name: CI on: push: branches: - main - dev - cicd pull_request: branches: - main - dev - cicd env: DOMAIN_URL: git.kxsw.us #*修改为你12 REPO: ${{ vars.REPO }} TELEGRAM_BOT_TOKEN: 8114337882:AAHkEx03HSu7RxN4IHBJJEnsK9aPPzNLIk0 TELEGRAM_CHAT_ID: "-4940243803" DOCKER_REGISTRY: registry.kxsw.us DOCKER_BUILDKIT: 1 # Host SSH SSH_HOST: ${{ vars.SSH_HOST }} SSH_PORT: ${{ vars.SSH_PORT }} SSH_USER: ${{ vars.SSH_USER }} SSH_PASSWORD: ${{ vars.SSH_PASSWORD }} jobs: build: runs-on: ppanel-web02 container: image: node:20 strategy: matrix: # 只有node支持版本号别名 node: ['20.15.1'] steps: - name: Checkout code uses: actions/checkout@v4 with: fetch-depth: 0 - name: 缓存服务健康检查 id: cache-health continue-on-error: true run: | echo "检查缓存服务可用性..." # 设置缓存可用性标志 CACHE_AVAILABLE=true # 测试GitHub Actions缓存API if ! curl -s --connect-timeout 10 --max-time 30 "https://api.github.com/repos/${{ github.repository }}/actions/caches" > /dev/null 2>&1; then echo "⚠️ GitHub Actions缓存服务不可用，将跳过缓存步骤" CACHE_AVAILABLE=false else echo "✅ 缓存服务可用" fi echo "CACHE_AVAILABLE=$CACHE_AVAILABLE" >> $GITHUB_ENV echo "cache-available=$CACHE_AVAILABLE" >> $GITHUB_OUTPUT - name: 缓存降级提示 if: env.CACHE_AVAILABLE == 'false' run: | echo "🔄 缓存服务不可用，构建将在无缓存模式下进行" echo "⏱️ 这可能会增加构建时间，但不会影响构建结果" echo "📦 所有依赖将重新下载和安装" - name: Install system tools (jq, docker, curl) run: | set -e export DEBIAN_FRONTEND=noninteractive echo "Waiting for apt/dpkg locks (unattended-upgrades) to release..." # Wait up to 300s for unattended-upgrades/apt/dpkg locks end=$((SECONDS+300)) while true; do LOCKS_BUSY=0 # If unattended-upgrades is running, mark busy if pgrep -x unattended-upgrades >/dev/null 2>&1; then LOCKS_BUSY=1; fi # If fuser exists, check common lock files if command -v fuser >/dev/null 2>&1; then if fuser /var/lib/dpkg/lock >/dev/null 2>&1 \ || fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1 \ || fuser /var/lib/apt/lists/lock >/dev/null 2>&1; then LOCKS_BUSY=1 fi fi # Break if not busy if [ "$LOCKS_BUSY" -eq 0 ]; then break; fi # Timeout after ~5 minutes if [ $SECONDS -ge $end ]; then echo "Timeout waiting for apt/dpkg locks, proceeding with Dpkg::Lock::Timeout..." break fi echo "Still waiting for locks..."; sleep 5 done apt-get update -y -o Dpkg::Lock::Timeout=600 apt-get install -y -o Dpkg::Lock::Timeout=600 jq curl ca-certificates docker.io docker --version jq --version curl --version - name: Set up Docker Buildx run: | # Check if buildx is available if docker buildx version >/dev/null 2>&1; then echo "Docker Buildx is available" # Create builder if it doesn't exist if ! docker buildx ls | grep -q "builder"; then docker buildx create --name builder --driver docker-container fi # Use the builder docker buildx use builder docker buildx inspect --bootstrap else echo "Docker Buildx not available, using regular docker build" fi - name: Install Bun run: | echo "=== Installing Bun ===" echo "Current working directory: $(pwd)" echo "Current user: $(whoami)" echo "Home directory: $HOME" # 设置Bun安装路径 export BUN_INSTALL="$HOME/.bun" echo "BUN_INSTALL=$BUN_INSTALL" >> $GITHUB_ENV echo "PATH=$BUN_INSTALL/bin:${PATH}" >> $GITHUB_ENV # 检查缓存是否存在 if [ -d "$BUN_INSTALL" ]; then echo "✅ Bun cache found at $BUN_INSTALL" ls -la "$BUN_INSTALL" || true else echo "❌ No Bun cache found, will install fresh" fi # 安装Bun curl -fsSL https://bun.sh/install | bash # 验证安装 "$BUN_INSTALL/bin/bun" --version echo "✅ Bun installed successfully" - name: Configure npm registry (npmmirror) and canvas mirror run: | echo "registry=https://registry.npmmirror.com" >> .npmrc echo "canvas_binary_host_mirror=https://registry.npmmirror.com/-/binary/canvas" >> .npmrc - name: Install dependencies cache (Bun) if: env.CACHE_AVAILABLE == 'true' uses: actions/cache@v4 continue-on-error: true with: path: ~/.bun key: bun-${{ runner.os }}-${{ matrix.node }}-${{ hashFiles('bun.lock') }} restore-keys: | bun-${{ runner.os }}-${{ matrix.node }}- bun-${{ runner.os }}- - name: Install dependencies cache (node_modules) if: env.CACHE_AVAILABLE == 'true' uses: actions/cache@v4 continue-on-error: true with: path: | node_modules apps/*/node_modules packages/*/node_modules key: node-modules-${{ runner.os }}-${{ matrix.node }}-${{ hashFiles('bun.lock', 'package.json', 'apps/*/package.json', 'packages/*/package.json') }} restore-keys: | node-modules-${{ runner.os }}-${{ matrix.node }}- node-modules-${{ runner.os }}- - name: 缓存状态检查和设置 run: | echo "=== 缓存状态检查 ===" echo "检查缓存恢复状态..." # 检查各种缓存目录 echo "Bun缓存: $([ -d ~/.bun ] && echo '✅ 已发现' || echo '❌ 缺失')" echo "node_modules: $([ -d node_modules ] && echo '✅ 已发现' || echo '❌ 缺失')" echo "Turbo缓存: $([ -d .turbo ] && echo '✅ 已发现' || echo '❌ 缺失')" # 显示缓存大小 if [ -d ~/.bun ]; then echo "Bun缓存大小: $(du -sh ~/.bun 2>/dev/null || echo '未知')" fi if [ -d node_modules ]; then echo "node_modules大小: $(du -sh node_modules 2>/dev/null || echo '未知')" fi if [ -d .turbo ]; then echo "Turbo缓存大小: $(du -sh .turbo 2>/dev/null || echo '未知')" fi echo "=== 缓存设置 ===" # 确保缓存目录存在且权限正确 mkdir -p ~/.bun ~/.cache .turbo chmod -R 755 ~/.bun ~/.cache .turbo 2>/dev/null || true # 设置Bun环境变量 echo "BUN_INSTALL_CACHE_DIR=$HOME/.cache/bun" >> $GITHUB_ENV echo "BUN_INSTALL_BIN_DIR=$HOME/.bun/bin" >> $GITHUB_ENV echo "✅ 缓存目录已准备完成" - name: Turborepo cache (.turbo) if: env.CACHE_AVAILABLE == 'true' uses: actions/cache@v4 continue-on-error: true with: path: .turbo key: turbo-${{ runner.os }}-${{ hashFiles('turbo.json') }}-${{ hashFiles('apps/**/package.json') }}-${{ hashFiles('packages/**/package.json') }}-${{ hashFiles('bun.lock') }} restore-keys: | turbo-${{ runner.os }}-${{ hashFiles('turbo.json') }}-${{ hashFiles('apps/**/package.json') }}-${{ hashFiles('packages/**/package.json') }}- turbo-${{ runner.os }}-${{ hashFiles('turbo.json') }}- turbo-${{ runner.os }}- - name: 安装依赖 (bun) run: | echo "=== 依赖安装调试信息 ===" echo "当前目录: $(pwd)" echo "Bun版本: $(bun --version)" # 检查node_modules缓存状态 if [ -d "node_modules" ]; then echo "✅ 发现node_modules缓存" echo "node_modules大小: $(du -sh node_modules 2>/dev/null || echo '未知')" else echo "❌ 未发现node_modules缓存" fi # 检查bun.lock文件 if [ -f "bun.lock" ]; then echo "✅ 发现bun.lock文件" else echo "❌ 未发现bun.lock文件" fi echo "=== 开始安装依赖 ===" echo "安装开始时间: $(date)" bun install --frozen-lockfile echo "安装完成时间: $(date)" echo "=== 依赖安装完成 ===" echo "最终node_modules大小: $(du -sh node_modules 2>/dev/null || echo '未知')" # 验证缓存效果 echo "=== 缓存效果验证 ===" if [ -d "node_modules" ]; then echo "✅ 依赖安装成功" echo "包数量: $(ls node_modules | wc -l 2>/dev/null || echo '未知')" else echo "⚠️ 依赖可能未完全安装" fi - name: Decide build target (admin/user/both) run: | set -e COMMIT_MSG="${{ github.event.head_commit.message }}" BUILD_TARGET="both" if echo "$COMMIT_MSG" | grep -qi "\[admin-only\]"; then BUILD_TARGET="admin" elif echo "$COMMIT_MSG" | grep -qi "\[user-only\]"; then BUILD_TARGET="user" else if git rev-parse HEAD^ >/dev/null 2>&1; then RANGE="HEAD^..HEAD" else RANGE="$(git rev-list --max-parents=0 HEAD)..HEAD" fi CHANGED=$(git diff --name-only $RANGE || true) ADMIN_MATCH=$(echo "$CHANGED" | grep -E '^(apps/admin/|docker/ppanel-admin-web/)' || true) USER_MATCH=$(echo "$CHANGED" | grep -E '^(apps/user/|docker/ppanel-user-web/)' || true) PACKAGE_MATCH=$(echo "$CHANGED" | grep -E '^(packages/|turbo.json|package.json|bun.lock)' || true) if [ -n "$PACKAGE_MATCH" ]; then BUILD_TARGET="both" else if [ -n "$ADMIN_MATCH" ] && [ -z "$USER_MATCH" ]; then BUILD_TARGET="admin"; fi if [ -n "$USER_MATCH" ] && [ -z "$ADMIN_MATCH" ]; then BUILD_TARGET="user"; fi if [ -n "$ADMIN_MATCH" ] && [ -n "$USER_MATCH" ]; then BUILD_TARGET="both"; fi fi fi echo "BUILD_TARGET=$BUILD_TARGET" >> $GITHUB_ENV echo "Decided BUILD_TARGET=$BUILD_TARGET" - name: Read version from package.json run: echo "VERSION=$(jq -r .version package.json)" >> $GITHUB_ENV - name: 根据分支动态设置API地址 run: | if [ "${{ github.ref_name }}" = "main" ]; then echo "NEXT_PUBLIC_API_URL=https://api.airoport.co" >> $GITHUB_ENV echo "为main分支设置生产环境API地址" elif [ "${{ github.ref_name }}" = "dev" ]; then echo "NEXT_PUBLIC_API_URL=https://api.kxsw.us" >> $GITHUB_ENV echo "为dev分支设置开发环境API地址" else echo "NEXT_PUBLIC_API_URL=https://api.airoport.co" >> $GITHUB_ENV echo "为其他分支设置默认API地址" fi echo "BRANCH=${{ github.ref_name }}" >> $GITHUB_ENV - name: Cache Next.js build artifacts (.next/cache) if: env.CACHE_AVAILABLE == 'true' uses: actions/cache@v4 continue-on-error: true with: path: | apps/admin/.next/cache apps/user/.next/cache key: nextcache-${{ runner.os }}-${{ hashFiles('apps/**/package.json') }}-${{ hashFiles('packages/**/package.json') }}-${{ hashFiles('turbo.json') }}-${{ hashFiles('bun.lock') }} restore-keys: | nextcache-${{ runner.os }}-${{ hashFiles('apps/**/package.json') }}-${{ hashFiles('packages/**/package.json') }}- nextcache-${{ runner.os }}- - name: Cache build outputs if: env.CACHE_AVAILABLE == 'true' uses: actions/cache@v4 continue-on-error: true with: path: | apps/admin/.next apps/user/.next apps/admin/dist apps/user/dist key: build-${{ runner.os }}-${{ hashFiles('apps/**/*.ts', 'apps/**/*.tsx', 'apps/**/*.js', 'apps/**/*.jsx') }}-${{ hashFiles('packages/**/*.ts', 'packages/**/*.tsx') }}-${{ hashFiles('bun.lock') }} restore-keys: | build-${{ runner.os }}-${{ hashFiles('apps/**/*.ts', 'apps/**/*.tsx', 'apps/**/*.js', 'apps/**/*.jsx') }}- build-${{ runner.os }}- - name: Cache ESLint if: env.CACHE_AVAILABLE == 'true' uses: actions/cache@v4 continue-on-error: true with: path: | .eslintcache apps/admin/.eslintcache apps/user/.eslintcache key: eslint-${{ runner.os }}-${{ hashFiles('.eslintrc*', 'apps/**/.eslintrc*', 'packages/**/.eslintrc*') }}-${{ hashFiles('bun.lock') }} restore-keys: | eslint-${{ runner.os }}- - name: Cache TypeScript if: env.CACHE_AVAILABLE == 'true' uses: actions/cache@v4 continue-on-error: true with: path: | .tsbuildinfo apps/admin/.tsbuildinfo apps/user/.tsbuildinfo packages/**/.tsbuildinfo key: typescript-${{ runner.os }}-${{ hashFiles('tsconfig*.json', 'apps/**/tsconfig*.json', 'packages/**/tsconfig*.json') }}-${{ hashFiles('bun.lock') }} restore-keys: | typescript-${{ runner.os }}- - name: 构建管理面板 if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'both' run: bun run build --filter=ppanel-admin-web - name: 构建用户面板 if: env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both' run: bun run build --filter=ppanel-user-web - name: 构建并推送管理面板Docker镜像 if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'both' run: | if docker buildx version >/dev/null 2>&1; then echo "使用docker buildx进行优化构建" docker buildx build \ --platform linux/amd64 \ --cache-from type=registry,ref=${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:cache \ --cache-to type=registry,ref=${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:cache,mode=max \ -f ./docker/ppanel-admin-web/Dockerfile \ -t ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }} \ --push . else echo "使用常规docker构建" docker build -f ./docker/ppanel-admin-web/Dockerfile -t ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }} . docker push ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }} fi - name: 构建并推送用户面板Docker镜像 if: env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both' run: | if docker buildx version >/dev/null 2>&1; then echo "使用docker buildx进行优化构建" docker buildx build \ --platform linux/amd64 \ --cache-from type=registry,ref=${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:cache \ --cache-to type=registry,ref=${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:cache,mode=max \ -f ./docker/ppanel-user-web/Dockerfile \ -t ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }} \ --push . else echo "使用常规docker构建" docker build -f ./docker/ppanel-user-web/Dockerfile -t ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }} . docker push ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }} fi - name: SSH连接预检查 if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both' uses: appleboy/ssh-action@v1.0.3 with: host: ${{ env.SSH_HOST }} username: ${{ env.SSH_USER }} password: ${{ env.SSH_PASSWORD }} port: ${{ env.SSH_PORT }} timeout: 300s command_timeout: 600s debug: true script: | echo "=== SSH连接测试 ===" echo "连接时间: $(date)" echo "服务器主机名: $(hostname)" echo "当前用户: $(whoami)" echo "系统信息: $(uname -a)" echo "Docker版本: $(docker --version 2>/dev/null || echo 'Docker未安装')" echo "✅ SSH连接成功" - name: 部署管理面板到服务器 if: env.BUILD_TARGET == 'admin' || env.BUILD_TARGET == 'both' uses: appleboy/ssh-action@v1.0.3 with: host: ${{ env.SSH_HOST }} username: ${{ env.SSH_USER }} password: ${{ env.SSH_PASSWORD }} port: ${{ env.SSH_PORT }} timeout: 300s command_timeout: 600s script: | echo "=== SSH变量调试信息 ===" echo "DOCKER_REGISTRY: ${{ env.DOCKER_REGISTRY }}" echo "VERSION: ${{ env.VERSION }}" echo "NEXT_PUBLIC_API_URL: ${{ env.NEXT_PUBLIC_API_URL }}" echo "BRANCH: ${{ env.BRANCH }}" echo "=== 部署管理面板 ===" # 网络连通性检查 echo "检查镜像服务器连通性..." REGISTRY_HOST=$(echo "${{ env.DOCKER_REGISTRY }}" | sed 's|https\?://||' | cut -d'/' -f1) echo "镜像仓库地址: $REGISTRY_HOST" if ping -c 3 "$REGISTRY_HOST" > /dev/null 2>&1; then echo "✅ 镜像服务器连通性正常" else echo "⚠️ 镜像服务器ping失败，但继续尝试拉取镜像" fi # 检查Docker登录状态 echo "检查Docker登录状态..." if docker info > /dev/null 2>&1; then echo "✅ Docker服务正常" else echo "❌ Docker服务异常" exit 1 fi # 拉取镜像（带重试） echo "拉取Docker镜像..." for i in {1..3}; do echo "尝试拉取镜像 ($i/3): ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }}" if docker pull ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }}; then echo "✅ 镜像拉取成功" break else echo "❌ 镜像拉取失败，重试 $i/3" echo "检查网络和镜像仓库状态..." # 显示详细错误信息 echo "--- 网络诊断信息 ---" echo "DNS解析测试:" nslookup "$REGISTRY_HOST" || echo "DNS解析失败" echo "网络连通性测试:" ping -c 2 "$REGISTRY_HOST" || echo "ping失败" echo "Docker镜像仓库连接测试:" curl -I "https://$REGISTRY_HOST/v2/" 2>/dev/null || echo "仓库API访问失败" sleep 5 if [ $i -eq 3 ]; then echo "❌ 镜像拉取失败，部署终止" echo "请检查:" echo "1. 网络连接是否正常" echo "2. 镜像仓库是否可访问" echo "3. 镜像标签是否存在" echo "4. Docker登录凭据是否正确" exit 1 fi fi done # 安全停止和移除容器 echo "检查现有容器状态..." CONTAINER_NAME="ppanel-admin-web" # 检查容器是否存在 if docker ps -aq -f name=$CONTAINER_NAME | grep -q .; then echo "发现现有容器，开始清理..." # 检查容器是否正在运行 if docker ps -q -f name=$CONTAINER_NAME | grep -q .; then echo "停止运行中的容器..." docker stop $CONTAINER_NAME --time=15 || true sleep 5 fi # 检查容器是否正在被移除 echo "检查容器移除状态..." for i in {1..15}; do # 尝试获取容器状态 CONTAINER_STATUS=$(docker inspect $CONTAINER_NAME --format='{{.State.Status}}' 2>/dev/null || echo "not_found") if [ "$CONTAINER_STATUS" = "not_found" ]; then echo "✅ 容器已不存在" break elif [ "$CONTAINER_STATUS" = "removing" ]; then echo "⏳ 容器正在移除中，等待完成... $i/15" sleep 3 else echo "尝试移除容器... $i/15" if docker rm -f $CONTAINER_NAME 2>/dev/null; then echo "✅ 容器移除成功" break else echo "⚠️ 容器移除失败，重试..." sleep 2 fi fi # 最后一次尝试强制清理 if [ $i -eq 15 ]; then echo "🔧 执行强制清理..." docker kill $CONTAINER_NAME 2>/dev/null || true sleep 2 docker rm -f $CONTAINER_NAME 2>/dev/null || true sleep 2 fi done else echo "✅ 未发现现有容器" fi echo "启动新容器..." docker run -d \ --name ppanel-admin-web \ --restart unless-stopped \ -p 3001:3000 \ -e NEXT_PUBLIC_API_URL=${{ env.NEXT_PUBLIC_API_URL }} \ ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-admin-web:${{ env.VERSION }} # 验证容器启动 echo "验证容器启动状态..." for i in {1..10}; do if docker ps -q -f name=ppanel-admin-web | grep -q .; then echo "✅ 管理面板部署成功" docker ps -f name=ppanel-admin-web --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}" exit 0 else echo "等待容器启动... $i/10" sleep 3 fi done echo "❌ 管理面板部署失败 - 容器未能正常启动" docker logs ppanel-admin-web || true exit 1 - name: 部署用户面板到服务器 if: env.BUILD_TARGET == 'user' || env.BUILD_TARGET == 'both' uses: appleboy/ssh-action@v1.0.3 with: host: ${{ env.SSH_HOST }} username: ${{ env.SSH_USER }} password: ${{ env.SSH_PASSWORD }} port: ${{ env.SSH_PORT }} timeout: 300s command_timeout: 600s debug: true script: | echo "=== SSH变量调试信息 ===" echo "DOCKER_REGISTRY: ${{ env.DOCKER_REGISTRY }}" echo "VERSION: ${{ env.VERSION }}" echo "NEXT_PUBLIC_API_URL: ${{ env.NEXT_PUBLIC_API_URL }}" echo "BRANCH: ${{ env.BRANCH }}" echo "=== 部署用户面板 ===" # 网络连通性检查 echo "检查镜像服务器连通性..." REGISTRY_HOST=$(echo "${{ env.DOCKER_REGISTRY }}" | sed 's|https\?://||' | cut -d'/' -f1) echo "镜像仓库地址: $REGISTRY_HOST" if ping -c 3 "$REGISTRY_HOST" > /dev/null 2>&1; then echo "✅ 镜像服务器连通性正常" else echo "⚠️ 镜像服务器ping失败，但继续尝试拉取镜像" fi # 检查Docker登录状态 echo "检查Docker登录状态..." if docker info > /dev/null 2>&1; then echo "✅ Docker服务正常" else echo "❌ Docker服务异常" exit 1 fi # 拉取镜像（带重试） echo "拉取Docker镜像..." for i in {1..3}; do echo "尝试拉取镜像 ($i/3): ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }}" if docker pull ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }}; then echo "✅ 镜像拉取成功" break else echo "❌ 镜像拉取失败，重试 $i/3" echo "检查网络和镜像仓库状态..." # 显示详细错误信息 echo "--- 网络诊断信息 ---" echo "DNS解析测试:" nslookup "$REGISTRY_HOST" || echo "DNS解析失败" echo "网络连通性测试:" ping -c 2 "$REGISTRY_HOST" || echo "ping失败" echo "Docker镜像仓库连接测试:" curl -I "https://$REGISTRY_HOST/v2/" 2>/dev/null || echo "仓库API访问失败" sleep 5 if [ $i -eq 3 ]; then echo "❌ 镜像拉取失败，部署终止" echo "请检查:" echo "1. 网络连接是否正常" echo "2. 镜像仓库是否可访问" echo "3. 镜像标签是否存在" echo "4. Docker登录凭据是否正确" exit 1 fi fi done # 安全停止和移除容器 echo "检查现有容器状态..." CONTAINER_NAME="ppanel-user-web" # 检查容器是否存在 if docker ps -aq -f name=$CONTAINER_NAME | grep -q .; then echo "发现现有容器，开始清理..." # 检查容器是否正在运行 if docker ps -q -f name=$CONTAINER_NAME | grep -q .; then echo "停止运行中的容器..." docker stop $CONTAINER_NAME --time=15 || true sleep 5 fi # 检查容器是否正在被移除 echo "检查容器移除状态..." for i in {1..15}; do # 尝试获取容器状态 CONTAINER_STATUS=$(docker inspect $CONTAINER_NAME --format='{{.State.Status}}' 2>/dev/null || echo "not_found") if [ "$CONTAINER_STATUS" = "not_found" ]; then echo "✅ 容器已不存在" break elif [ "$CONTAINER_STATUS" = "removing" ]; then echo "⏳ 容器正在移除中，等待完成... $i/15" sleep 3 else echo "尝试移除容器... $i/15" if docker rm -f $CONTAINER_NAME 2>/dev/null; then echo "✅ 容器移除成功" break else echo "⚠️ 容器移除失败，重试..." sleep 2 fi fi # 最后一次尝试强制清理 if [ $i -eq 15 ]; then echo "🔧 执行强制清理..." docker kill $CONTAINER_NAME 2>/dev/null || true sleep 2 docker rm -f $CONTAINER_NAME 2>/dev/null || true sleep 2 fi done else echo "✅ 未发现现有容器" fi echo "启动新容器..." docker run -d \ --name ppanel-user-web \ --restart unless-stopped \ -p 3002:3000 \ -e NEXT_PUBLIC_API_URL=${{ env.NEXT_PUBLIC_API_URL }} \ ${{ env.DOCKER_REGISTRY }}/ppanel/ppanel-user-web:${{ env.VERSION }} # 验证容器启动 echo "验证容器启动状态..." for i in {1..10}; do if docker ps -q -f name=ppanel-user-web | grep -q .; then echo "✅ 用户面板部署成功" docker ps -f name=ppanel-user-web --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}" exit 0 else echo "等待容器启动... $i/10" sleep 3 fi done echo "❌ 用户面板部署失败 - 容器未能正常启动" docker logs ppanel-user-web || true exit 1 - name: 发送成功通知到Telegram if: success() run: | MESSAGE="✅ 部署成功！ 📦 项目: ${{ github.repository }} 🌿 分支: ${{ github.ref_name }} 🔖 版本: ${{ env.VERSION }} 🎯 构建目标: ${{ env.BUILD_TARGET }} 🔗 API地址: ${{ env.NEXT_PUBLIC_API_URL }} 🕐 时间: $(date '+%Y-%m-%d %H:%M:%S')" curl -s -X POST "https://api.telegram.org/bot${{ secrets.TELEGRAM_BOT_TOKEN }}/sendMessage" \ -d chat_id="${{ secrets.TELEGRAM_CHAT_ID }}" \ -d text="$MESSAGE" \ -d parse_mode="HTML" - name: 发送失败通知到Telegram if: failure() run: | MESSAGE="❌ 部署失败！ 📦 项目: ${{ github.repository }} 🌿 分支: ${{ github.ref_name }} 🔖 版本: ${{ env.VERSION }} 🎯 构建目标: ${{ env.BUILD_TARGET }} 🕐 时间: $(date '+%Y-%m-%d %H:%M:%S') 请检查构建日志获取详细信息。" curl -s -X POST "https://api.telegram.org/bot${{ secrets.TELEGRAM_BOT_TOKEN }}/sendMessage" \ -d chat_id="${{ secrets.TELEGRAM_CHAT_ID }}" \ -d text="$MESSAGE" \ -d parse_mode="HTML"