tech/sendico
2
0
Fork 0
Code Issues 22 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

db deployment trace
Some checks failed
ci/woodpecker/push/db Pipeline failed
Details

Browse Source
This commit is contained in:
Stephan D
2025-11-07 10:58:09 +01:00
parent e70fc9567a
commit b9d356669a
2 changed files with 30 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
ci/prod/scripts/deploy-db.sh
View File

@@ -1,28 +1,36 @@
#!/usr/bin/env bash
set -Eeuxo pipefail
set -Eeuo pipefail
trap 'echo "[deploy-db] failed at line $LINENO"; exit 1' ERR
# Требуем ключевые переменные уже ПРОБРОШЕННЫЕ из шага CI
: "${REMOTE_BASE:?missing REMOTE_BASE}"
: "${DB_DIR:?missing DB_DIR}"
: "${SSH_USER:?missing SSH_USER}"
: "${SSH_HOST:?missing SSH_HOST}"
SSH_OPTS='-i /root/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -vv'
REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
SSH_OPTS=(-i /root/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -vv)
ssh $SSH_OPTS "$REMOTE_TARGET" 'echo "[whoami] $(whoami) @ $(hostname) $(date -Is)"'
echo "[local] REMOTE_DIR=${REMOTE_DIR} REMOTE_TARGET=${REMOTE_TARGET}"
ssh $SSH_OPTS "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
rsync -avz --delete -e "ssh $SSH_OPTS" ci/prod/compose/ "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
rsync -avz -e "ssh $SSH_OPTS" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
# Кто мы на удалёнке (оставляет след в логе CI)
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" 'echo "[whoami] $(whoami) @ $(hostname) $(date -Is)"'
# Создание директорий и синк
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
rsync -avz --delete -e "ssh ${SSH_OPTS[*]}" ci/prod/compose/ "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
rsync -avz -e "ssh ${SSH_OPTS[*]}" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
# Контрольная сумма — доказательство доставки
local_sum="$(sha256sum ci/prod/compose/db.yml | awk '{print $1}')"
remote_sum="$(ssh $SSH_OPTS "$REMOTE_TARGET" "sha256sum ${REMOTE_DIR}/compose/db.yml | awk '{print \$1}'")"
remote_sum="$(ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "sha256sum ${REMOTE_DIR}/compose/db.yml | awk '{print \$1}'")"
echo "[sha256] local=$local_sum remote=$remote_sum"
ssh $SSH_OPTS "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" <<'EOSSH'
# Деплой на удалёнке (ВАЖНО: 'bash -s', чтобы heredoc выполнился)
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" bash -s <<'EOSSH'
set -Eeuxo pipefail
echo "[remote] whoami=$(whoami) host=$(hostname) pwd=$PWD"
cd "${REMOTE_DIR}/compose"
set -a
. ../env/.env.runtime