ucef/as-talange
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): combine --net=host with Base64 payload transfer for key, script, and env to resolve VPN routing and file isolation
AS Talange CI/CD Pipeline - Production / Build & Run Unit Tests (push) Successful in 1m59s
Details
AS Talange CI/CD Pipeline - Production / Deploy to Prod Environment (push) Successful in 1m19s
Details

Browse Source
This commit is contained in:
ucef
2026-09-04 08:10:08 +02:00
parent 2720a2193d
commit c778dea9a0
1 changed files with 42 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci-prod.yml
+41 -38
View File
@@ -149,43 +149,46 @@ jobs:
exit 1 exit 1
fi fi
rm -f /tmp/working_key /tmp/raw_key KEY_B64=$(printf "%s" "${RAW_KEY}" | tr -d '\r' | base64 | tr -d '\r\n')
printf "%s\n" "${RAW_KEY}" | tr -d '\r' > /tmp/raw_key SCRIPT_B64=$(base64 scripts/backup_db.sh | tr -d '\r\n')
HEADER=$(grep "BEGIN" /tmp/raw_key) [ -f .env ] && ENV_B64=$(base64 .env | tr -d '\r\n') || ENV_B64=""
FOOTER=$(grep "END" /tmp/raw_key)
BODY=$(grep -v "BEGIN" /tmp/raw_key | grep -v "END" | tr -d " \r\n")
printf "%s\n" "$HEADER" > /tmp/working_key
printf "%s\n" "$BODY" | fold -w 64 >> /tmp/working_key
printf "%s\n" "$FOOTER" >> /tmp/working_key
echo "" >> /tmp/working_key
chmod 600 /tmp/working_key
echo "=== 🔍 DIAGNOSTIC DETAILS ===" docker run --rm --net=host \
echo "Target Host: ${TARGET_USER}@${TARGET_HOST} (Port: ${PORT})" -e TARGET_HOST="${TARGET_HOST}" \
echo "Destination Directory: ${DEST_DIR}" -e TARGET_USER="${TARGET_USER}" \
echo "Current Directory: $(pwd)" -e PORT="${PORT}" \
echo "Script Exists: $([ -f scripts/backup_db.sh ] && echo 'YES' || echo 'NO')" -e DEST_DIR="${DEST_DIR}" \
-e KEY_B64="${KEY_B64}" \
echo "=== 🔑 KEY FINGERPRINT ===" -e SCRIPT_B64="${SCRIPT_B64}" \
ssh-keygen -l -f /tmp/working_key -e ENV_B64="${ENV_B64}" \
alpine:latest sh -c '
SSH_CMD="ssh -p ${PORT} -i /tmp/working_key -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" apk add --no-cache openssh-client rsync coreutils && \
(echo "$KEY_B64" | base64 -d 2>/dev/null || echo "$KEY_B64" | base64 --decode) > /tmp/raw_key && \
echo "=== 🚀 EXECUTING REMOTE COMMAND ===" HEADER=$(grep "BEGIN" /tmp/raw_key) && \
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" FOOTER=$(grep "END" /tmp/raw_key) && \
BODY=$(grep -v "BEGIN" /tmp/raw_key | grep -v "END" | tr -d " \r\n") && \
echo "=== 📦 TRANSFERRING SCRIPT & ENV ===" printf "%s\n" "$HEADER" > /tmp/working_key && \
if command -v rsync >/dev/null 2>&1; then printf "%s\n" "$BODY" | fold -w 64 >> /tmp/working_key && \
echo "Using rsync for file transfer..." printf "%s\n" "$FOOTER" >> /tmp/working_key && \
rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" echo "" >> /tmp/working_key && \
[ -f .env ] || touch .env chmod 600 /tmp/working_key && \
rsync -avz -e "$SSH_CMD" .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" (echo "$SCRIPT_B64" | base64 -d 2>/dev/null || echo "$SCRIPT_B64" | base64 --decode) > /tmp/backup_db.sh && \
else if [ -n "$ENV_B64" ]; then \
echo "Using scp for file transfer..." (echo "$ENV_B64" | base64 -d 2>/dev/null || echo "$ENV_B64" | base64 --decode) > /tmp/.env ; \
scp -P ${PORT} -i /tmp/working_key -o StrictHostKeyChecking=no scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" else \
[ -f .env ] || touch .env touch /tmp/.env ; \
scp -P ${PORT} -i /tmp/working_key -o StrictHostKeyChecking=no .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" fi && \
fi echo "=== 🔍 DIAGNOSTIC DETAILS ===" && \
echo "Target Host: ${TARGET_USER}@${TARGET_HOST} (Port: ${PORT})" && \
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh" echo "Destination Directory: ${DEST_DIR}" && \
echo "=== 🔑 KEY FINGERPRINT ===" && \
ssh-keygen -l -f /tmp/working_key && \
SSH_CMD="ssh -p ${PORT} -i /tmp/working_key -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \
echo "=== 🚀 EXECUTING REMOTE COMMAND ===" && \
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \
echo "=== 📦 RSYNC TRANSFER SCRIPT & ENV ===" && \
rsync -avz -e "$SSH_CMD" /tmp/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/backup_db.sh" && \
rsync -avz -e "$SSH_CMD" /tmp/.env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" && \
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh" && \
echo "SUCCESS: Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!" echo "SUCCESS: Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!"
'