diff --git a/.gitea/workflows/ci-prod.yml b/.gitea/workflows/ci-prod.yml index 7e61068..ef23864 100644 --- a/.gitea/workflows/ci-prod.yml +++ b/.gitea/workflows/ci-prod.yml @@ -149,43 +149,46 @@ jobs: exit 1 fi - rm -f /tmp/working_key /tmp/raw_key - printf "%s\n" "${RAW_KEY}" | tr -d '\r' > /tmp/raw_key - HEADER=$(grep "BEGIN" /tmp/raw_key) - FOOTER=$(grep "END" /tmp/raw_key) - BODY=$(grep -v "BEGIN" /tmp/raw_key | grep -v "END" | tr -d " \r\n") - printf "%s\n" "$HEADER" > /tmp/working_key - printf "%s\n" "$BODY" | fold -w 64 >> /tmp/working_key - printf "%s\n" "$FOOTER" >> /tmp/working_key - echo "" >> /tmp/working_key - chmod 600 /tmp/working_key + KEY_B64=$(printf "%s" "${RAW_KEY}" | tr -d '\r' | base64 | tr -d '\r\n') + SCRIPT_B64=$(base64 scripts/backup_db.sh | tr -d '\r\n') + [ -f .env ] && ENV_B64=$(base64 .env | tr -d '\r\n') || ENV_B64="" - echo "=== 🔍 DIAGNOSTIC DETAILS ===" - echo "Target Host: ${TARGET_USER}@${TARGET_HOST} (Port: ${PORT})" - echo "Destination Directory: ${DEST_DIR}" - echo "Current Directory: $(pwd)" - echo "Script Exists: $([ -f scripts/backup_db.sh ] && echo 'YES' || echo 'NO')" - - echo "=== 🔑 KEY FINGERPRINT ===" - ssh-keygen -l -f /tmp/working_key - - SSH_CMD="ssh -p ${PORT} -i /tmp/working_key -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" - - echo "=== 🚀 EXECUTING REMOTE COMMAND ===" - $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" - - echo "=== 📦 TRANSFERRING SCRIPT & ENV ===" - if command -v rsync >/dev/null 2>&1; then - echo "Using rsync for file transfer..." - rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" - [ -f .env ] || touch .env - rsync -avz -e "$SSH_CMD" .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" - else - echo "Using scp for file transfer..." - scp -P ${PORT} -i /tmp/working_key -o StrictHostKeyChecking=no scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" - [ -f .env ] || touch .env - scp -P ${PORT} -i /tmp/working_key -o StrictHostKeyChecking=no .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" - fi - - $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh" - echo "SUCCESS: Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!" + docker run --rm --net=host \ + -e TARGET_HOST="${TARGET_HOST}" \ + -e TARGET_USER="${TARGET_USER}" \ + -e PORT="${PORT}" \ + -e DEST_DIR="${DEST_DIR}" \ + -e KEY_B64="${KEY_B64}" \ + -e SCRIPT_B64="${SCRIPT_B64}" \ + -e ENV_B64="${ENV_B64}" \ + alpine:latest sh -c ' + apk add --no-cache openssh-client rsync coreutils && \ + (echo "$KEY_B64" | base64 -d 2>/dev/null || echo "$KEY_B64" | base64 --decode) > /tmp/raw_key && \ + HEADER=$(grep "BEGIN" /tmp/raw_key) && \ + FOOTER=$(grep "END" /tmp/raw_key) && \ + BODY=$(grep -v "BEGIN" /tmp/raw_key | grep -v "END" | tr -d " \r\n") && \ + printf "%s\n" "$HEADER" > /tmp/working_key && \ + printf "%s\n" "$BODY" | fold -w 64 >> /tmp/working_key && \ + printf "%s\n" "$FOOTER" >> /tmp/working_key && \ + echo "" >> /tmp/working_key && \ + chmod 600 /tmp/working_key && \ + (echo "$SCRIPT_B64" | base64 -d 2>/dev/null || echo "$SCRIPT_B64" | base64 --decode) > /tmp/backup_db.sh && \ + if [ -n "$ENV_B64" ]; then \ + (echo "$ENV_B64" | base64 -d 2>/dev/null || echo "$ENV_B64" | base64 --decode) > /tmp/.env ; \ + else \ + touch /tmp/.env ; \ + fi && \ + echo "=== 🔍 DIAGNOSTIC DETAILS ===" && \ + echo "Target Host: ${TARGET_USER}@${TARGET_HOST} (Port: ${PORT})" && \ + echo "Destination Directory: ${DEST_DIR}" && \ + echo "=== 🔑 KEY FINGERPRINT ===" && \ + ssh-keygen -l -f /tmp/working_key && \ + SSH_CMD="ssh -p ${PORT} -i /tmp/working_key -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \ + echo "=== 🚀 EXECUTING REMOTE COMMAND ===" && \ + $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \ + echo "=== 📦 RSYNC TRANSFER SCRIPT & ENV ===" && \ + rsync -avz -e "$SSH_CMD" /tmp/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/backup_db.sh" && \ + rsync -avz -e "$SSH_CMD" /tmp/.env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" && \ + $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh" && \ + echo "SUCCESS: Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!" + '