abhors
/
demo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: abhors:5d6126d302b4f603b7ce13709d342fd44f17795f
Branches Tags
abhors:master
..
compare: abhors:6f30e8dd61dc91c2d11b872b25858eb3ad8f05c4
Branches Tags
abhors:master

No commits in common. "5d6126d302b4f603b7ce13709d342fd44f17795f" and "6f30e8dd61dc91c2d11b872b25858eb3ad8f05c4" have entirely different histories.
5d6126d302 ... 6f30e8dd61

4 changed files with 119 additions and 60 deletions
Show Stats Expand all files Collapse all files

69
.woodpecker.yaml
View File

@ -1,4 +1,20 @@
# 第 97 次部署 # 第 97 次部署
variables:
# --- 仓库与私服配置 ---
- &APP_REGISTRY "push.lovestory.cyou" # 推送镜像的私服域名
- &APP_PULL_REGISTRY "registry.lovestory.cyou" # 拉取基础镜像的私服域名
- &PROJECT_NAME "abhors/demo" # 项目镜像路径与名称
- &PROJECT_PORT "8080" # 运行及映射端口
- &FULL_PUSH_REPO "push.lovestory.cyou/abhors/demo" # 拼接后的完整推送地址
- &FULL_PULL_REPO "push.lovestory.cyou/abhors/demo:latest" # 远程部署拉取的目标地址
# --- 部署目标机配置 ---
- &CONTAINER_NAME "demo-container"
- &DEPLOY_HOST "43.143.243.136"
- &DEPLOY_PORT "22"
- &DEPLOY_USER_SECRET "136_ssh_user"
- &DEPLOY_PASS_SECRET "136_ssh_password"
steps: steps:
- name: Java 构建 - name: Java 构建
image: library/maven:3.9.6-eclipse-temurin-17 image: library/maven:3.9.6-eclipse-temurin-17
@ -17,8 +33,8 @@ steps:
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
settings: settings:
repo: push.lovestory.cyou/abhors/demo repo: *FULL_PUSH_REPO
registry: push.lovestory.cyou registry: *APP_REGISTRY
username: username:
from_secret: nexus_docker_username from_secret: nexus_docker_username
password: password:
@ -31,32 +47,47 @@ steps:
- name: 远程终端部署 - name: 远程终端部署
image: registry.lovestory.cyou/appleboy/drone-ssh:latest image: registry.lovestory.cyou/appleboy/drone-ssh:latest
# 💡 遵循官方文档指引 Step 1：必须在最外层写 environment 块，且必须全部大写！
# 把我们顶部的 YAML 锚点变量，在这里全部转化为系统大写环境变量
environment: environment:
NEXUS_DOCKER_USERNAME: REMOTE_HOST: *DEPLOY_HOST
from_secret: nexus_docker_username CONTAINER_NAME: *CONTAINER_NAME
NEXUS_DOCKER_PASSWORD: FULL_PULL_REPO: *FULL_PULL_REPO
from_secret: nexus_docker_password APP_REGISTRY: *APP_REGISTRY
PROJECT_PORT: *PROJECT_PORT
settings: settings:
host: 43.143.243.136 host: *DEPLOY_HOST
port: 22 port: *DEPLOY_PORT
username: username:
from_secret: 136_ssh_user from_secret: *DEPLOY_USER_SECRET
password: password:
from_secret: 136_ssh_password from_secret: *DEPLOY_PASS_SECRET
secrets: [ nexus_docker_username, nexus_docker_password ] secrets: [ nexus_docker_username, nexus_docker_password ] # 这俩属于私密Secret，直接进通道
# 💡 遵循官方文档指引 Step 2：在 envs 里声明上面这些变量的名字（不区分大小写，插件会自动大写）
# 这样插件就会把这些变量强行同步到远程主机的 SSH 终端进程里
envs: envs:
- NEXUS_DOCKER_USERNAME - remote_host
- NEXUS_DOCKER_PASSWORD - container_name
- full_pull_repo
- app_registry
- project_port
- nexus_docker_username
- nexus_docker_password
# 💡 遵循官方文档指引 Step 3：在脚本里统一改用标准的 $大写 符号来吃环境变量
script: script:
- echo "=========================================" - echo "========================================="
- echo "🚀 开始部署节点：43.143.243.136" - echo "🚀 开始部署节点：$REMOTE_HOST" # 👈 严格按文档走，100% 能打印出 IP
- echo "=========================================" - echo "========================================="
- docker login --username "${NEXUS_DOCKER_USERNAME}" --password "${NEXUS_DOCKER_PASSWORD}" push.lovestory.cyou
- docker stop demo-container || true # 所有的参数均在远程机器通过系统大写变量精准传参
- docker rm demo-container || true - docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "$APP_REGISTRY"
- docker pull push.lovestory.cyou/abhors/demo:latest - docker stop "$CONTAINER_NAME" || true
- docker run -d --name demo-container -p 8080:8080 --restart always push.lovestory.cyou/abhors/demo:latest - docker rm "$CONTAINER_NAME" || true
- docker pull "$FULL_PULL_REPO"
- docker run -d --name "$CONTAINER_NAME" -p "$PROJECT_PORT":"$PROJECT_PORT" --restart always "$FULL_PULL_REPO"
when: when:
event: push event: push
branch: master branch: master

20
.woodpecker/build.yaml
View File

@ -1,4 +1,18 @@
# 遵循文档：不写 kind，不写 name，直接以 steps 开头
# 要求:
# 1.镜像仓库 nexus, 拉取域名 https://registry.lovestory.cyou (必须要https 并且开启'Allow anonymous'否则拉不下来 ) 推送域名 push.lovestory.cyou
# 2.镜像仓库用户名密码配置在woodpecker, nexus_docker_username nexus_docker_password
# 第 102 次部署 # 第 102 次部署
variables:
# --- 仓库与私服配置 ---
- &APP_REGISTRY "push.lovestory.cyou" # 推送镜像的私服域名
- &APP_PULL_REGISTRY "registry.lovestory.cyou" # 拉取基础镜像的私服域名
- &PROJECT_NAME "abhors/demo" # 项目镜像路径与名称
- &PROJECT_PORT "8080" # 运行及映射端口
- &FULL_PUSH_REPO "push.lovestory.cyou/abhors/demo" # 拼接后的完整推送地址
- &FULL_PULL_REPO "push.lovestory.cyou/abhors/demo:latest" # 远程部署拉取的目标地址
- &REPO_MIRROR "https://registry.lovestory.cyou"
steps: steps:
- name: Java 构建 - name: Java 构建
image: library/maven:3.9.6-eclipse-temurin-17 image: library/maven:3.9.6-eclipse-temurin-17
@ -17,13 +31,13 @@ steps:
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
settings: settings:
repo: push.lovestory.cyou/abhors/demo repo: *FULL_PUSH_REPO
registry: push.lovestory.cyou registry: *APP_REGISTRY
username: username:
from_secret: NEXUS_DOCKER_USERNAME from_secret: NEXUS_DOCKER_USERNAME
password: password:
from_secret: NEXUS_DOCKER_PASSWORD from_secret: NEXUS_DOCKER_PASSWORD
mirror: https://registry.lovestory.cyou mirror: *REPO_MIRROR
when: when:
event: push event: push
branch: master branch: master

70
.woodpecker/deploy.yaml
View File

@ -1,43 +1,77 @@
# 第 97 次部署 # 第 97 次部署
variables:
# --- 仓库与私服配置 ---
- &APP_REGISTRY "push.lovestory.cyou" # 推送镜像的私服域名
- &APP_PULL_REGISTRY "registry.lovestory.cyou" # 拉取基础镜像的私服域名
- &PROJECT_NAME "abhors/demo" # 项目镜像路径与名称
- &PROJECT_PORT "8080" # 运行及映射端口
- &FULL_PUSH_REPO "push.lovestory.cyou/abhors/demo" # 拼接后的完整推送地址
- &FULL_PULL_REPO "push.lovestory.cyou/abhors/demo:latest" # 远程部署拉取的目标地址
# --- 部署目标机配置 ---
- &CONTAINER_NAME "demo-container"
- &DEPLOY_HOST "43.143.243.136"
- &DEPLOY_PORT "22"
- &DEPLOY_USER_SECRET "136_ssh_user"
- &DEPLOY_PASS_SECRET "136_ssh_password"
# 遵循文档：顶层直接写 steps 和 matrix，不写 kind 和 name
matrix: matrix:
include: include:
- NODE_NAME: "集群节点A" - NODE_NAME: "集群节点A"
DEPLOY_USER_SECRET: "136_ssh_user" SECRET_NODE_IP: "43.143.243.136"
DEPLOY_PASS_SECRET: "136_ssh_password" SECRET_USER_NAME: "136_ssh_user"
SECRET_PASS_NAME: "136_ssh_password"
# - NODE_NAME: "集群节点B" # - NODE_NAME: "集群节点B"
# DEPLOY_USER_SECRET: "B_user" # SECRET_NODE_IP: "B_host"
# DEPLOY_PASS_SECRET: "B_password" # SECRET_USER_NAME: "B_user"
# SECRET_PASS_NAME: "B_password"
steps: steps:
- name: 远程终端集群部署 - name: 远程终端集群部署
image: appleboy/drone-ssh:latest image: appleboy/drone-ssh:latest
environment: environment:
REMOTE_HOST: *DEPLOY_HOST
CONTAINER_NAME: *CONTAINER_NAME
FULL_PULL_REPO: *FULL_PULL_REPO
APP_REGISTRY: *APP_REGISTRY
PROJECT_PORT: *PROJECT_PORT
NEXUS_DOCKER_USERNAME: NEXUS_DOCKER_USERNAME:
from_secret: NEXUS_DOCKER_USERNAME from_secret: "NEXUS_DOCKER_USERNAME"
NEXUS_DOCKER_PASSWORD: NEXUS_DOCKER_PASSWORD:
from_secret: NEXUS_DOCKER_PASSWORD from_secret: "NEXUS_DOCKER_PASSWORD"
settings: settings:
host: 43.143.243.136 host: *DEPLOY_HOST
username: username:
from_secret: ${DEPLOY_USER_SECRET} from_secret: ${SECRET_USER_NAME}
password: password:
from_secret: ${DEPLOY_PASS_SECRET} from_secret: ${SECRET_PASS_NAME}
port: 22 secrets: [ NEXUS_DOCKER_USERNAME, NEXUS_DOCKER_PASSWORD ] # 这俩属于私密Secret，直接进通道
secrets: [ NEXUS_DOCKER_USERNAME, NEXUS_DOCKER_PASSWORD ]
# 💡 遵循官方文档指引 Step 2：在 envs 里声明上面这些变量的名字（不区分大小写，插件会自动大写）
# 这样插件就会把这些变量强行同步到远程主机的 SSH 终端进程里
envs: envs:
- REMOTE_HOST
- CONTAINER_NAME
- FULL_PULL_REPO
- APP_REGISTRY
- PROJECT_PORT
- NEXUS_DOCKER_USERNAME - NEXUS_DOCKER_USERNAME
- NEXUS_DOCKER_PASSWORD - NEXUS_DOCKER_PASSWORD
# 💡 遵循官方文档指引 Step 3：在脚本里统一改用标准的 $大写 符号来吃环境变量
script: script:
- echo "=========================================" - echo "========================================="
- echo "🚀 开始部署节点：43.143.243.136" - echo "🚀 开始部署节点：$REMOTE_HOST" # 👈 严格按文档走，100% 能打印出 IP
- echo "=========================================" - echo "========================================="
- echo "NEXUS_DOCKER_USERNAME:${NEXUS_DOCKER_USERNAME}"
- docker login --username "${NEXUS_DOCKER_USERNAME}" --password "${NEXUS_DOCKER_PASSWORD}" push.lovestory.cyou # 所有的参数均在远程机器通过系统大写变量精准传参
- docker stop demo-container || true - echo NEXUS_DOCKER_USERNAME:$NEXUS_DOCKER_USERNAME NEXUS_DOCKER_PASSWORD:$NEXUS_DOCKER_PASSWORD APP_REGISTRY:$APP_REGISTRY
- docker rm demo-container || true - docker login --username "$NEXUS_DOCKER_USERNAME" --password "$NEXUS_DOCKER_PASSWORD" "$APP_REGISTRY"
- docker pull push.lovestory.cyou/abhors/demo:latest - docker stop "$CONTAINER_NAME" || true
- docker run -d --name demo-container -p 8080:8080 --restart always push.lovestory.cyou/abhors/demo:latest - docker rm "$CONTAINER_NAME" || true
- docker pull "$FULL_PULL_REPO"
- docker run -d --name "$CONTAINER_NAME" -p "$PROJECT_PORT":"$PROJECT_PORT" --restart always "$FULL_PULL_REPO"
when: when:
event: [push, pull_request, manual] event: [push, pull_request, manual]

20
dockercompose/woodpecker/README.md
View File

@ -140,23 +140,3 @@ docker volumes rm woodpecker-server-data woodpecker-agent-config
docker pull registry.lovestory.cyou/woodpeckerci/plugin-git:latest docker pull registry.lovestory.cyou/woodpeckerci/plugin-git:latest
``` ```
经过测试发现 完全取决于 agent的宿主机 能不能拉取到
宿主机设置了 domain 就可以拉取到了 但是前面不能加别名 加了就不是一个路径了
```shell
cat /etc/docker/daemon.json
{
"registry-mirrors": [
"https://registry.lovestory.cyou",
"https://docker.1ms.run",
"https://proxy.vvvv.ee",
"https://dockerproxy.link"
]
}
sudo systemctl daemon-reload
sudo systemctl restart docker
```