120 lines
3.3 KiB
YAML
120 lines
3.3 KiB
YAML
name: CI/CD Pipeline
|
|
|
|
on:
|
|
push:
|
|
branches: [main, master]
|
|
|
|
jobs:
|
|
# ========== 测试阶段 ==========
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Python
|
|
uses: actions/setup-python@v5
|
|
with:
|
|
python-version: '3.11'
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
pip install -r requirements.txt
|
|
pip install pytest
|
|
|
|
- name: Run tests
|
|
run: pytest tests/ -v || echo "No tests yet"
|
|
|
|
# ========== 构建阶段 ==========
|
|
build:
|
|
needs: test
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Build Docker image
|
|
run: |
|
|
docker build -t app01:${{ github.sha }} .
|
|
docker tag app01:${{ github.sha }} app01:latest
|
|
|
|
- name: Save Docker image
|
|
run: |
|
|
docker save app01:latest > /tmp/app01.tar
|
|
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: docker-image
|
|
path: /tmp/app01.tar
|
|
|
|
# ========== 部署阶段 ==========
|
|
deploy:
|
|
needs: build
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Download Docker image
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: docker-image
|
|
path: /tmp
|
|
|
|
- name: Deploy to server
|
|
env:
|
|
SSH_KEY: ${{ secrets.SSH_KEY }}
|
|
HOST: ${{ secrets.DEPLOY_HOST }}
|
|
PORT: ${{ secrets.DEPLOY_PORT }}
|
|
USER: ${{ secrets.DEPLOY_USER }}
|
|
run: |
|
|
# 设置 SSH
|
|
mkdir -p ~/.ssh
|
|
echo "$SSH_KEY" > ~/.ssh/id_rsa
|
|
chmod 600 ~/.ssh/id_rsa
|
|
|
|
# 传输镜像到服务器
|
|
docker load -i /tmp/app01.tar
|
|
docker save app01:latest | ssh -o StrictHostKeyChecking=no -p "$PORT" -i ~/.ssh/id_rsa "$USER@$HOST" "docker load"
|
|
|
|
# 执行部署
|
|
ssh -o StrictHostKeyChecking=no -p "$PORT" -i ~/.ssh/id_rsa "$USER@$HOST" << 'EOF'
|
|
cd ~/app01
|
|
|
|
# 停止旧容器
|
|
docker stop app01-blue 2>/dev/null || true
|
|
docker rm app01-blue 2>/dev/null || true
|
|
|
|
# 启动新容器
|
|
docker run -d \
|
|
--name app01-blue \
|
|
--restart unless-stopped \
|
|
-p 127.0.0.1:8001:8000 \
|
|
-e PORT=8000 \
|
|
app01:latest
|
|
|
|
# 等待健康检查
|
|
sleep 5
|
|
if curl -sf http://localhost:8001/health > /dev/null; then
|
|
echo "✓ 健康检查通过"
|
|
# 更新 Nginx 上游
|
|
echo "upstream app_backend { server 127.0.0.1:8001; }" | sudo tee /etc/nginx/conf.d/upstream.conf
|
|
sudo nginx -s reload
|
|
echo "✓ 部署完成"
|
|
else
|
|
echo "✗ 健康检查失败，执行回滚"
|
|
docker stop app01-blue && docker rm app01-blue
|
|
exit 1
|
|
fi
|
|
EOF
|
|
|
|
- name: Verify deployment
|
|
run: |
|
|
sleep 10
|
|
curl -f https://app.gch3n.online/health || exit 1
|
|
echo "✓ 部署验证成功"
|