bl/.woodpecker/my-first-workflow.yaml

# 触发条件：仅push、manual手动触发，分支限定main
when:
  event:
    - push
    - manual
  branch: main

skip_clone: true  # 关闭默认clone，手动拉取代码

# 流水线核心步骤：修复所有模板括号缺失问题
steps:
  # ========== 0. 变量验证（提前检查关键变量） ==========
  - name: validate env vars
    image: alpine:latest
    commands:
      - |
        # 检查核心部署变量是否配置
        REQUIRED_VARS=("LOGIN_SERVER_HOST" "LOGIN_SERVER_USER" "LOGIN_SERVER_PASSWORD")
        for var in "${REQUIRED_VARS[@]}"; do
          if [ -z "${!var}" ]; then
            echo "❌ 错误：未配置变量 $var，请在Woodpecker项目设置中补充"
            exit 1
          fi
        done
        # 给可选变量设置默认值
        export LOGIN_SERVER_PORT=${LOGIN_SERVER_PORT:-22}
        # 打印变量（调试用）
        echo "✅ 变量验证通过："
        echo "LOGIN_SERVER_HOST: ${LOGIN_SERVER_HOST}"
        echo "LOGIN_SERVER_USER: ${LOGIN_SERVER_USER}"
        echo "LOGIN_SERVER_PORT: ${LOGIN_SERVER_PORT}"
        # 写入CI_ENV_FILE供后续步骤使用
        echo "LOGIN_SERVER_HOST=${LOGIN_SERVER_HOST}" >> "${CI_ENV_FILE}"
        echo "LOGIN_SERVER_USER=${LOGIN_SERVER_USER}" >> "${CI_ENV_FILE}"
        echo "LOGIN_SERVER_PASSWORD=${LOGIN_SERVER_PASSWORD}" >> "${CI_ENV_FILE}"
        echo "LOGIN_SERVER_PORT=${LOGIN_SERVER_PORT}" >> "${CI_ENV_FILE}"

  # ========== 1. 替代clone：拉取代码 ==========
  - name: prepare
    image: debian:bookworm
    depends_on: [validate env vars]
    commands:
      - export GIT_CONFIG_URL="https://cnb:${CNB_ACCK}@cnb.cool/blzing/blazing"
      - apt update -y
      - apt install -y --no-install-recommends ca-certificates curl git openssh-client openssl libssl-dev
      - git clone --depth 1 --progress -v ${GIT_CONFIG_URL} blazing-project
      - cd blazing-project
      - echo "✅ 代码拉取完成，当前目录：$(pwd)"

  # ========== 2. 生成版本号 ==========
  - name: set version
    image: golang:1.23
    depends_on: [prepare]
    commands:
      - cd blazing-project
      - VERSION="v$(git rev-parse --short=8 HEAD 2>/dev/null || echo "unknown")"
      - mkdir -p .build-info
      - echo "BUILD_VERSION=${VERSION}" >> .build-info/.env
      - echo "构建版本号：${VERSION}"

  # ========== 3. 缓存Go依赖 ==========
  - name: cache go modules
    image: meltwater/drone-cache:latest
    depends_on: [prepare]
    settings:
      restore: true
      mount:
        - /go/pkg/mod
        - /root/.cache/go-build
      # 关键：检查此处{{ }}完全闭合，无缺失
      cache_key: '{{ .Repo.Name }}-{{ .Commit.Branch }}-{{ checksum "blazing-project/go.mod" }}-{{ checksum "blazing-project/login/go.mod" }}'

  # ========== 4. 编译Logic和Login服务 ==========
  - name: build
    image: golang:1.25
    environment:
      CGO_ENABLED: 0
      GO111MODULE: on
      GOSUMDB: off
    depends_on:
      - cache go modules
      - set version
    commands:
      - cd blazing-project
      - . .build-info/.env
      - mkdir -p build
      - |
        # 编译Logic服务
        BIN_NAME="logic_${BUILD_VERSION}"
        go mod download -x
        go build -v -trimpath -buildvcs=false -ldflags "-s -w -buildid= -extldflags '-static'" -o ./build/${BIN_NAME} ./logic
        chmod +x ./build/${BIN_NAME}
        ls -lh ./build/${BIN_NAME}
        # 编译Login服务
        cd login
        BIN_NAME="login_${BUILD_VERSION}"
        go mod download -x
        go build -v -trimpath -buildvcs=false -ldflags "-s -w -buildid= -extldflags '-static'" -o ./build/${BIN_NAME} .
        chmod +x ./build/${BIN_NAME}
        ls -lh ./build/${BIN_NAME}
        mv ./build/${BIN_NAME} ../build/
        cd ..
        ls -lh ./build/
      - echo "LOGIC_BIN=logic_${BUILD_VERSION}" >> "${CI_ENV_FILE}"
      - echo "LOGIN_BIN=login_${BUILD_VERSION}" >> "${CI_ENV_FILE}"

  # ========== 5. 重建缓存 ==========
  - name: rebuild cache
    image: meltwater/drone-cache:latest
    depends_on: [build]
    settings:
      rebuild: true
      mount:
        - /go/pkg/mod
        - /root/.cache/go-build
      # 关键：检查{{ }}完全闭合
      cache_key: '{{ .Repo.Name }}-{{ .Commit.Branch }}-{{ checksum "blazing-project/go.mod" }}-{{ checksum "blazing-project/login/go.mod" }}'

  # ========== 6. SCP推送产物（检查所有{{ }}闭合） ==========
  - name: deploy to login server
    image: appleboy/drone-scp:1.6.2
    imports: https://cnb.cool/blzing/key/-/blob/main/githubkey.yml
    depends_on: [rebuild cache]
    settings:
      host: {{ .LOGIN_SERVER_HOST }}
      username: {{ .LOGIN_SERVER_USER }}
      password: {{ .LOGIN_SERVER_PASSWORD }}
      port: {{ .LOGIN_SERVER_PORT }}
      source:
        - ./blazing-project/build/login_*
        - ./blazing-project/build/logic_*
      target: /opt/login/
      strip_components: 2
      skip_verify: true
      timeout: 30s

  # ========== 7. SSH启动服务（检查所有{{ }}闭合） ==========
  - name: start login and move logic
    image: appleboy/drone-ssh:1.6.2
    imports: https://cnb.cool/blzing/key/-/blob/main/githubkey.yml
    depends_on: [deploy to login server]
    settings:
      host: {{ .LOGIN_SERVER_HOST }}
      username: {{ .LOGIN_SERVER_USER }}
      password: {{ .LOGIN_SERVER_PASSWORD }}
      port: {{ .LOGIN_SERVER_PORT }}
      script:
        - |
          cd /opt/login
          BIN_NAME=$(ls -t login_v* 2>/dev/null | head -1)
          echo "BIN_NAME: $BIN_NAME"
          if [ -z "$BIN_NAME" ]; then
            echo "❌ 未找到可执行的login文件"
            exit 1
          fi
          echo "📦 启动Login服务 | Binary: $BIN_NAME"
          # 停止旧的screen会话
          session_name="login"
          session=$(screen -ls 2>/dev/null | grep -o "[0-9]*\.${session_name}" || true)
          if [[ ! -z "$session" ]]; then
            screen -X -S "$session_name" stuff "^C"
            expect -c "exec screen -x ${session_name}; wait; exit" 2>/dev/null || true
            screen -X -S "$session_name" quit 2>/dev/null || true
            echo "Info: Stopped login app."
          fi
          sleep 1
          # 启动新进程
          screen -dmS ${session_name} ./${BIN_NAME}
          echo "✅ Login服务启动成功 | Screen: ${session_name}"
          # 健康检查
          sleep 3
          if screen -list 2>/dev/null | grep -q "${session_name}"; then
            echo "✅ 服务健康检查通过 | Screen: ${session_name}"
          else
            echo "❌ 服务健康检查失败 | Screen: ${session_name} 不存在"
            exit 1
          fi
          # 移动logic产物
          LOGIC_BIN=$(ls -t logic_v* 2>/dev/null | head -1)
          if [ -n "$LOGIC_BIN" ]; then
            mkdir -p /opt/login/public
            mv $LOGIC_BIN /opt/login/public/
            echo "✅ Logic产物已移动到 /opt/login/public/ | 文件: $(basename $LOGIC_BIN)"
          else
            echo "⚠ 未找到Logic产物"
          fi