ci: 改用 container.options 挂载 /opt/freedom（docker.sock 由 runner 自动挂载）
CI/CD Deploy (Admin) / 构建后端镜像并部署 (push) Successful in 47m40s
CI/CD Deploy (Admin) / 构建后端镜像并部署 (push) Successful in 47m40s
This commit is contained in:
+63
-85
@@ -1,85 +1,63 @@
|
|||||||
# =============================================================
|
# =============================================================
|
||||||
# freedom-admin CI/CD 工作流（后端）
|
# freedom-admin CI/CD 工作流（后端）
|
||||||
# 触发条件：push 到 master 分支时自动构建并部署
|
# 触发条件：push 到 master 分支时自动构建并部署
|
||||||
#
|
#
|
||||||
# 环境（已确认）：
|
# 环境（已实测确认，act_runner v0.6.1）：
|
||||||
# - runner: local-runner (act_runner v0.6.1)，labels: ubuntu-latest
|
# - runner: local-runner，labels: ubuntu-latest
|
||||||
# - job 容器挂载 /var/run/docker.sock 与 /opt/freedom：由本 workflow 的 volumes 声明，
|
# - /var/run/docker.sock 由 act_runner 自动挂载，切勿重复声明
|
||||||
# 并经 runner-config.yml 的 valid_volumes 白名单放行；host.docker.internal 解析由
|
# （重复会报 Duplicate mount point: /var/run/docker.sock）
|
||||||
# workflow options + runner-config.yml 的 container.options（--add-host）共同提供
|
# - /opt/freedom 必须经 container.options 的 -v 挂载，且在
|
||||||
# - Gitea 内网地址：host.docker.internal:3000（Gitea Actions 实例地址）
|
# runner-config.yml 的 container.valid_volumes 白名单内，否则会被静默剥离
|
||||||
# - 部署目录：/opt/freedom/deploy（含 docker-compose.yml 与 .env）
|
# - host.docker.internal 由 container.options 的 --add-host 解析到宿主
|
||||||
#
|
# - act_runner 不会自动检出代码到 /workspace（实测为空目录），需自行拉取
|
||||||
# 前置条件（管理员一次性完成）：
|
# - 部署目录：/opt/freedom/deploy（含 docker-compose.yml 与 .env）
|
||||||
# - 宿主 /opt/freedom/deploy/docker-compose.yml 与 .env 已就位（含 DB 凭据）
|
# =============================================================
|
||||||
# =============================================================
|
name: CI/CD Deploy (Admin)
|
||||||
name: CI/CD Deploy (Admin)
|
|
||||||
|
on:
|
||||||
on:
|
push:
|
||||||
push:
|
branches:
|
||||||
branches:
|
- master
|
||||||
- master
|
workflow_dispatch:
|
||||||
workflow_dispatch:
|
|
||||||
|
jobs:
|
||||||
jobs:
|
build-and-deploy:
|
||||||
build-and-deploy:
|
name: 构建后端镜像并部署
|
||||||
name: 构建后端镜像并部署
|
runs-on: ubuntu-latest
|
||||||
runs-on: ubuntu-latest
|
container:
|
||||||
container:
|
image: docker:24.0-cli
|
||||||
image: docker:24.0-cli
|
options: -v /opt/freedom:/opt/freedom --add-host=host.docker.internal:host-gateway
|
||||||
# 挂载与 host 解析：workflow 级 volumes/options + runner-config valid_volumes 白名单
|
steps:
|
||||||
# docker.sock 供 docker build / docker compose 使用；/opt/freedom 供 workspace 与部署目录使用
|
- name: 安装 git
|
||||||
volumes:
|
run: apk add --no-cache git
|
||||||
- /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
- /opt/freedom:/opt/freedom
|
- name: 拉取 master 代码
|
||||||
options: --add-host=host.docker.internal:host-gateway
|
run: |
|
||||||
steps:
|
set -euo pipefail
|
||||||
- name: 安装 git
|
rm -rf /opt/freedom/workspace-admin
|
||||||
run: apk add --no-cache git
|
git clone --depth 1 --branch master \
|
||||||
|
"http://oauth2:${GITHUB_TOKEN}@host.docker.internal:3000/${GITHUB_REPOSITORY}.git" \
|
||||||
- name: Debug 网络环境
|
/opt/freedom/workspace-admin
|
||||||
run: |
|
cd /opt/freedom/workspace-admin
|
||||||
set -x
|
echo "==> 已拉取代码，最新提交:"
|
||||||
{
|
git log -1 --oneline
|
||||||
echo "=== /etc/hosts ==="
|
env:
|
||||||
cat /etc/hosts
|
GITHUB_TOKEN: ${{ github.token }}
|
||||||
echo "=== getent hosts host.docker.internal ==="
|
|
||||||
getent hosts host.docker.internal || echo "NOT_RESOLVED"
|
- name: 构建后端镜像
|
||||||
echo "=== GITHUB_TOKEN len ==="
|
run: |
|
||||||
echo "len=${#GITHUB_TOKEN}"
|
set -euo pipefail
|
||||||
echo "=== GITHUB_REPOSITORY ==="
|
docker build -t freedom-admin:latest /opt/freedom/workspace-admin
|
||||||
echo "${GITHUB_REPOSITORY}"
|
|
||||||
echo "=== ping test ==="
|
- name: 部署后端服务
|
||||||
wget -q -T 3 -O /dev/null http://host.docker.internal:3000/api/v1/version && echo HTTP_OK || echo HTTP_FAIL
|
run: |
|
||||||
} | tee /opt/freedom/workspace-debug.txt
|
set -euo pipefail
|
||||||
|
cd /opt/freedom/deploy
|
||||||
- name: 拉取 master 代码
|
test -f docker-compose.yml || { echo "错误: 缺少 docker-compose.yml，请先初始化部署目录"; exit 1; }
|
||||||
run: |
|
test -f .env || { echo "错误: 缺少 .env，请先初始化部署目录"; exit 1; }
|
||||||
set -euo pipefail
|
docker compose up -d --force-recreate backend
|
||||||
rm -rf /opt/freedom/workspace-admin
|
|
||||||
git clone --depth 1 --branch master \
|
- name: 确认部署结果
|
||||||
"http://oauth2:${GITHUB_TOKEN}@host.docker.internal:3000/${GITHUB_REPOSITORY}.git" \
|
run: |
|
||||||
/opt/freedom/workspace-admin
|
cd /opt/freedom/deploy
|
||||||
cd /opt/freedom/workspace-admin
|
docker compose ps backend
|
||||||
echo "==> 已拉取代码，最新提交:"
|
|
||||||
git log -1 --oneline
|
|
||||||
env:
|
|
||||||
GITHUB_TOKEN: ${{ github.token }}
|
|
||||||
|
|
||||||
- name: 构建后端镜像
|
|
||||||
run: |
|
|
||||||
set -euo pipefail
|
|
||||||
docker build -t freedom-admin:latest /opt/freedom/workspace-admin
|
|
||||||
|
|
||||||
- name: 部署后端服务
|
|
||||||
run: |
|
|
||||||
set -euo pipefail
|
|
||||||
cd /opt/freedom/deploy
|
|
||||||
test -f docker-compose.yml || { echo "错误: 缺少 docker-compose.yml，请先初始化部署目录"; exit 1; }
|
|
||||||
test -f .env || { echo "错误: 缺少 .env，请先初始化部署目录"; exit 1; }
|
|
||||||
docker compose up -d --force-recreate backend
|
|
||||||
|
|
||||||
- name: 确认部署结果
|
|
||||||
run: |
|
|
||||||
cd /opt/freedom/deploy
|
|
||||||
docker compose ps backend
|
|
||||||
|
|||||||
Reference in New Issue
Block a user