87 lines
2.9 KiB
YAML
87 lines
2.9 KiB
YAML
# 第 73 次部署
|
||
# 💡 全局变量块
|
||
variables:
|
||
- &APP_REGISTRY "push.lovestory.cyou"
|
||
- &APP_PULL_REGISTRY "registry.lovestory.cyou"
|
||
- &PROJECT_NAME "abhors/demo"
|
||
- &CONTAINER_NAME "demo-container"
|
||
- &DEPLOY_HOST "43.143.243.136"
|
||
- &DEPLOY_PORT "22"
|
||
- &DEPLOY_USER_SECRET "136_ssh_user"
|
||
- &DEPLOY_PASS_SECRET "136_ssh_password"
|
||
|
||
steps:
|
||
- name: Java 构建
|
||
image: library/maven:3.9.6-eclipse-temurin-17
|
||
pull: true
|
||
commands:
|
||
- mvn clean package -DskipTests
|
||
volumes:
|
||
- /tmp/maven-cache:/root/.m2
|
||
when:
|
||
event: [push, pull_request]
|
||
branch: master
|
||
|
||
- name: 官方标准构建与推送 (DinD)
|
||
image: woodpeckerci/plugin-docker-buildx:latest-insecure
|
||
privileged: true # 👈 官方 DinD 模式必须开启特权
|
||
settings:
|
||
repo: push.lovestory.cyou/abhors/demo
|
||
registry: push.lovestory.cyou
|
||
insecure: true
|
||
username:
|
||
from_secret: nexus_docker_username
|
||
password:
|
||
from_secret: nexus_docker_password
|
||
output: type=image,push=true
|
||
|
||
# 💡 官方标准解法 1：把国内加速源灌进内部的 BuildKit 编译器
|
||
# 这样它在解析 Dockerfile 里的 FROM 基础镜像时，才不会去连外网
|
||
buildkit_config: |
|
||
[registry."docker.io"]
|
||
mirrors = ["docker.1ms.run", "dockerpull.org", "1ms.run"]
|
||
[registry."push.lovestory.cyou"]
|
||
http = true
|
||
insecure = true
|
||
|
||
# 💡 官方标准解法 2：把国内加速源灌进外层的 Docker 守护进程
|
||
# 这样它在第一步启动时，就能通过国内镜像秒拉 moby/buildkit，绝不超时
|
||
config: |
|
||
{
|
||
"registry-mirrors": [
|
||
"https://docker.1ms.run",
|
||
"https://dockerpull.org",
|
||
"https://1ms.run"
|
||
],
|
||
"insecure-registries": [
|
||
"registry.lovestory.cyou",
|
||
"push.lovestory.cyou"
|
||
]
|
||
}
|
||
when:
|
||
event: push
|
||
branch: master
|
||
|
||
- name: 远程终端部署
|
||
image: registry.lovestory.cyou/appleboy/drone-ssh:latest
|
||
settings:
|
||
host: *DEPLOY_HOST
|
||
port: *DEPLOY_PORT
|
||
username:
|
||
from_secret: *DEPLOY_USER_SECRET
|
||
password:
|
||
from_secret: *DEPLOY_PASS_SECRET
|
||
secrets: [ nexus_docker_username, nexus_docker_password ]
|
||
envs: [ nexus_docker_username, nexus_docker_password ]
|
||
script:
|
||
- echo "========================================="
|
||
- echo "🚀 开始部署节点：*DEPLOY_HOST"
|
||
- echo "========================================="
|
||
- docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "push.lovestory.cyou"
|
||
- docker stop "demo-container" || true
|
||
- docker rm "demo-container" || true
|
||
- docker pull "push.lovestory.cyou/abhors/demo:latest"
|
||
- docker run -d --name "demo-container" -p 8080:8080 --restart always "push.lovestory.cyou/abhors/demo:latest"
|
||
when:
|
||
event: push
|
||
branch: master |