wangjia
2eb4275e6f
deploy-{server,site,client}.sh 目标主机参数化（DEPLOY_HOST/USER/SSH_KEY），
不传时行为与现状完全一致（只发 EC2）。workflow 的 Deploy 拆成 EC2（前）+
Ali（后，if:always + continue-on-error，影子目标失败不挡线上）。deploy-server
的 ali 分支只换二进制 + reload 独立 nginx（listen 443），不启动 jiu（阿里 DB
为只读从库，切流提升为主后才起）。新增 deploy/nginx-jiu-ali.conf 并打进
configs.tar.gz。
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YZ4DskSRKsSiheQonFtQvx
127 lines
4.7 KiB
Bash
127 lines
4.7 KiB
Bash
#!/usr/bin/env bash
|
|
# lib-forgejo.sh — shared CI helpers for the three release pipelines
|
|
# (client / site / server). `source` this from release-*.sh and deploy-*.sh.
|
|
#
|
|
# Provides:
|
|
# ver_from_tag <tag> -> strips client-v|site-v|server-v|v prefix
|
|
# extract_release_notes <file> -> prints the latest "## [x]" section body
|
|
# create_release <tag> <body> -> POSTs a Forgejo Release, sets RELEASE_ID
|
|
# upload_asset <file> -> uploads one asset (needs RELEASE_ID)
|
|
# download_release_assets <tag> -> downloads all assets of a release into dist/
|
|
# setup_ssh / teardown_ssh -> prepare/clean the EC2 deploy key (sets SSH/SCP)
|
|
#
|
|
# Requires env (where relevant): FORGEJO_URL, FORGEJO_TOKEN, GITEA_REPOSITORY,
|
|
# EC2_SSH_KEY, EC2_HOST, EC2_USER.
|
|
|
|
# Strip the part-specific tag prefix, leaving a bare semver (1.2.3).
|
|
ver_from_tag() {
|
|
local tag="$1"
|
|
tag="${tag#client-v}"
|
|
tag="${tag#site-v}"
|
|
tag="${tag#server-v}"
|
|
tag="${tag#v}"
|
|
printf '%s' "$tag"
|
|
}
|
|
|
|
# Print the body (lines) of the most recent "## [ver] - date" section.
|
|
extract_release_notes() {
|
|
python3 - "$1" <<'PYEOF'
|
|
import re, sys
|
|
fn = sys.argv[1]
|
|
try:
|
|
with open(fn, encoding='utf-8') as f:
|
|
content = f.read()
|
|
parts = re.split(r'\n## ', '\n' + content)
|
|
if len(parts) > 1:
|
|
lines = parts[1].strip().split('\n')
|
|
notes = []
|
|
for line in lines[1:]:
|
|
s = line.strip()
|
|
if s.startswith('## '):
|
|
break
|
|
if s:
|
|
notes.append(s)
|
|
print('\n'.join(notes) if notes else lines[0])
|
|
else:
|
|
print('')
|
|
except Exception:
|
|
print('')
|
|
PYEOF
|
|
}
|
|
|
|
# create_release <tag> <body_json_string> — sets global RELEASE_ID on success.
|
|
create_release() {
|
|
local tag="$1" body="$2" http_code resp
|
|
echo "==> release: creating Forgejo Release ${tag}"
|
|
http_code=$(curl -k -w "%{http_code}" -o /tmp/release_resp.json \
|
|
-X POST "${FORGEJO_URL}/api/v1/repos/${GITEA_REPOSITORY}/releases" \
|
|
-H "Authorization: token ${FORGEJO_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "{\"tag_name\":\"${tag}\",\"name\":\"Release ${tag}\",\"body\":${body},\"draft\":false,\"prerelease\":false}")
|
|
resp=$(cat /tmp/release_resp.json)
|
|
echo "==> release: API response (HTTP ${http_code}): ${resp}"
|
|
if [ "$http_code" -lt 200 ] || [ "$http_code" -ge 300 ]; then
|
|
echo "==> release: FAILED — HTTP ${http_code}" >&2
|
|
return 1
|
|
fi
|
|
RELEASE_ID=$(python3 -c "import sys,json; print(json.load(sys.stdin)['id'])" <<< "${resp}")
|
|
echo "==> release: release_id=${RELEASE_ID}"
|
|
}
|
|
|
|
# upload_asset <file> — requires RELEASE_ID.
|
|
upload_asset() {
|
|
local file="$1" code
|
|
code=$(curl -k -w "%{http_code}" -o /tmp/upload_resp.json \
|
|
-X POST "${FORGEJO_URL}/api/v1/repos/${GITEA_REPOSITORY}/releases/${RELEASE_ID}/assets" \
|
|
-H "Authorization: token ${FORGEJO_TOKEN}" \
|
|
-F "attachment=@${file}")
|
|
echo "==> release: uploaded ${file} (HTTP ${code}): $(cat /tmp/upload_resp.json)"
|
|
if [ "$code" -lt 200 ] || [ "$code" -ge 300 ]; then return 1; fi
|
|
}
|
|
|
|
# download_release_assets <tag> — pull every asset of the release into dist/.
|
|
download_release_assets() {
|
|
local tag="$1"
|
|
echo "==> deploy: downloading assets for ${tag} from Forgejo"
|
|
mkdir -p dist
|
|
curl -kf -H "Authorization: token ${FORGEJO_TOKEN}" \
|
|
"${FORGEJO_URL}/api/v1/repos/${GITEA_REPOSITORY}/releases/tags/${tag}" \
|
|
-o /tmp/release-info.json
|
|
python3 - <<'PYEOF'
|
|
import json, urllib.request, ssl, os
|
|
ctx = ssl.create_default_context()
|
|
ctx.check_hostname = False
|
|
ctx.verify_mode = ssl.CERT_NONE
|
|
rel = json.load(open('/tmp/release-info.json'))
|
|
token = os.environ['FORGEJO_TOKEN']
|
|
url = os.environ['FORGEJO_URL']
|
|
repo = os.environ['GITEA_REPOSITORY']
|
|
rid = rel['id']
|
|
for a in rel.get('assets', []):
|
|
u = f"{url}/api/v1/repos/{repo}/releases/{rid}/assets/{a['id']}"
|
|
req = urllib.request.Request(u, headers={'Authorization': f'token {token}'})
|
|
with urllib.request.urlopen(req, context=ctx) as r, open(f"dist/{a['name']}", 'wb') as o:
|
|
o.write(r.read())
|
|
print('Downloaded:', a['name'])
|
|
PYEOF
|
|
}
|
|
|
|
# setup_ssh — write the deploy key and export SSH / SCP commands.
|
|
# Target is the EC2 host by default; set DEPLOY_HOST / DEPLOY_USER / DEPLOY_SSH_KEY
|
|
# to retarget another host (e.g. the Alibaba Cloud box during the EC2→Ali migration).
|
|
# Backward-compatible: with no DEPLOY_* set, behaves exactly as before (EC2).
|
|
setup_ssh() {
|
|
local host="${DEPLOY_HOST:-$EC2_HOST}"
|
|
local key="${DEPLOY_SSH_KEY:-$EC2_SSH_KEY}"
|
|
mkdir -p ~/.ssh
|
|
printf '%s' "${key}" > ~/.ssh/ec2_deploy.pem
|
|
chmod 600 ~/.ssh/ec2_deploy.pem
|
|
ssh-keyscan -H "${host}" >> ~/.ssh/known_hosts 2>/dev/null
|
|
SSH="ssh -i ~/.ssh/ec2_deploy.pem -o StrictHostKeyChecking=no"
|
|
SCP="scp -O -i ~/.ssh/ec2_deploy.pem"
|
|
}
|
|
|
|
teardown_ssh() {
|
|
rm -f ~/.ssh/ec2_deploy.pem
|
|
}
|