44 lines
1.9 KiB
Bash
Executable File
44 lines
1.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
trap 'echo "[deploy-db] failed at line $LINENO"; exit 1' ERR
|
|
|
|
# Требуем ключевые переменные уже ПРОБРОШЕННЫЕ из шага CI
|
|
: "${REMOTE_BASE:?missing REMOTE_BASE}"
|
|
: "${DB_DIR:?missing DB_DIR}"
|
|
: "${SSH_USER:?missing SSH_USER}"
|
|
: "${SSH_HOST:?missing SSH_HOST}"
|
|
|
|
REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
|
|
REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
|
|
SSH_OPTS=(-i /root/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -vv)
|
|
|
|
echo "[local] REMOTE_DIR=${REMOTE_DIR} REMOTE_TARGET=${REMOTE_TARGET}"
|
|
|
|
# Кто мы на удалёнке (оставляет след в логе CI)
|
|
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" 'echo "[whoami] $(whoami) @ $(hostname) $(date -Is)"'
|
|
|
|
# Создание директорий и синк
|
|
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
|
|
rsync -avz --delete -e "ssh ${SSH_OPTS[*]}" ci/prod/compose/ "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
|
|
rsync -avz -e "ssh ${SSH_OPTS[*]}" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
|
|
|
|
# Контрольная сумма — доказательство доставки
|
|
local_sum="$(sha256sum ci/prod/compose/db.yml | awk '{print $1}')"
|
|
remote_sum="$(ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "sha256sum ${REMOTE_DIR}/compose/db.yml | awk '{print \$1}'")"
|
|
echo "[sha256] local=$local_sum remote=$remote_sum"
|
|
|
|
# Деплой на удалёнке (ВАЖНО: 'bash -s', чтобы heredoc выполнился)
|
|
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" bash -s <<'EOSSH'
|
|
set -Eeuxo pipefail
|
|
echo "[remote] whoami=$(whoami) host=$(hostname) pwd=$PWD"
|
|
cd "${REMOTE_DIR}/compose"
|
|
set -a
|
|
. ../env/.env.runtime
|
|
set +a
|
|
docker compose -f db.yml pull
|
|
docker compose -f db.yml up -d --remove-orphans
|
|
docker compose ps
|
|
date -Is | tee .last_deploy
|
|
logger -t deploy-db "db deployed at $(date -Is) in ${REMOTE_DIR}"
|
|
EOSSH
|