ci: init build workflow [skip ci]
This commit is contained in:
@@ -0,0 +1,114 @@
|
|||||||
|
name: build
|
||||||
|
|
||||||
|
# 前端应用 CI：构建 → 打包 zip → 推 Nexus raw → 通知 projman 建档
|
||||||
|
# 触发：push 到 main / 手动 Run workflow
|
||||||
|
# 链路：clone 源码 -> node 容器 npm ci + npm run build -> 打包 dist 为 zip -> 推 Nexus raw -> 通知 projman 建档
|
||||||
|
# 依赖仓库 Secrets：DEPLOY_TOKEN（webhook 鉴权）、NEXUS_USER / NEXUS_PASSWORD（上传 zip 到 Nexus raw）
|
||||||
|
# 注意：CI 构建后自动建档（status=pending），前端发布仍由用户在「前端发布」Tab 点部署触发
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches: [ main ]
|
||||||
|
workflow_dispatch:
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
build:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
container:
|
||||||
|
image: docker:24
|
||||||
|
options: --network infra-infra-net
|
||||||
|
steps:
|
||||||
|
- name: 安装 git / curl / zip（alpine）
|
||||||
|
run: |
|
||||||
|
set -e
|
||||||
|
# runner 容器偶发拉不到公网 apk 源（dl-cdn.alpinelinux.org 报 Permission denied 并卡满 60s×2），
|
||||||
|
# 这里先按可达性挑一个能通的镜像源再装包，避免整条流水线卡死在第一步、后续步骤全被 skip
|
||||||
|
chosen=""
|
||||||
|
for host in mirrors.aliyun.com mirrors.huaweicloud.com mirrors.cloud.tencent.com dl-cdn.alpinelinux.org; do
|
||||||
|
if wget -q -T 6 -O /dev/null "https://${host}/alpine/v3.20/main/x86_64/APKINDEX.tar.gz"; then
|
||||||
|
chosen="${host}"
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
echo "apk 源不可达: ${host}"
|
||||||
|
done
|
||||||
|
if [ -z "${chosen}" ]; then echo "所有 apk 源均不可达，请检查 runner 容器网络/代理"; exit 1; fi
|
||||||
|
echo "使用 apk 源: ${chosen}"
|
||||||
|
sed -i "s#dl-cdn.alpinelinux.org#${chosen}#g" /etc/apk/repositories
|
||||||
|
apk add --no-cache git curl zip
|
||||||
|
|
||||||
|
# 内网 Gitea 无法访问 GitHub 拉 actions/checkout，手动 clone 本仓库
|
||||||
|
- name: 拉取源码（内网无 GitHub，手动 clone 本仓库）
|
||||||
|
env:
|
||||||
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
run: |
|
||||||
|
git clone --depth 1 --branch main "http://x-access-token:${GITHUB_TOKEN}@gitea.yunhaixingtong.com/${{ github.repository }}.git" /tmp/src
|
||||||
|
cp -a /tmp/src/. .
|
||||||
|
rm -rf /tmp/src
|
||||||
|
# 取提交备注首行，脱去换行/双引号/反斜杠（避免破坏 webhook JSON），截断到 200 字符
|
||||||
|
COMMIT_MSG=$(git log -1 --pretty=%s | tr '\n' ' ' | sed 's/["\\]/ /g' | cut -c1-200)
|
||||||
|
echo "COMMIT_MSG=${COMMIT_MSG}" >> "$GITHUB_ENV"
|
||||||
|
|
||||||
|
# 前端构建：起独立 node 容器（通过 docker.sock 调宿主 dockerd）
|
||||||
|
# node:20 镜像预装 npm，npm ci 按 lockfile 安装依赖
|
||||||
|
- name: 构建前端（node 容器）
|
||||||
|
run: |
|
||||||
|
set -e
|
||||||
|
# 构建容器名必须全局唯一：runner 挂的是宿主 docker.sock，容器名在整个 daemon 上共享
|
||||||
|
# 命名空间。固定名会在多仓/多条 workflow 并发时互相 docker rm -f 掉对方正在构建的
|
||||||
|
# 容器，表现为无编译报错的 exit 137（SIGKILL，2026-10-21 实测复现）。
|
||||||
|
# GITHUB_RUN_ID 实例级唯一，再拼时间戳兜底。
|
||||||
|
BUILD_CONTAINER="frontbuild-${GITHUB_RUN_ID:-0}-$(date +%s)"
|
||||||
|
echo "BUILD_CONTAINER=${BUILD_CONTAINER}"
|
||||||
|
docker rm -f "$BUILD_CONTAINER" 2>/dev/null || true
|
||||||
|
docker run -d --name "$BUILD_CONTAINER" -w /build node:20 sleep 3600
|
||||||
|
docker cp "${PWD}/." "$BUILD_CONTAINER":/build/
|
||||||
|
docker exec "$BUILD_CONTAINER" sh -c '
|
||||||
|
set -e
|
||||||
|
cd /build
|
||||||
|
if [ -f .npmrc ]; then sed -i "/SASS_BINARY_PATH/d" .npmrc; fi
|
||||||
|
# 国内镜像源：内网直连 registry.npmjs.org 跨境极慢（实测 npm install 12 分 46 秒 / 754 包）
|
||||||
|
npm config set registry https://registry.npmmirror.com
|
||||||
|
npm ci
|
||||||
|
npm run build
|
||||||
|
'
|
||||||
|
echo "=== dist 产物 ==="
|
||||||
|
docker exec "$BUILD_CONTAINER" sh -c 'ls -la /build/dist/ | head -20'
|
||||||
|
# 从容器 cp dist 到宿主工作目录
|
||||||
|
docker cp "$BUILD_CONTAINER":/build/dist ./dist
|
||||||
|
docker rm -f "$BUILD_CONTAINER"
|
||||||
|
echo "BUILD CHECK OK"
|
||||||
|
|
||||||
|
# 打包 dist → zip（进入 dist 目录打包，zip 根目录直接是 html/css/js 文件）
|
||||||
|
- name: 打包产物
|
||||||
|
run: |
|
||||||
|
TAG=$(echo "$GITHUB_SHA" | cut -c1-8)
|
||||||
|
ZIP_FILE="aca-t-portfolio-view-${TAG}.zip"
|
||||||
|
cd dist && zip -r "../${ZIP_FILE}" . && cd ..
|
||||||
|
echo "ZIP_FILE=${ZIP_FILE}" >> "$GITHUB_ENV"
|
||||||
|
echo "TAG=${TAG}" >> "$GITHUB_ENV"
|
||||||
|
ls -la "${ZIP_FILE}"
|
||||||
|
|
||||||
|
# 上传到 Nexus raw 仓库
|
||||||
|
- name: 上传产物到 Nexus
|
||||||
|
env:
|
||||||
|
NEXUS_USER: ${{ secrets.NEXUS_USER }}
|
||||||
|
NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
|
||||||
|
run: |
|
||||||
|
set -e
|
||||||
|
NEXUS_URL="http://nexus.yunhaixingtong.com:8081/repository/front-hosted/${ZIP_FILE}"
|
||||||
|
# -f：HTTP >=400 时 curl 以非零退出，仓库不存在/认证失败必须让 job 变红，否则建档的是不存在的 URL
|
||||||
|
curl -sSf -X PUT \
|
||||||
|
-u "${NEXUS_USER}:${NEXUS_PASSWORD}" \
|
||||||
|
--upload-file "${ZIP_FILE}" \
|
||||||
|
"${NEXUS_URL}"
|
||||||
|
echo "NEXUS_URL=${NEXUS_URL}" >> "$GITHUB_ENV"
|
||||||
|
echo "uploaded to ${NEXUS_URL}"
|
||||||
|
|
||||||
|
# 通知 projman：webhook 收到后建档（type=front, status=pending），部署由用户在「前端发布」Tab 手动触发
|
||||||
|
- name: 通知 projman 建档
|
||||||
|
run: |
|
||||||
|
set -e
|
||||||
|
curl -sSf -X POST "http://192.168.10.160:8090/projman/api/deploy/webhook" \
|
||||||
|
-H "Content-Type: application/json" \
|
||||||
|
-H "X-Deploy-Token: ${{ secrets.DEPLOY_TOKEN }}" \
|
||||||
|
-d "{\"app\":\"aca-t-portfolio\",\"front\":\"view\",\"tag\":\"${TAG}\",\"sha\":\"${GITHUB_SHA}\",\"message\":\"${COMMIT_MSG}\",\"nexusUrl\":\"${NEXUS_URL}\"}"
|
||||||
Reference in New Issue
Block a user