=journal
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
EOF
|
|
||||||
|
|
||||||
# Restart service
|
|
||||||
sudo systemctl daemon-reload
|
|
||||||
sudo systemctl enable $SERVICE_NAME
|
|
||||||
sudo systemctl restart $SERVICE_NAME
|
|
||||||
|
|
||||||
# Check status
|
|
||||||
sleep 5
|
|
||||||
if sudo systemctl is-active --quiet $SERVICE_NAME; then
|
|
||||||
echo "✅ Staging deployment successful!"
|
|
||||||
else
|
|
||||||
echo "❌ Service failed to start"
|
|
||||||
sudo journalctl -u $SERVICE_NAME --no-pager -n 20
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
deploy-production:
|
|
||||||
name: Deploy to Production
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
needs: build
|
|
||||||
if: (github.event.inputs.mode == 'deploy-production' || github.event.inputs.mode == 'build-and-deploy' || github.event_name == 'release') && secrets.PRODUCTION_HOST != ''
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- name: Download build artifacts
|
|
||||||
uses: actions/download-artifact@v4
|
|
||||||
with:
|
|
||||||
name: linux-binary
|
|
||||||
|
|
||||||
- name: Validate production configuration
|
|
||||||
run: |
|
|
||||||
echo "✅ Checking production configuration..."
|
|
||||||
if [ -z "${{ secrets.PRODUCTION_HOST }}" ]; then
|
|
||||||
echo "❌ PRODUCTION_HOST is not configured"
|
|
||||||
echo "Please set PRODUCTION_HOST in repository secrets"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
if [ -z "${{ secrets.PRODUCTION_USER }}" ]; then
|
|
||||||
echo "❌ PRODUCTION_USER is not configured"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
if [ -z "${{ secrets.PRODUCTION_SSH_KEY }}" ]; then
|
|
||||||
echo "❌ PRODUCTION_SSH_KEY is not configured"
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
echo "✅ Production configuration validated"
|
|
||||||
|
|
||||||
- name: Deploy to production server
|
|
||||||
uses: appleboy/ssh-action@v1.0.3
|
|
||||||
env:
|
|
||||||
BINARY_NAME: ${{ needs.build.outputs.binary_name }}
|
|
||||||
VERSION: ${{ needs.build.outputs.version }}
|
|
||||||
CHECKSUM: ${{ needs.build.outputs.checksum }}
|
|
||||||
with:
|
|
||||||
host: ${{ secrets.PRODUCTION_HOST }}
|
|
||||||
username: ${{ secrets.PRODUCTION_USER }}
|
|
||||||
key: ${{ secrets.PRODUCTION_SSH_KEY }}
|
|
||||||
port: ${{ secrets.PRODUCTION_PORT || 22 }}
|
|
||||||
timeout: 300s
|
|
||||||
script: |
|
|
||||||
set -e
|
|
||||||
BINARY="${BINARY_NAME}"
|
|
||||||
DEPLOY_PATH="/opt/ppanel"
|
|
||||||
SERVICE_NAME="ppanel-server"
|
|
||||||
|
|
||||||
echo "🚀 Deploying $BINARY to production..."
|
|
||||||
|
|
||||||
# Create directories
|
|
||||||
sudo mkdir -p $DEPLOY_PATH /app/etc /opt/ppanel/{backups,logs}
|
|
||||||
|
|
||||||
# Backup current binary
|
|
||||||
if [ -f "$DEPLOY_PATH/ppanel-server" ]; then
|
|
||||||
sudo cp "$DEPLOY_PATH/ppanel-server" "/opt/ppanel/backups/ppanel-server-$(date +%Y%m%d_%H%M%S)"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Install new binary
|
|
||||||
chmod +x $BINARY
|
|
||||||
sudo mv $BINARY $DEPLOY_PATH/ppanel-server
|
|
||||||
|
|
||||||
# Create/update systemd service
|
|
||||||
sudo tee /etc/systemd/system/$SERVICE_NAME.service > /dev/null << 'EOF'
|
|
||||||
[Unit]
|
|
||||||
Description=PPanel Server
|
|
||||||
After=network.target
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
Type=simple
|
|
||||||
User=root
|
|
||||||
WorkingDirectory=$DEPLOY_PATH
|
|
||||||
ExecStart=$DEPLOY_PATH/ppanel-server run --config /app/etc/ppanel.yaml
|
|
||||||
Restart=always
|
|
||||||
RestartSec=5
|
|
||||||
StandardOutput=journal
|
|
||||||
StandardError=journal
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
WantedBy=multi-user.target
|
|
||||||
EOF
|
|
||||||
|
|
||||||
# Restart service
|
|
||||||
sudo systemctl daemon-reload
|
|
||||||
sudo systemctl enable $SERVICE_NAME
|
|
||||||
sudo systemctl restart $SERVICE_NAME
|
|
||||||
|
|
||||||
# Wait for service to be ready
|
|
||||||
sleep 10
|
|
||||||
if sudo systemctl is-active --quiet $SERVICE_NAME; then
|
|
||||||
echo "✅ Production deployment successful!"
|
|
||||||
echo "📊 Service status:"
|
|
||||||
sudo systemctl status $SERVICE_NAME --no-pager
|
|
||||||
else
|
|
||||||
echo "❌ Production deployment failed!"
|
|
||||||
echo "🔄 Attempting rollback..."
|
|
||||||
LATEST_BACKUP=$(ls -t /opt/ppanel/backups/ppanel-server-* 2>/dev/null | head -1)
|
|
||||||
if [ -n "$LATEST_BACKUP" ]; then
|
|
||||||
sudo cp "$LATEST_BACKUP" "$DEPLOY_PATH/ppanel-server"
|
|
||||||
sudo systemctl restart $SERVICE_NAME
|
|
||||||
echo "✅ Rollback completed"
|
|
||||||
fi
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
docker:
|
|
||||||
name: Build Docker Image
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
needs: build
|
|
||||||
if: secrets.DOCKER_USERNAME != '' && secrets.DOCKER_PASSWORD != '' && (github.event_name == 'release' || github.event.inputs.mode == 'build-and-deploy')
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- name: Checkout repository
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: Set up Docker Buildx
|
|
||||||
uses: docker/setup-buildx-action@v3
|
|
||||||
|
|
||||||
- name: Log in to Docker Hub
|
|
||||||
uses: docker/login-action@v3
|
|
||||||
with:
|
|
||||||
username: ${{ secrets.DOCKER_USERNAME }}
|
|
||||||
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
||||||
|
|
||||||
- name: Build and push Docker image
|
|
||||||
uses: docker/build-push-action@v6
|
|
||||||
with:
|
|
||||||
context: .
|
|
||||||
platforms: linux/amd64
|
|
||||||
push: true
|
|
||||||
tags: |
|
|
||||||
${{ secrets.DOCKER_USERNAME }}/ppanel-server:${{ needs.build.outputs.version }}
|
|
||||||
${{ secrets.DOCKER_USERNAME }}/ppanel-server:latest
|
|
||||||
build-args: |
|
|
||||||
VERSION=${{ needs.build.outputs.version }}
|
|
||||||
labels: |
|
|
||||||
org.opencontainers.image.version=${{ needs.build.outputs.version }}
|
|
||||||
org.opencontainers.image.revision=${{ github.sha }}
|
|
||||||
Loading…
x
Reference in New Issue
Block a user