ucef/as-talange
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): execute deployment directly in runner step environment without nested container

Browse Source
This commit is contained in:
ucef
2026-09-04 08:03:23 +02:00
parent c5a4ae9498
commit d987b9e46c
1 changed files with 40 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci-prod.yml
+40 -42
View File
@@ -146,48 +146,46 @@ jobs:
echo "=========================================================================" echo "========================================================================="
echo "ERREUR : Le secret PROD_DB_SSH_KEY est totalement vide dans Gitea !" echo "ERREUR : Le secret PROD_DB_SSH_KEY est totalement vide dans Gitea !"
echo "=========================================================================" echo "========================================================================="
exit 1
fi fi
KEY_B64=$(printf "%s" "${RAW_KEY}" | tr -d '\r' | base64 | tr -d '\r\n') rm -f /tmp/working_key /tmp/raw_key
WORK_DIR="${GITHUB_WORKSPACE:-$(pwd)}" printf "%s\n" "${RAW_KEY}" | tr -d '\r' > /tmp/raw_key
HEADER=$(grep "BEGIN" /tmp/raw_key)
FOOTER=$(grep "END" /tmp/raw_key)
BODY=$(grep -v "BEGIN" /tmp/raw_key | grep -v "END" | tr -d " \r\n")
printf "%s\n" "$HEADER" > /tmp/working_key
printf "%s\n" "$BODY" | fold -w 64 >> /tmp/working_key
printf "%s\n" "$FOOTER" >> /tmp/working_key
echo "" >> /tmp/working_key
chmod 600 /tmp/working_key
docker run --rm --net=host \ echo "=== 🔍 DIAGNOSTIC DETAILS ==="
-v "${WORK_DIR}:/workspace" -w /workspace \ echo "Target Host: ${TARGET_USER}@${TARGET_HOST} (Port: ${PORT})"
-e TARGET_HOST="${TARGET_HOST}" \ echo "Destination Directory: ${DEST_DIR}"
-e TARGET_USER="${TARGET_USER}" \ echo "Current Directory: $(pwd)"
-e PORT="${PORT}" \ echo "Script Exists: $([ -f scripts/backup_db.sh ] && echo 'YES' || echo 'NO')"
-e DEST_DIR="${DEST_DIR}" \
-e KEY_B64="${KEY_B64}" \ echo "=== 🔑 KEY FINGERPRINT ==="
alpine:latest sh -c ' ssh-keygen -l -f /tmp/working_key
apk add --no-cache openssh-client rsync coreutils && \
(echo "$KEY_B64" | base64 -d 2>/dev/null || echo "$KEY_B64" | base64 --decode) > /tmp/raw_key && \ SSH_CMD="ssh -p ${PORT} -i /tmp/working_key -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15"
HEADER=$(grep "BEGIN" /tmp/raw_key) && \
FOOTER=$(grep "END" /tmp/raw_key) && \ echo "=== 🚀 EXECUTING REMOTE COMMAND ==="
BODY=$(grep -v "BEGIN" /tmp/raw_key | grep -v "END" | tr -d " \r\n") && \ $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts"
printf "%s\n" "$HEADER" > /tmp/working_key && \
printf "%s\n" "$BODY" | fold -w 64 >> /tmp/working_key && \ echo "=== 📦 TRANSFERRING SCRIPT & ENV ==="
printf "%s\n" "$FOOTER" >> /tmp/working_key && \ if command -v rsync >/dev/null 2>&1; then
echo "" >> /tmp/working_key && \ echo "Using rsync for file transfer..."
chmod 600 /tmp/working_key && \ rsync -avz -e "$SSH_CMD" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/"
echo "=== 🔍 DIAGNOSTIC DETAILS ===" && \ [ -f .env ] || touch .env
echo "Target Host: ${TARGET_USER}@${TARGET_HOST} (Port: ${PORT})" && \ rsync -avz -e "$SSH_CMD" .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env"
echo "Destination Directory: ${DEST_DIR}" && \ else
echo "Key File Line Count: $(wc -l < /tmp/working_key)" && \ echo "Using scp for file transfer..."
echo "Key File First Line: $(head -n 1 /tmp/working_key)" && \ scp -P ${PORT} -i /tmp/working_key -o StrictHostKeyChecking=no scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/"
echo "=== 🔑 KEY FINGERPRINT ===" && \ [ -f .env ] || touch .env
ssh-keygen -l -f /tmp/working_key && \ scp -P ${PORT} -i /tmp/working_key -o StrictHostKeyChecking=no .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env"
SSH_CMD="ssh -p ${PORT} -i /tmp/working_key -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=15" && \ fi
echo "=== 🚀 EXECUTING REMOTE COMMAND ===" && \
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts" && \ $SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh"
echo "=== 📦 RSYNC TRANSFER SCRIPT ===" && \ echo "SUCCESS: Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!"
if [ -f /workspace/scripts/backup_db.sh ]; then \
rsync -avz -e "$SSH_CMD" /workspace/scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" ; \
else \
echo "ERROR: /workspace/scripts/backup_db.sh not found!" && ls -la /workspace && exit 1 ; \
fi && \
echo "=== 📦 RSYNC TRANSFER ENV ===" && \
[ -f /workspace/.env ] || touch /workspace/.env && \
rsync -avz -e "$SSH_CMD" /workspace/.env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" && \
$SSH_CMD "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh" && \
echo "SUCCESS: Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!"
'