Refactor deployment workflow to streamline SSH setup and improve image building process
Some checks failed
Deploy Development / deploy (push) Failing after 1m19s
Some checks failed
Deploy Development / deploy (push) Failing after 1m19s
This commit is contained in:
@@ -13,106 +13,101 @@ jobs:
|
|||||||
image: catthehacker/ubuntu:act-latest
|
image: catthehacker/ubuntu:act-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
|
# 1️⃣ Checkout code
|
||||||
- name: Checkout code
|
- name: Checkout code
|
||||||
shell: sh
|
shell: sh
|
||||||
run: |
|
run: |
|
||||||
git clone $GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git /workspace/repo
|
git clone $GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git /workspace/repo
|
||||||
cd /workspace/repo
|
cd /workspace/repo
|
||||||
git checkout $GITHUB_REF_NAME
|
git checkout $GITHUB_REF_NAME
|
||||||
git pull origin $GITHUB_REF_NAME
|
|
||||||
|
|
||||||
- name: Build Docker Image
|
# 2️⃣ Build image
|
||||||
|
- name: Build Docker image
|
||||||
shell: sh
|
shell: sh
|
||||||
run: |
|
run: |
|
||||||
cd /workspace/repo
|
cd /workspace/repo
|
||||||
docker build -t merchbay_admin:dev .
|
docker build -t merchbay_admin:dev .
|
||||||
docker save merchbay_admin:dev | gzip > merchbay_admin_dev.tar.gz
|
docker save merchbay_admin:dev | gzip > merchbay_admin_dev.tar.gz
|
||||||
|
|
||||||
# 🔍 TEMP DEBUG (remove after verification)
|
# 3️⃣ Setup SSH
|
||||||
- name: Debug secrets (safe)
|
|
||||||
shell: sh
|
|
||||||
run: |
|
|
||||||
echo "== Secrets presence check =="
|
|
||||||
[ -z "${DEPLOY_SSH_KEY}" ] && echo "❌ DEPLOY_SSH_KEY EMPTY" && exit 1
|
|
||||||
[ -z "${DEPLOY_USER}" ] && echo "❌ DEPLOY_USER EMPTY" && exit 1
|
|
||||||
[ -z "${DEPLOY_HOST}" ] && echo "❌ DEPLOY_HOST EMPTY" && exit 1
|
|
||||||
echo "✅ Secrets OK"
|
|
||||||
env:
|
|
||||||
DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
||||||
DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
|
|
||||||
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
|
||||||
|
|
||||||
- name: Setup SSH
|
- name: Setup SSH
|
||||||
shell: sh
|
shell: sh
|
||||||
|
env:
|
||||||
|
DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
|
||||||
|
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
||||||
run: |
|
run: |
|
||||||
mkdir -p ~/.ssh
|
mkdir -p ~/.ssh
|
||||||
chmod 700 ~/.ssh
|
chmod 700 ~/.ssh
|
||||||
|
echo "$DEPLOY_SSH_KEY" > ~/.ssh/id_ed25519
|
||||||
echo "${DEPLOY_SSH_KEY}" > ~/.ssh/id_ed25519
|
|
||||||
chmod 600 ~/.ssh/id_ed25519
|
chmod 600 ~/.ssh/id_ed25519
|
||||||
|
ssh-keyscan -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts
|
||||||
|
|
||||||
ssh-keyscan -H ${DEPLOY_HOST} >> ~/.ssh/known_hosts
|
# 4️⃣ Upload artifacts
|
||||||
env:
|
- name: Upload image and compose
|
||||||
DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
||||||
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
|
||||||
|
|
||||||
- name: SSH sanity check
|
|
||||||
shell: sh
|
|
||||||
run: |
|
|
||||||
ssh -i ~/.ssh/id_ed25519 ${DEPLOY_USER}@${DEPLOY_HOST} "whoami"
|
|
||||||
env:
|
|
||||||
DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
|
|
||||||
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
|
||||||
|
|
||||||
# 🚀 DEPLOY
|
|
||||||
- name: Deploy to Server
|
|
||||||
shell: sh
|
shell: sh
|
||||||
env:
|
env:
|
||||||
DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
|
DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
|
||||||
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
||||||
run: |
|
run: |
|
||||||
cd /workspace/repo
|
|
||||||
|
|
||||||
scp -i ~/.ssh/id_ed25519 \
|
scp -i ~/.ssh/id_ed25519 \
|
||||||
merchbay_admin_dev.tar.gz docker-compose.yml \
|
merchbay_admin_dev.tar.gz \
|
||||||
${DEPLOY_USER}@${DEPLOY_HOST}:/tmp/
|
docker-compose.yml \
|
||||||
|
$DEPLOY_USER@$DEPLOY_HOST:/tmp/
|
||||||
|
|
||||||
ssh -i ~/.ssh/id_ed25519 ${DEPLOY_USER}@${DEPLOY_HOST} << 'EOF'
|
# 5️⃣ Deploy on server
|
||||||
|
- name: Deploy on server
|
||||||
|
shell: sh
|
||||||
|
env:
|
||||||
|
DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
|
||||||
|
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
||||||
|
run: |
|
||||||
|
ssh -i ~/.ssh/id_ed25519 $DEPLOY_USER@$DEPLOY_HOST << 'EOF'
|
||||||
set -e
|
set -e
|
||||||
|
|
||||||
DEPLOY_DIR="/var/www/apps/merchbay_admin_dev"
|
DEPLOY_DIR="/var/www/apps/merchbay_admin_dev"
|
||||||
|
|
||||||
mkdir -p "$DEPLOY_DIR"
|
mkdir -p "$DEPLOY_DIR"
|
||||||
cd /tmp
|
|
||||||
|
|
||||||
docker load < merchbay_admin_dev.tar.gz
|
echo "📦 Loading image"
|
||||||
cp docker-compose.yml "$DEPLOY_DIR/"
|
docker load < /tmp/merchbay_admin_dev.tar.gz
|
||||||
|
|
||||||
|
echo "📄 Updating compose file"
|
||||||
|
cp /tmp/docker-compose.yml "$DEPLOY_DIR/"
|
||||||
|
|
||||||
cd "$DEPLOY_DIR"
|
cd "$DEPLOY_DIR"
|
||||||
|
|
||||||
docker compose down || true
|
echo "🌐 Ensure Traefik network"
|
||||||
docker image prune -f
|
|
||||||
|
|
||||||
docker network inspect traefik-public >/dev/null 2>&1 || \
|
docker network inspect traefik-public >/dev/null 2>&1 || \
|
||||||
docker network create traefik-public
|
docker network create traefik-public
|
||||||
|
|
||||||
|
echo "🚀 Starting containers"
|
||||||
export DOMAIN=dev-admin.merchbay.app
|
export DOMAIN=dev-admin.merchbay.app
|
||||||
export APP_URL=https://dev-admin.merchbay.app
|
export APP_URL=https://dev-admin.merchbay.app
|
||||||
|
|
||||||
docker compose up -d
|
docker compose up -d
|
||||||
|
|
||||||
sleep 10
|
echo "⏳ Waiting for app container"
|
||||||
docker compose exec -T app php artisan migrate --force
|
sleep 15
|
||||||
docker compose exec -T app php artisan config:cache
|
|
||||||
docker compose exec -T app php artisan route:cache
|
|
||||||
docker compose exec -T app php artisan view:cache
|
|
||||||
|
|
||||||
|
if docker ps --format '{{.Names}}' | grep -q merchbay_admin_app; then
|
||||||
|
docker compose exec -T app php artisan migrate --force
|
||||||
|
docker compose exec -T app php artisan config:clear
|
||||||
|
docker compose exec -T app php artisan config:cache
|
||||||
|
docker compose exec -T app php artisan route:cache
|
||||||
|
docker compose exec -T app php artisan view:cache
|
||||||
|
else
|
||||||
|
echo "❌ App container not running"
|
||||||
|
docker compose logs
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "🧹 Cleanup"
|
||||||
rm -f /tmp/merchbay_admin_dev.tar.gz /tmp/docker-compose.yml
|
rm -f /tmp/merchbay_admin_dev.tar.gz /tmp/docker-compose.yml
|
||||||
|
docker image prune -f
|
||||||
|
|
||||||
echo "✅ Development deployment completed"
|
echo "✅ Deployment completed"
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
- name: Health Check
|
# 6️⃣ Health check
|
||||||
|
- name: Health check
|
||||||
shell: sh
|
shell: sh
|
||||||
run: |
|
run: |
|
||||||
sleep 10
|
sleep 10
|
||||||
|
|||||||
@@ -1,8 +1,6 @@
|
|||||||
services:
|
services:
|
||||||
app:
|
app:
|
||||||
build:
|
image: merchbay_admin:dev
|
||||||
context: .
|
|
||||||
dockerfile: Dockerfile
|
|
||||||
container_name: merchbay_admin_app
|
container_name: merchbay_admin_app
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
environment:
|
environment:
|
||||||
|
|||||||
Reference in New Issue
Block a user