admin
afde214cbb
Configura CI, promoción por rama deploy, backups, preflight, rollback y watcher systemd para DH V2.
112 lines
2.9 KiB
Bash
112 lines
2.9 KiB
Bash
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
|
|
APP="/var/www/dhv2.korexlabs.com"
|
|
KEY="/root/.ssh/dhv2_github"
|
|
WATCHER="/usr/local/sbin/dhv2-auto-deploy"
|
|
SERVICE="/etc/systemd/system/dhv2-auto-deploy.service"
|
|
TIMER="/etc/systemd/system/dhv2-auto-deploy.timer"
|
|
|
|
if [ "$(id -u)" -ne 0 ]; then
|
|
echo "ERROR: ejecutar como root."
|
|
exit 1
|
|
fi
|
|
|
|
cd "$APP"
|
|
[ -d .git ] || { echo "ERROR: $APP no es repositorio Git."; exit 1; }
|
|
[ -f "$KEY" ] || { echo "ERROR: falta $KEY"; exit 1; }
|
|
|
|
git config --global --add safe.directory "$APP" >/dev/null 2>&1 || true
|
|
git config core.sshCommand "ssh -i $KEY -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new"
|
|
|
|
cat > "$WATCHER" <<'WATCH'
|
|
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
|
|
APP="/var/www/dhv2.korexlabs.com"
|
|
KEY="/root/.ssh/dhv2_github"
|
|
LOCK="/var/lock/dhv2-auto-deploy.lock"
|
|
|
|
exec 9>"$LOCK"
|
|
flock -n 9 || exit 0
|
|
|
|
cd "$APP"
|
|
export GIT_SSH_COMMAND="ssh -i $KEY -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new"
|
|
git config --global --add safe.directory "$APP" >/dev/null 2>&1 || true
|
|
|
|
if ! git fetch --quiet origin deploy; then
|
|
echo "No se pudo consultar origin/deploy; producción no se modifica."
|
|
exit 0
|
|
fi
|
|
|
|
TARGET="$(git rev-parse origin/deploy)"
|
|
CURRENT="$(git rev-parse HEAD)"
|
|
|
|
[ "$TARGET" != "$CURRENT" ] || exit 0
|
|
|
|
if ! git merge-base --is-ancestor "$CURRENT" "$TARGET"; then
|
|
echo "ERROR: origin/deploy no es fast-forward desde $CURRENT. Deploy rechazado."
|
|
exit 1
|
|
fi
|
|
|
|
TMP="$(mktemp /root/dhv2-deploy.XXXXXX.sh)"
|
|
trap 'rm -f "$TMP"' EXIT
|
|
|
|
git show "$TARGET:scripts/deploy-github.sh" > "$TMP"
|
|
chmod 700 "$TMP"
|
|
DHV2_DEPLOY_REF=deploy bash "$TMP"
|
|
WATCH
|
|
chmod 700 "$WATCHER"
|
|
|
|
cat > "$SERVICE" <<'UNIT'
|
|
[Unit]
|
|
Description=DH V2 autonomous GitHub deploy check
|
|
After=network-online.target docker.service
|
|
Wants=network-online.target
|
|
Requires=docker.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
User=root
|
|
WorkingDirectory=/var/www/dhv2.korexlabs.com
|
|
ExecStart=/usr/local/sbin/dhv2-auto-deploy
|
|
Nice=10
|
|
IOSchedulingClass=best-effort
|
|
IOSchedulingPriority=6
|
|
UNIT
|
|
|
|
cat > "$TIMER" <<'UNIT'
|
|
[Unit]
|
|
Description=Check DH V2 deploy branch every minute
|
|
|
|
[Timer]
|
|
OnBootSec=45s
|
|
OnUnitInactiveSec=60s
|
|
AccuracySec=10s
|
|
Persistent=true
|
|
Unit=dhv2-auto-deploy.service
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|
|
UNIT
|
|
|
|
systemctl daemon-reload
|
|
systemctl enable --now dhv2-auto-deploy.timer
|
|
|
|
if ! systemctl start dhv2-auto-deploy.service; then
|
|
echo
|
|
echo "ERROR: la comprobación inicial de deploy falló."
|
|
journalctl -u dhv2-auto-deploy.service -n 140 --no-pager || true
|
|
exit 1
|
|
fi
|
|
|
|
echo
|
|
echo "============================================================"
|
|
echo " DH V2 AUTO-DEPLOY INSTALADO Y VALIDADO"
|
|
echo "============================================================"
|
|
echo "Watcher: $WATCHER"
|
|
echo "Timer: dhv2-auto-deploy.timer"
|
|
echo "Logs: journalctl -u dhv2-auto-deploy.service"
|
|
echo "============================================================"
|
|
systemctl --no-pager --full status dhv2-auto-deploy.timer | sed -n '1,16p' || true
|