removed debug output
This commit is contained in:
@@ -32,20 +32,18 @@ steps:
|
|||||||
image: alpine:latest
|
image: alpine:latest
|
||||||
depends_on: [ secrets ]
|
depends_on: [ secrets ]
|
||||||
commands:
|
commands:
|
||||||
- set -Eeuxo pipefail
|
- set -euo pipefail
|
||||||
- apk add --no-cache bash openssh-client rsync coreutils
|
- apk add --no-cache bash openssh-client rsync coreutils
|
||||||
- mkdir -p /root/.ssh
|
- mkdir -p /root/.ssh
|
||||||
- install -m 600 secrets/SSH_KEY /root/.ssh/id_rsa
|
- install -m 600 secrets/SSH_KEY /root/.ssh/id_rsa
|
||||||
# страхуемся от CRLF в env-файле
|
|
||||||
- sed -i 's/\r$//' ./ci/prod/.env.runtime
|
- sed -i 's/\r$//' ./ci/prod/.env.runtime
|
||||||
# поднимаем переменные для скрипта
|
|
||||||
- set -a
|
- set -a
|
||||||
- . ./ci/prod/.env.runtime
|
- . ./ci/prod/.env.runtime
|
||||||
- . ./.env.version
|
- . ./.env.version
|
||||||
- set +a
|
- set +a
|
||||||
# просто запускаем внешний скрипт
|
|
||||||
- bash ci/prod/scripts/deploy-db.sh
|
- bash ci/prod/scripts/deploy-db.sh
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -1,8 +1,10 @@
|
|||||||
#!/usr/bin/env bash
|
#!/usr/bin/env bash
|
||||||
set -Eeuo pipefail
|
set -euo pipefail
|
||||||
trap 'echo "[deploy-db] failed at line $LINENO"; exit 1' ERR
|
# Enable verbose mode only when DEBUG_DEPLOY=1
|
||||||
|
[[ "${DEBUG_DEPLOY:-0}" = "1" ]] && set -x
|
||||||
|
trap 'echo "[deploy-db] error at line $LINENO" >&2' ERR
|
||||||
|
|
||||||
# Требуем ключевые переменные уже ПРОБРОШЕННЫЕ из шага CI
|
# Required environment variables (must be exported by the CI step)
|
||||||
: "${REMOTE_BASE:?missing REMOTE_BASE}"
|
: "${REMOTE_BASE:?missing REMOTE_BASE}"
|
||||||
: "${DB_DIR:?missing DB_DIR}"
|
: "${DB_DIR:?missing DB_DIR}"
|
||||||
: "${SSH_USER:?missing SSH_USER}"
|
: "${SSH_USER:?missing SSH_USER}"
|
||||||
@@ -10,34 +12,37 @@ trap 'echo "[deploy-db] failed at line $LINENO"; exit 1' ERR
|
|||||||
|
|
||||||
REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
|
REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
|
||||||
REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
|
REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
|
||||||
SSH_OPTS=(-i /root/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -vv)
|
|
||||||
|
|
||||||
echo "[local] REMOTE_DIR=${REMOTE_DIR} REMOTE_TARGET=${REMOTE_TARGET}"
|
# SSH options: quiet by default; add -vv in debug mode
|
||||||
|
SSH_OPTS=(
|
||||||
|
-i /root/.ssh/id_rsa
|
||||||
|
-o StrictHostKeyChecking=no
|
||||||
|
-o UserKnownHostsFile=/dev/null
|
||||||
|
-o LogLevel=ERROR
|
||||||
|
-q
|
||||||
|
)
|
||||||
|
if [[ "${DEBUG_DEPLOY:-0}" = "1" ]]; then
|
||||||
|
SSH_OPTS=("${SSH_OPTS[@]/-q/}" -vv)
|
||||||
|
fi
|
||||||
|
|
||||||
# Кто мы на удалёнке (оставляет след в логе CI)
|
# rsync options: quiet by default; add -v in debug mode
|
||||||
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" 'echo "[whoami] $(whoami) @ $(hostname) $(date -Is)"'
|
RSYNC_FLAGS=(-az --delete)
|
||||||
|
[[ "${DEBUG_DEPLOY:-0}" = "1" ]] && RSYNC_FLAGS=(-avz --delete)
|
||||||
|
|
||||||
# Создание директорий и синк
|
# Create remote directories and sync files
|
||||||
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
|
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
|
||||||
rsync -avz --delete -e "ssh ${SSH_OPTS[*]}" ci/prod/compose/ "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
|
rsync "${RSYNC_FLAGS[@]}" -e "ssh ${SSH_OPTS[*]}" ci/prod/compose/ "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
|
||||||
rsync -avz -e "ssh ${SSH_OPTS[*]}" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
|
rsync "${RSYNC_FLAGS[@]}" -e "ssh ${SSH_OPTS[*]}" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
|
||||||
|
|
||||||
# Контрольная сумма — доказательство доставки
|
# Deploy on remote host (use 'bash -s' so heredoc is executed remotely)
|
||||||
local_sum="$(sha256sum ci/prod/compose/db.yml | awk '{print $1}')"
|
|
||||||
remote_sum="$(ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "sha256sum ${REMOTE_DIR}/compose/db.yml | awk '{print \$1}'")"
|
|
||||||
echo "[sha256] local=$local_sum remote=$remote_sum"
|
|
||||||
|
|
||||||
# Деплой на удалёнке (ВАЖНО: 'bash -s', чтобы heredoc выполнился)
|
|
||||||
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" bash -s <<'EOSSH'
|
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" bash -s <<'EOSSH'
|
||||||
set -Eeuxo pipefail
|
set -euo pipefail
|
||||||
echo "[remote] whoami=$(whoami) host=$(hostname) pwd=$PWD"
|
|
||||||
cd "${REMOTE_DIR}/compose"
|
cd "${REMOTE_DIR}/compose"
|
||||||
set -a
|
set -a; . ../env/.env.runtime; set +a
|
||||||
. ../env/.env.runtime
|
# Pull quietly if supported; otherwise fall back to normal
|
||||||
set +a
|
docker compose -f db.yml pull --quiet 2>/dev/null || docker compose -f db.yml pull
|
||||||
docker compose -f db.yml pull
|
|
||||||
docker compose -f db.yml up -d --remove-orphans
|
docker compose -f db.yml up -d --remove-orphans
|
||||||
docker compose ps
|
docker compose ps
|
||||||
date -Is | tee .last_deploy
|
date -Is > .last_deploy
|
||||||
logger -t deploy-db "db deployed at $(date -Is) in ${REMOTE_DIR}"
|
logger -t deploy-db "db deployed at $(date -Is) in ${REMOTE_DIR}"
|
||||||
EOSSH
|
EOSSH
|
||||||
|
|||||||
Reference in New Issue
Block a user