117 lines
2.9 KiB
Bash
117 lines
2.9 KiB
Bash
#!/usr/bin/env sh
|
|
set -eu
|
|
|
|
if [ "$#" -ne 4 ]; then
|
|
echo "用法: $0 <镜像仓库> <镜像标签> <逗号分隔服务> <环境文件>" >&2
|
|
exit 2
|
|
fi
|
|
|
|
IMAGE_REPOSITORY="$1"
|
|
IMAGE_TAG="$2"
|
|
SERVICE_CSV="$3"
|
|
ENV_FILE="$4"
|
|
|
|
SSH_TARGET="${DEVELOPMENT_SSH_TARGET:-deploy@172.31.198.8}"
|
|
SSH_KEY="${DEVELOPMENT_SSH_KEY:-/var/jenkins_home/.ssh/dev_deploy}"
|
|
SSH_KNOWN_HOSTS="${DEVELOPMENT_SSH_KNOWN_HOSTS:-/var/jenkins_home/.ssh/known_hosts}"
|
|
REMOTE_DIR="${DEVELOPMENT_DEPLOY_DIR:-/opt/firstleg/application}"
|
|
COMPOSE_FILE="deploy/docker-compose.yml"
|
|
|
|
if [ ! -f "$SSH_KEY" ]; then
|
|
echo "开发环境 SSH 私钥不存在: $SSH_KEY" >&2
|
|
exit 2
|
|
fi
|
|
if [ ! -f "$SSH_KNOWN_HOSTS" ]; then
|
|
echo "SSH 主机指纹文件不存在: $SSH_KNOWN_HOSTS" >&2
|
|
exit 2
|
|
fi
|
|
if [ ! -f "$ENV_FILE" ]; then
|
|
echo "开发环境变量文件不存在: $ENV_FILE" >&2
|
|
exit 2
|
|
fi
|
|
if [ ! -f "$COMPOSE_FILE" ]; then
|
|
echo "Compose 文件不存在: $COMPOSE_FILE" >&2
|
|
exit 2
|
|
fi
|
|
|
|
SERVICES=$(printf '%s' "$SERVICE_CSV" | tr ',' ' ')
|
|
for service in $SERVICES; do
|
|
case "$service" in
|
|
*[!A-Za-z0-9_-]*|'')
|
|
echo "非法服务名: $service" >&2
|
|
exit 2
|
|
;;
|
|
esac
|
|
done
|
|
|
|
run_ssh() {
|
|
ssh -i "$SSH_KEY" \
|
|
-o BatchMode=yes \
|
|
-o StrictHostKeyChecking=yes \
|
|
-o UserKnownHostsFile="$SSH_KNOWN_HOSTS" \
|
|
-o ConnectTimeout=10 \
|
|
"$SSH_TARGET" "$@"
|
|
}
|
|
|
|
run_scp() {
|
|
scp -i "$SSH_KEY" \
|
|
-o BatchMode=yes \
|
|
-o StrictHostKeyChecking=yes \
|
|
-o UserKnownHostsFile="$SSH_KNOWN_HOSTS" \
|
|
-o ConnectTimeout=10 \
|
|
"$@"
|
|
}
|
|
|
|
run_ssh install -d -m 750 "$REMOTE_DIR"
|
|
|
|
SUFFIX="${IMAGE_TAG}.$$.${SERVICE_CSV}"
|
|
REMOTE_ENV_TMP="$REMOTE_DIR/.env.$SUFFIX.tmp"
|
|
REMOTE_COMPOSE_TMP="$REMOTE_DIR/docker-compose.yml.$SUFFIX.tmp"
|
|
|
|
run_scp "$ENV_FILE" "$SSH_TARGET:$REMOTE_ENV_TMP"
|
|
run_scp "$COMPOSE_FILE" "$SSH_TARGET:$REMOTE_COMPOSE_TMP"
|
|
|
|
run_ssh sh -s -- "$REMOTE_DIR" "$REMOTE_ENV_TMP" "$REMOTE_COMPOSE_TMP" <<'REMOTE_PREPARE'
|
|
set -eu
|
|
remote_dir="$1"
|
|
env_tmp="$2"
|
|
compose_tmp="$3"
|
|
chmod 600 "$env_tmp"
|
|
chmod 644 "$compose_tmp"
|
|
mv -f "$env_tmp" "$remote_dir/.env"
|
|
mv -f "$compose_tmp" "$remote_dir/docker-compose.yml"
|
|
REMOTE_PREPARE
|
|
|
|
for service in $SERVICES; do
|
|
image="$IMAGE_REPOSITORY/$service:$IMAGE_TAG"
|
|
docker image inspect "$image" >/dev/null
|
|
echo "传输开发镜像: $image"
|
|
docker save "$image" | gzip -1 | run_ssh 'gzip -dc | docker load'
|
|
done
|
|
|
|
run_ssh sh -s -- "$REMOTE_DIR" "$IMAGE_REPOSITORY" "$IMAGE_TAG" "$SERVICE_CSV" <<'REMOTE_DEPLOY'
|
|
set -eu
|
|
remote_dir="$1"
|
|
image_repository="$2"
|
|
image_tag="$3"
|
|
service_csv="$4"
|
|
services=$(printf '%s' "$service_csv" | tr ',' ' ')
|
|
|
|
cd "$remote_dir"
|
|
export DEPLOY_ENV=development
|
|
export IMAGE_REPOSITORY="$image_repository"
|
|
export IMAGE_TAG="$image_tag"
|
|
|
|
docker compose \
|
|
--project-name firstleg-development \
|
|
--env-file .env \
|
|
-f docker-compose.yml \
|
|
up -d --remove-orphans --pull never $services
|
|
|
|
docker compose \
|
|
--project-name firstleg-development \
|
|
--env-file .env \
|
|
-f docker-compose.yml \
|
|
ps $services
|
|
REMOTE_DEPLOY
|