93 lines
3.5 KiB
YAML
93 lines
3.5 KiB
YAML
# 第 96 次部署
|
||
variables:
|
||
# --- 仓库与私服配置 ---
|
||
- &APP_REGISTRY "push.lovestory.cyou" # 推送镜像的私服域名
|
||
- &APP_PULL_REGISTRY "registry.lovestory.cyou" # 拉取基础镜像的私服域名
|
||
- &PROJECT_NAME "abhors/demo" # 项目镜像路径与名称
|
||
- &PROJECT_PORT "8080" # 运行及映射端口
|
||
- &FULL_PUSH_REPO "push.lovestory.cyou/abhors/demo" # 拼接后的完整推送地址
|
||
- &FULL_PULL_REPO "push.lovestory.cyou/abhors/demo:latest" # 远程部署拉取的目标地址
|
||
|
||
# --- 部署目标机配置 ---
|
||
- &CONTAINER_NAME "demo-container"
|
||
- &DEPLOY_HOST "43.143.243.136"
|
||
- &DEPLOY_PORT "22"
|
||
- &DEPLOY_USER_SECRET "136_ssh_user"
|
||
- &DEPLOY_PASS_SECRET "136_ssh_password"
|
||
|
||
steps:
|
||
- name: Java 构建
|
||
image: library/maven:3.9.6-eclipse-temurin-17
|
||
pull: true
|
||
commands:
|
||
- mvn clean package -DskipTests
|
||
volumes:
|
||
- /tmp/maven-cache:/root/.m2
|
||
when:
|
||
event: [push, pull_request]
|
||
branch: master
|
||
|
||
- name: 构建与推送
|
||
image: docker.m.daocloud.io/woodpeckerci/plugin-docker-buildx:latest-insecure
|
||
privileged: true
|
||
volumes:
|
||
- /var/run/docker.sock:/var/run/docker.sock
|
||
settings:
|
||
repo: *FULL_PUSH_REPO
|
||
registry: *APP_REGISTRY
|
||
username:
|
||
from_secret: nexus_docker_username
|
||
password:
|
||
from_secret: nexus_docker_password
|
||
mirror: https://registry.lovestory.cyou
|
||
when:
|
||
event: push
|
||
branch: master
|
||
|
||
- name: 远程终端部署
|
||
image: registry.lovestory.cyou/appleboy/drone-ssh:latest
|
||
|
||
# 💡 遵循官方文档指引 Step 1：必须在最外层写 environment 块，且必须全部大写！
|
||
# 把我们顶部的 YAML 锚点变量，在这里全部转化为系统大写环境变量
|
||
environment:
|
||
REMOTE_HOST: *DEPLOY_HOST
|
||
CONTAINER_NAME: *CONTAINER_NAME
|
||
FULL_PULL_REPO: *FULL_PULL_REPO
|
||
APP_REGISTRY: *APP_REGISTRY
|
||
PROJECT_PORT: *PROJECT_PORT
|
||
|
||
settings:
|
||
host: *DEPLOY_HOST
|
||
port: *DEPLOY_PORT
|
||
username:
|
||
from_secret: *DEPLOY_USER_SECRET
|
||
password:
|
||
from_secret: *DEPLOY_PASS_SECRET
|
||
secrets: [ nexus_docker_username, nexus_docker_password ] # 这俩属于私密Secret，直接进通道
|
||
|
||
# 💡 遵循官方文档指引 Step 2：在 envs 里声明上面这些变量的名字（不区分大小写，插件会自动大写）
|
||
# 这样插件就会把这些变量强行同步到远程主机的 SSH 终端进程里
|
||
envs:
|
||
- remote_host
|
||
- container_name
|
||
- full_pull_repo
|
||
- app_registry
|
||
- project_port
|
||
- nexus_docker_username
|
||
- nexus_docker_password
|
||
|
||
# 💡 遵循官方文档指引 Step 3：在脚本里统一改用标准的 $大写 符号来吃环境变量
|
||
script:
|
||
- echo "========================================="
|
||
- echo "🚀 开始部署节点：$REMOTE_HOST" # 👈 严格按文档走，100% 能打印出 IP
|
||
- echo "========================================="
|
||
|
||
# 所有的参数均在远程机器通过系统大写变量精准传参
|
||
- docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "$APP_REGISTRY"
|
||
- docker stop "$CONTAINER_NAME" || true
|
||
- docker rm "$CONTAINER_NAME" || true
|
||
- docker pull "$FULL_PULL_REPO"
|
||
- docker run -d --name "$CONTAINER_NAME" -p "$PROJECT_PORT":"$PROJECT_PORT" --restart always "$FULL_PULL_REPO"
|
||
when:
|
||
event: push
|
||
branch: master |