ci(client): sing-box 源码统一走公网镜像 git.51yanmei.com(修外网发版) #5

Merged
wangjia merged 2 commits from fix/ci-gitea-mirror into main 2026-07-26 12:44:37 +00:00
Owner

背景

发版流水线在外网跑时 android/ios/macos 全挂在编译期 git clone sing-box——此前只有 build-android 注入 SINGBOX_GIT(且指向本地 relay 127.0.0.1:13000,依赖 tailscale/LAN,Mac runner 出外网即失效),ios/macos 完全没注入 → 直接 clone github.com → 被 GFW/DNS 污染打挂(SSL_ERROR_SYSCALL)。

改动

三端统一改用稳定公网域名 git.51yanmei.com(ali frps ← 家里 NAS frpc,nginx 443 反代 gitea)——外网/内网都通,不依赖本地 relay/tailscale。已用真实 clone 命令从外网验证 v1.13.13 可拉。ios/macos 同时补 GOPROXY。build-windows 保持 LAN 镜像不动(台式机固定在家)。

配套(非本 PR,机器侧已做)

  • Mac runner 注册地址 127.0.0.1:13000(relay)→ https://git.51yanmei.com,已 declare successfully,位置无关。
  • 退役 tailscale relay。

🤖 Generated with Claude Code

## 背景 发版流水线在**外网**跑时 android/ios/macos 全挂在编译期 `git clone sing-box`——此前只有 build-android 注入 SINGBOX_GIT(且指向本地 relay 127.0.0.1:13000,依赖 tailscale/LAN,Mac runner 出外网即失效),ios/macos 完全没注入 → 直接 clone github.com → 被 GFW/DNS 污染打挂(SSL_ERROR_SYSCALL)。 ## 改动 三端统一改用稳定公网域名 `git.51yanmei.com`(ali frps ← 家里 NAS frpc,nginx 443 反代 gitea)——外网/内网都通,不依赖本地 relay/tailscale。已用真实 clone 命令从外网验证 v1.13.13 可拉。ios/macos 同时补 GOPROXY。build-windows 保持 LAN 镜像不动(台式机固定在家)。 ## 配套(非本 PR,机器侧已做) - Mac runner 注册地址 127.0.0.1:13000(relay)→ https://git.51yanmei.com,已 declare successfully,位置无关。 - 退役 tailscale relay。 🤖 Generated with [Claude Code](https://claude.com/claude-code)
wangjia added 1 commit 2026-07-26 03:00:35 +00:00
ci(client): sing-box 源码统一走公网镜像 git.51yanmei.com(android/ios/macos)
ci-pangolin / Redline Scan — 脱敏 (UI 文案) (pull_request) Successful in 24s
ci-pangolin / Cleartext Scan — Android 禁明文 (pull_request) Successful in 20s
ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (pull_request) Successful in 18s
ci-pangolin / Lint — shellcheck (pull_request) Successful in 3m17s
ci-pangolin / OpenAPI Sync Check (pull_request) Successful in 9m23s
ci-pangolin / Flutter — analyze + test (pull_request) Successful in 1m20s
ci-pangolin / Codegen Drift — token 生成物未漂移 (pull_request) Successful in 5m29s
ci-pangolin / DS-flow — 原型/跨端同源/代码色单源闸 (pull_request) Successful in 54s
ci-pangolin / Go — build + test (pull_request) Failing after 1m20s
ci-pangolin / E2E Smoke — L4 进程级端到端 (pull_request) Failing after 17m49s
ci-pangolin / Go — integration (mysql/redis testcontainers) (pull_request) Failing after 5m24s
ci-pangolin / Golden — 视觉回归 (全量:components/auth/desktop/tablet) (pull_request) Successful in 1m16s
fc1160ecb3
android/ios/macos 三端都内嵌 libbox,编译期都要 git clone sing-box 源码。
此前只有 build-android 注入了 SINGBOX_GIT(且指向本地 relay 127.0.0.1:13000,
依赖 tailscale/LAN,Mac runner 出外网即失效),ios/macos 完全没注入 → 直接
clone github.com → 被 GFW/DNS 污染打挂(SSL_ERROR_SYSCALL,exit 128)。

统一改用稳定公网域名 git.51yanmei.com(ali frps ← 家里 NAS frpc,nginx 443
反代 gitea)——外网/内网都通,不依赖本地 relay/tailscale。已用真实 clone 命令
从外网验证 v1.13.13 可拉。ios/macos 同时补 GOPROXY(gomobile go install)。
build-windows 保持 LAN 镜像不动(Windows 台式机固定在家,不移动)。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A79VtQA1BwTuQN1ThpvYpo
wangjia added 1 commit 2026-07-26 03:15:26 +00:00
ci(android): gradle 发行版 + maven 依赖走国内镜像(修 #215 22min 挂)
ci-pangolin / Redline Scan — 脱敏 (UI 文案) (pull_request) Successful in 20s
ci-pangolin / Cleartext Scan — Android 禁明文 (pull_request) Successful in 17s
ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (pull_request) Successful in 16s
ci-pangolin / Lint — shellcheck (pull_request) Failing after 7s
ci-pangolin / OpenAPI Sync Check (pull_request) Successful in 12m2s
ci-pangolin / Flutter — analyze + test (pull_request) Successful in 4m19s
ci-pangolin / Golden — 视觉回归 (全量:components/auth/desktop/tablet) (pull_request) Failing after 11m12s
ci-pangolin / Go — integration (mysql/redis testcontainers) (pull_request) Failing after 11m22s
ci-pangolin / E2E Smoke — L4 进程级端到端 (pull_request) Failing after 11m32s
ci-pangolin / Go — build + test (pull_request) Failing after 11m42s
ci-pangolin / DS-flow — 原型/跨端同源/代码色单源闸 (pull_request) Failing after 11m51s
ci-pangolin / Codegen Drift — token 生成物未漂移 (pull_request) Failing after 11m59s
caaed88298
#215 android 跑到 flutter build apk 的 Gradle 阶段挂了 ~17min:
"Gradle threw an error while downloading artifacts from the network"
"java.io.EOFException: SSL peer shut down incorrectly"(org.gradle.wrapper.Download)
——这是 sing-box 之外的第二个 GFW 网络坑:Gradle 要下载发行版和 maven 依赖,
走了被墙的 services.gradle.org / dl.google.com / maven central,SSL 被重置。

env 里配了 GOPROXY/PUB/FLUTTER 镜像,唯独 Gradle+Maven 没配。改:
- gradle-wrapper.properties: distributionUrl → 腾讯云 gradle 镜像(同一份 zip)。
- settings.gradle / build.gradle: repositories 前置阿里云 google/public/gradle-plugin
  镜像,原 google()/mavenCentral()/gradlePluginPortal() 保留作 fallback。

镜像已逐个验证:腾讯 gradle-8.7-bin.zip(206)、阿里云 AGP 8.6.0 pom(200)、
kotlin.android 2.2.0(200)均可取。全球通用,墙内不再依赖被墙源。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01A79VtQA1BwTuQN1ThpvYpo
wangjia merged commit 4ca21f9ee9 into main 2026-07-26 12:44:37 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: wangjia/pangolin#5