From 98183eeb038d351f377ce7ae49dadadc88808e2f Mon Sep 17 00:00:00 2001 From: gxl Date: Wed, 3 Jun 2026 15:02:05 +0800 Subject: [PATCH] 38 --- .woodpecker.yaml | 61 +++++++++++++++++++++++------------------------- 1 file changed, 29 insertions(+), 32 deletions(-) diff --git a/.woodpecker.yaml b/.woodpecker.yaml index 6f0cb05..7dbcb68 100644 --- a/.woodpecker.yaml +++ b/.woodpecker.yaml @@ -1,22 +1,18 @@ # .woodpecker.yaml -# 🛑 终极完全体开关：无论项目、私服、部署机器怎么变，只改这 6 行！ -environment: - # 1. 业务与私服配置（已换成本地真实自建域名） - APP_REGISTRY: "push.lovestory.cyou" # 👈 镜像推送走专属通道 - APP_PULL_REGISTRY: "registry.lovestory.cyou" # 👈 远程136机器拉取走加速总门户 - PROJECT_NAME: "abhors/demo" - CONTAINER_NAME: "demo-container" - - # 2. 远程部署机器配置 - DEPLOY_HOST: "43.143.243.136" # 👈 你的腾讯云 136 服务器 IP - DEPLOY_PORT: 22 # 👈 SSH 端口 - DEPLOY_USER_SECRET: "136_ssh_user" # 👈 对应系统 Secret 里的用户名别名 - DEPLOY_PASS_SECRET: "136_ssh_password" # 👈 对应系统 Secret 里的密码别名 +# 💡 全局变量块 +variables: + - &APP_REGISTRY "push.lovestory.cyou" + - &APP_PULL_REGISTRY "registry.lovestory.cyou" + - &PROJECT_NAME "abhors/demo" + - &CONTAINER_NAME "demo-container" + - &DEPLOY_HOST "43.143.243.136" + - &DEPLOY_PORT 22 + - &DEPLOY_USER_SECRET "136_ssh_user" + - &DEPLOY_PASS_SECRET "136_ssh_password" steps: - name: Java 构建 - # 💡 隐式拦截：这里不加任何域名，Woodpecker宿主机会通过本地daemon.json自动走registry.lovestory.cyou下载并秒级缓存 image: library/maven:3.9.6-eclipse-temurin-17 pull: true commands: @@ -29,11 +25,17 @@ steps: - name: 镜像构建与推送 image: woodpeckerci/plugin-docker-buildx:latest + privileged: true + # 💡 解决方案：通过 environment 将锚点转化为当前步骤的环境变量 + environment: + REGISTRY_DOMAIN: *APP_REGISTRY + PROJECT_PATH: *PROJECT_NAME volumes: - /var/run/docker.sock:/var/run/docker.sock settings: - repo: ${APP_REGISTRY}/${PROJECT_NAME} - registry: ${APP_REGISTRY} + # 💡 完美拼接：此时可以使用标准的系统变量拼接，完美通过 Linter！ + repo: ${REGISTRY_DOMAIN}/${PROJECT_PATH} + registry: *APP_REGISTRY username: from_secret: nexus_docker_username password: @@ -43,30 +45,25 @@ steps: branch: master - name: 远程终端部署 - # 💡 完美闭环：这里直接走你的私服拉取，刚才通过 1ms 毫秒源缓存下来的插件，这里将是“秒拉” image: registry.lovestory.cyou/appleboy/drone-ssh:latest settings: - host: ${DEPLOY_HOST} - port: ${DEPLOY_PORT} + host: *DEPLOY_HOST + port: *DEPLOY_PORT username: - from_secret: ${DEPLOY_USER_SECRET} + from_secret: *DEPLOY_USER_SECRET password: - from_secret: ${DEPLOY_PASS_SECRET} - - # 安全传递与跨网传输 + from_secret: *DEPLOY_PASS_SECRET secrets: [ nexus_docker_username, nexus_docker_password ] - envs: [ nexus_docker_username, nexus_docker_password, APP_REGISTRY, APP_PULL_REGISTRY, PROJECT_NAME, CONTAINER_NAME ] + envs: [ nexus_docker_username, nexus_docker_password ] script: - echo "=========================================" - - echo "🚀 开始部署节点：${DEPLOY_HOST}" + - echo "🚀 开始部署节点：*DEPLOY_HOST" - echo "=========================================" - # 📦 远程 136 机器由于通过 Group 组仓（registry.）更能享受到本地缓存的红利 - - docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "$APP_PULL_REGISTRY" - - docker stop "$CONTAINER_NAME" || true - - docker rm "$CONTAINER_NAME" || true - # 💡 细节优化：136机器拉取时，由于你的Hosted仓已经聚合在Group仓里，所以136直接走registry.lovestory.cyou拉取即可 - - docker pull "$APP_PULL_REGISTRY"/"$PROJECT_NAME":latest - - docker run -d --name "$CONTAINER_NAME" -p 8080:8080 --restart always "$APP_PULL_REGISTRY"/"$PROJECT_NAME":latest + - docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "registry.lovestory.cyou" + - docker stop "demo-container" || true + - docker rm "demo-container" || true + - docker pull "registry.lovestory.cyou/abhors/demo:latest" + - docker run -d --name "demo-container" -p 8080:8080 --restart always "registry.lovestory.cyou/abhors/demo:latest" when: event: push branch: master \ No newline at end of file