From 7acfabfa70210e72792a1a51cb740c9a18bc672b Mon Sep 17 00:00:00 2001 From: chenxing Date: Thu, 10 Sep 2026 14:59:53 +0800 Subject: [PATCH] =?UTF-8?q?=E5=88=A0=E9=99=A4=E7=9B=AE=E5=BD=95=E3=80=8C.g?= =?UTF-8?q?itea=E3=80=8D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .gitea/workflows/build.yml | 87 -------------------------------------- 1 file changed, 87 deletions(-) delete mode 100644 .gitea/workflows/build.yml diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml deleted file mode 100644 index 819baf4..0000000 --- a/.gitea/workflows/build.yml +++ /dev/null @@ -1,87 +0,0 @@ -name: build - -# Spring Boot 应用 CI(仿 UserBase ci.yml build 阶段 + projman webhook 建档,不含部署) -# 触发:push 到 main / 手动 Run workflow(可勾选缓存重建) -# 链路:clone 源码 -> maven 容器构建 jar(复用宿主 m2 缓存)-> docker build -f docker/Dockerfile -> push Nexus -> 通知 projman 建档(部署由运维在 DeployTab 手动触发) -# 依赖仓库 Secrets:NEXUS_USER / NEXUS_PASSWORD(docker-hosted 推送)/ DEPLOY_TOKEN(webhook 鉴权) -# 依赖 docker/Dockerfile(由 projman 注入,开发者也可自备——已写则尊重不覆盖) -# maven 依赖走 http://nexus:8081/repository/maven-public/(infra-infra-net 内容器名直连,匿名可拉公司 yh-* starter) - -on: - push: - branches: [ main ] - workflow_dispatch: - inputs: - cache_bust: - description: '构建前清空 maven m2 缓存' - required: false - default: 'false' - -jobs: - build-push: - runs-on: ubuntu-latest - container: - image: docker:24 - options: --network infra-infra-net - steps: - - name: 安装 git / curl(alpine) - run: apk add --no-cache git curl - - # 内网 Gitea 无法访问 GitHub 拉 actions/checkout,手动 clone 本仓库 - - name: 拉取源码(内网无 GitHub,手动 clone 本仓库) - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - run: | - git clone --depth 1 --branch main "http://x-access-token:${GITHUB_TOKEN}@gitea.yunhaixingtong.com/${{ github.repository }}.git" /tmp/src - cp -a /tmp/src/. . - rm -rf /tmp/src - # 取提交备注首行,脱去换行/双引号/反斜杠(避免破坏 webhook JSON),截断到 200 字符 - COMMIT_MSG=$(git log -1 --pretty=%s | tr '\n' ' ' | sed 's/["\\]/ /g' | cut -c1-200) - echo "COMMIT_MSG=${COMMIT_MSG}" >> "$GITHUB_ENV" - echo "MB=$(echo ${GITHUB_SHA} | cut -c1-6)" >> "$GITHUB_ENV" - - # 可选:清空 m2 缓存(仅手动勾选 cache_bust 时) - - name: 可选清空 m2 缓存 - if: ${{ inputs.cache_bust == 'true' }} - run: | - docker run --rm -v /opt/docker/projman-m2:/root/.m2 alpine sh -c 'rm -rf /root/.m2/*' - echo "m2 cache busted" - - # maven 构建:起独立 maven 容器(入 infra-infra-net 用容器名 nexus 直连 maven-public) - # 通过 docker.sock 调宿主 dockerd,故 -v 路径按宿主解析;用 docker cp 进出源码/产物 - # m2 缓存挂宿主固定目录 /opt/docker/projman-m2,跨构建复用依赖 - # settings.xml 用 profile 方式追加 nexus maven-public 仓库(匿名可拉,不带凭据) - # maven 实际产物名 = artifactId-version.jar(随 pom 变,-DfinalName 命令行 property 不可靠覆盖不了), - # 故 mvn package 后在容器内 cp 成固定名 app.jar,使 docker cp 与 docker/Dockerfile 的 COPY target/app.jar 绑定 - - name: 构建 jar(maven 容器,复用宿主 m2 缓存) - run: | - set -e - docker rm -f mavenbuild-${MB} 2>/dev/null || true - docker run -d --name mavenbuild-${MB} \ - --network infra-infra-net \ - -v /opt/docker/projman-m2:/root/.m2 \ - -w /build maven:3.6.3-jdk-8 sleep 3600 - docker cp "${PWD}/." mavenbuild-${MB}:/build/ - docker exec mavenbuild-${MB} sh -c "printf '%s' 'nexus-reponexus-internalhttp://nexus:8081/repository/maven-public/truetruealwaysnexus-repo' > /root/.m2/settings.xml" - docker exec mavenbuild-${MB} sh -c 'cd /build && mvn -B -DskipTests clean package' - docker exec mavenbuild-${MB} sh -c 'cd /build/target && cp *.jar app.jar' - mkdir -p "${PWD}/target" - docker cp mavenbuild-${MB}:/build/target/app.jar "${PWD}/target/app.jar" - docker rm -f mavenbuild-${MB} - - - name: 构建并推送镜像 - run: | - set -e - TAG=$(echo "$GITHUB_SHA" | cut -c1-8) - echo "${{ secrets.NEXUS_PASSWORD }}" | docker login nexus:8083 -u "${{ secrets.NEXUS_USER }}" --password-stdin - docker build -t "nexus:8083/docker-hosted/userbase-service:${TAG}" -f docker/Dockerfile . - docker push "nexus:8083/docker-hosted/userbase-service:${TAG}" - echo "TAG=${TAG}" >> "$GITHUB_ENV" - - # 通知 projman:webhook 收到后只建档 Release(status=pending),部署由运维在 DeployTab 手动触发(App.deployMode=manual) - - name: 通知 projman 建档(部署由运维手动触发) - run: | - curl -sS -X POST "http://192.168.10.160:8090/projman/api/deploy/webhook" \ - -H "Content-Type: application/json" \ - -H "X-Deploy-Token: ${{ secrets.DEPLOY_TOKEN }}" \ - -d "{\"app\":\"userbase\",\"tag\":\"${TAG}\",\"sha\":\"${GITHUB_SHA}\",\"message\":\"${COMMIT_MSG}\"}"