334 lines
12 KiB
YAML
334 lines
12 KiB
YAML
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- master
|
|
types:
|
|
- closed
|
|
|
|
jobs:
|
|
build-deploy:
|
|
runs-on: act_runner_java
|
|
if: ${{ github.event.pull_request.merged == true }}
|
|
outputs:
|
|
deployment_status: ${{ steps.set_status.outputs.status }}
|
|
env:
|
|
JAVA_HOME: /usr/lib/jvm/java-21-openjdk
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up environment
|
|
run: |
|
|
echo "PR #${{ github.event.number }} merged into master"
|
|
echo "Source branch: ${{ github.event.pull_request.head.ref }}"
|
|
echo "Target branch: ${{ github.event.pull_request.base.ref }}"
|
|
|
|
- name: Run tests
|
|
run: |
|
|
echo "Running test suite..."
|
|
|
|
- name: Setup Maven settings
|
|
run: |
|
|
if [ -z "${{ vars.TIMI_NEXUS_USERNAME }}" ] || [ -z "${{ vars.TIMI_NEXUS_PASSWORD }}" ]; then
|
|
echo "Missing vars.TIMI_NEXUS_USERNAME or vars.TIMI_NEXUS_PASSWORD"
|
|
exit 1
|
|
fi
|
|
mkdir -p ~/.m2
|
|
cat > ~/.m2/settings.xml <<EOF
|
|
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd">
|
|
<servers>
|
|
<server>
|
|
<id>timi_nexus</id>
|
|
<username>${{ vars.TIMI_NEXUS_USERNAME }}</username>
|
|
<password>${{ vars.TIMI_NEXUS_PASSWORD }}</password>
|
|
</server>
|
|
</servers>
|
|
</settings>
|
|
EOF
|
|
|
|
- name: Build project
|
|
run: |
|
|
mvn -B -DskipTests clean package -P prod-linux
|
|
|
|
- name: Deploy service
|
|
if: success()
|
|
env:
|
|
CONTAINER_NAME: ${{ vars.CONTAINER_NAME }}
|
|
CONTAINER_TARGET_PATH: ${{ vars.CONTAINER_TARGET_PATH }}
|
|
MAX_RETRIES: 3
|
|
RETRY_DELAY: 10
|
|
run: |
|
|
if [ -z "$CONTAINER_NAME" ] || [ -z "$CONTAINER_TARGET_PATH" ]; then
|
|
echo "Missing production environment variables"
|
|
echo "Required: CONTAINER_NAME, CONTAINER_TARGET_PATH"
|
|
exit 1
|
|
fi
|
|
|
|
retry_command() {
|
|
local cmd="$1"
|
|
local desc="$2"
|
|
local attempt=1
|
|
|
|
while [ $attempt -le $MAX_RETRIES ]; do
|
|
echo "[$desc] Attempt $attempt/$MAX_RETRIES..."
|
|
if eval "$cmd"; then
|
|
echo "OK: $desc succeeded"
|
|
return 0
|
|
fi
|
|
echo "FAIL: $desc failed (attempt $attempt/$MAX_RETRIES)"
|
|
if [ $attempt -lt $MAX_RETRIES ]; then
|
|
echo "Retrying in ${RETRY_DELAY}s..."
|
|
sleep $RETRY_DELAY
|
|
fi
|
|
attempt=$((attempt + 1))
|
|
done
|
|
|
|
echo "FAIL: $desc failed after $MAX_RETRIES attempts"
|
|
return 1
|
|
}
|
|
|
|
version=$(mvn -q -DforceStdout help:evaluate -Dexpression=project.version)
|
|
artifact_id=$(mvn -q -DforceStdout help:evaluate -Dexpression=project.artifactId)
|
|
jar_file="target/${artifact_id}-${version}.jar"
|
|
|
|
if [ ! -f "$jar_file" ]; then
|
|
echo "Build artifact not found: $jar_file"
|
|
exit 1
|
|
fi
|
|
|
|
if ! command -v docker >/dev/null 2>&1; then
|
|
echo "docker command not found in runner environment"
|
|
exit 1
|
|
fi
|
|
|
|
if ! docker inspect "$CONTAINER_NAME" >/dev/null 2>&1; then
|
|
echo "Docker container not found: $CONTAINER_NAME"
|
|
exit 1
|
|
fi
|
|
|
|
target_jar="${artifact_id}.jar"
|
|
container_target="${CONTAINER_TARGET_PATH%/}/$target_jar"
|
|
echo "Deploying $jar_file to container $CONTAINER_NAME:$container_target"
|
|
|
|
if ! retry_command "docker cp \"$jar_file\" \"$CONTAINER_NAME:$container_target\"" "Docker copy"; then
|
|
exit 1
|
|
fi
|
|
|
|
echo "Restarting Docker container: $CONTAINER_NAME"
|
|
if ! retry_command "docker restart \"$CONTAINER_NAME\"" "Docker restart"; then
|
|
exit 1
|
|
fi
|
|
echo "Deployment completed successfully"
|
|
|
|
- name: Create release
|
|
if: ${{ success() && startsWith(github.event.pull_request.title, 'v') }}
|
|
env:
|
|
GITEA_TOKEN: ${{ secrets.RUNNER_TOKEN }}
|
|
GITEA_SERVER_URL: ${{ github.server_url }}
|
|
GITEA_INTERNAL_URL: ${{ vars.TIMI_GITEA_INTERNAL_URL }}
|
|
GITEA_REPOSITORY: ${{ github.repository }}
|
|
RELEASE_TAG: ${{ github.event.pull_request.title }}
|
|
RELEASE_TARGET: ${{ github.sha }}
|
|
MAX_RETRIES: 3
|
|
RETRY_DELAY: 10
|
|
run: |
|
|
if [ -z "$GITEA_TOKEN" ]; then
|
|
echo "Missing secrets.RUNNER_TOKEN"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -n "$GITEA_INTERNAL_URL" ]; then
|
|
api_base_url="$GITEA_INTERNAL_URL"
|
|
echo "Using internal Gitea URL: $api_base_url"
|
|
else
|
|
api_base_url="$GITEA_SERVER_URL"
|
|
echo "Using public Gitea URL: $api_base_url"
|
|
fi
|
|
|
|
version=$(mvn -q -DforceStdout help:evaluate -Dexpression=project.version)
|
|
artifact_id=$(mvn -q -DforceStdout help:evaluate -Dexpression=project.artifactId)
|
|
jar_file="target/${artifact_id}-${version}.jar"
|
|
|
|
if [ ! -f "$jar_file" ]; then
|
|
echo "Build artifact not found: $jar_file"
|
|
exit 1
|
|
fi
|
|
|
|
file_size=$(stat -c%s "$jar_file" 2>/dev/null || stat -f%z "$jar_file" 2>/dev/null || echo "unknown")
|
|
echo "Found fat jar: $jar_file (size: $file_size bytes)"
|
|
|
|
api_url="$api_base_url/api/v1/repos/$GITEA_REPOSITORY/releases"
|
|
payload=$(cat <<EOF
|
|
{
|
|
"tag_name": "$RELEASE_TAG",
|
|
"name": "$RELEASE_TAG",
|
|
"target_commitish": "$RELEASE_TARGET",
|
|
"draft": false,
|
|
"prerelease": false
|
|
}
|
|
EOF
|
|
)
|
|
echo "Creating release with tag: $RELEASE_TAG"
|
|
echo "API URL: $api_url"
|
|
echo "Target commit: $RELEASE_TARGET"
|
|
|
|
release_response_file=$(mktemp /tmp/release_response_XXXXXX.json)
|
|
trap "rm -f $release_response_file" EXIT
|
|
|
|
release_id=""
|
|
attempt=1
|
|
while [ $attempt -le $MAX_RETRIES ] && [ -z "$release_id" ]; do
|
|
echo "[Create release] Attempt $attempt/$MAX_RETRIES..."
|
|
|
|
> "$release_response_file"
|
|
|
|
http_code=$(curl -sS -w "%{http_code}" -o "$release_response_file" -X POST "$api_url" \
|
|
-H "Authorization: token $GITEA_TOKEN" \
|
|
-H "Content-Type: application/json" \
|
|
--connect-timeout 30 \
|
|
--max-time 60 \
|
|
-d "$payload" 2>/dev/null) || http_code="000"
|
|
|
|
response=$(cat "$release_response_file" 2>/dev/null || echo "{}")
|
|
echo "HTTP Status: $http_code"
|
|
|
|
if [ "$http_code" = "201" ]; then
|
|
if command -v jq >/dev/null 2>&1; then
|
|
release_id=$(echo "$response" | jq -r '.id' 2>/dev/null)
|
|
else
|
|
release_id=$(echo "$response" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2 | tr -d '\n\r')
|
|
fi
|
|
echo "OK: Release created: id=$release_id"
|
|
elif [ "$http_code" = "409" ]; then
|
|
echo "Release already exists (HTTP 409), fetching existing release..."
|
|
existing=$(curl -sS "$api_url" -H "Authorization: token $GITEA_TOKEN" --connect-timeout 30 2>/dev/null || echo "[]")
|
|
if command -v jq >/dev/null 2>&1; then
|
|
release_id=$(echo "$existing" | jq -r ".[] | select(.tag_name==\"$RELEASE_TAG\") | .id" 2>/dev/null | head -1)
|
|
else
|
|
release_id=$(echo "$existing" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2 | tr -d '\n\r')
|
|
fi
|
|
if [ -n "$release_id" ]; then
|
|
echo "OK: Found existing release: id=$release_id"
|
|
else
|
|
echo "FAIL: Could not find existing release id"
|
|
fi
|
|
else
|
|
echo "FAIL: Create release failed (HTTP $http_code)"
|
|
if [ $attempt -lt $MAX_RETRIES ]; then
|
|
echo "Retrying in ${RETRY_DELAY}s..."
|
|
sleep $RETRY_DELAY
|
|
fi
|
|
fi
|
|
attempt=$((attempt + 1))
|
|
done
|
|
|
|
if [ -z "$release_id" ]; then
|
|
echo "FAIL: Failed to create or find release after $MAX_RETRIES attempts"
|
|
exit 1
|
|
fi
|
|
|
|
asset_name=$(basename "$jar_file")
|
|
echo "Uploading asset: $asset_name (size: $file_size bytes)"
|
|
upload_url="$api_url/$release_id/assets?name=$asset_name"
|
|
echo "Upload URL: $upload_url"
|
|
|
|
asset_response_file=$(mktemp /tmp/asset_response_XXXXXX.json)
|
|
trap "rm -f $release_response_file $asset_response_file" EXIT
|
|
|
|
upload_success=false
|
|
attempt=1
|
|
while [ $attempt -le $MAX_RETRIES ] && [ "$upload_success" = "false" ]; do
|
|
echo "[Upload asset] Attempt $attempt/$MAX_RETRIES..."
|
|
|
|
> "$asset_response_file"
|
|
|
|
http_code=$(curl -sS -w "%{http_code}" -o "$asset_response_file" -X POST "$upload_url" \
|
|
-H "Authorization: token $GITEA_TOKEN" \
|
|
--connect-timeout 30 \
|
|
--max-time 300 \
|
|
-F "attachment=@$jar_file" 2>/dev/null) || http_code="000"
|
|
|
|
if [ "$http_code" = "201" ]; then
|
|
upload_success=true
|
|
echo "OK: Successfully uploaded: $asset_name"
|
|
else
|
|
echo "FAIL: Upload failed (HTTP $http_code)"
|
|
cat "$asset_response_file" 2>/dev/null || true
|
|
fi
|
|
|
|
if [ "$upload_success" = "false" ] && [ $attempt -lt $MAX_RETRIES ]; then
|
|
echo "Retrying in ${RETRY_DELAY}s..."
|
|
sleep $RETRY_DELAY
|
|
fi
|
|
attempt=$((attempt + 1))
|
|
done
|
|
|
|
if [ "$upload_success" = "false" ]; then
|
|
echo "FAIL: Failed to upload asset after $MAX_RETRIES attempts"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Mark deployment success
|
|
id: set_status
|
|
if: always()
|
|
run: |
|
|
echo "status=success" >> $GITHUB_OUTPUT
|
|
|
|
notify-on-failure:
|
|
runs-on: act_runner_java
|
|
needs: build-deploy
|
|
if: ${{ always() && github.event.pull_request.merged == true && needs.build-deploy.result == 'failure' }}
|
|
steps:
|
|
- name: Notify CI failure
|
|
env:
|
|
PR_NUMBER: ${{ github.event.number }}
|
|
PR_TITLE: ${{ github.event.pull_request.title }}
|
|
PR_URL: ${{ github.event.pull_request.html_url }}
|
|
SOURCE_BRANCH: ${{ github.event.pull_request.head.ref }}
|
|
AUTHOR: ${{ github.event.pull_request.user.login }}
|
|
COMMIT_SHA: ${{ github.sha }}
|
|
REPO: ${{ github.repository }}
|
|
SERVER_URL: ${{ github.server_url }}
|
|
WEBHOOK_URL: ${{ vars.NOTIFY_WEBHOOK_URL }}
|
|
run: |
|
|
echo "========================================="
|
|
echo "CI Pipeline Failed - Manual Review Required"
|
|
echo "========================================="
|
|
echo ""
|
|
echo "PR: #$PR_NUMBER - $PR_TITLE"
|
|
echo "Branch: $SOURCE_BRANCH"
|
|
echo "Author: $AUTHOR"
|
|
echo "Commit: $COMMIT_SHA"
|
|
echo ""
|
|
echo "Actions:"
|
|
echo " 1. Re-run CI: $SERVER_URL/$REPO/actions"
|
|
echo " 2. Revert PR: $PR_URL (click 'Revert' button)"
|
|
echo ""
|
|
echo "========================================="
|
|
|
|
if [ -n "$WEBHOOK_URL" ]; then
|
|
message="CI 部署失败\n\nPR: #$PR_NUMBER - $PR_TITLE\n分支: $SOURCE_BRANCH\n提交者: $AUTHOR\n\n请检查并决定:\n- 重试 CI\n- 回滚合并"
|
|
|
|
payload=$(cat <<EOF
|
|
{
|
|
"msgtype": "text",
|
|
"text": {
|
|
"content": "$message"
|
|
}
|
|
}
|
|
EOF
|
|
)
|
|
|
|
curl -sS -X POST "$WEBHOOK_URL" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload" || echo "Warning: Failed to send notification"
|
|
|
|
echo "OK: Notification sent"
|
|
else
|
|
echo "Note: Set vars.NOTIFY_WEBHOOK_URL to enable webhook notifications"
|
|
fi
|