1

.woodpecker/my-first-workflow.yaml

@@ -1,4 +1,4 @@
-# 触发条件：仅push、manual手动触发，分支限定main
+# 触发条件：仅push、manual手动触发，分支限定main（修正格式错误）
 when:
   - event: push
   - event: manual
@@ -13,8 +13,9 @@ variables:
   JSON_CONFIG_URL: "https://你的JSON配置地址.com/deploy.json"
   LOG_PATH: "$HOME/run.log"
 
-# 流水线核心步骤：仅保留编译+部署流程
+# 流水线核心步骤：理顺依赖链，确保build依赖clone结果
 steps:
+  # ========== 1. 替代clone：拉取代码（核心依赖） ==========
   prepare:
     image: debian:bookworm
     environment: 
@@ -22,45 +23,64 @@ steps:
         WOODPECKER_SSH_KEY: WOODPECKER_SSH_KEY
     commands:
       - apt update
-      - apt install ca-certificates curl git -y
-      - mkdir -p /root/.ssh
-      - echo "$WOODPECKER_SSH_KEY" > /root/.ssh/id_ed25519
+      # 安装完整依赖（解决SSH/libcrypto问题）
+      - apt install -y ca-certificates curl git openssh-client openssl libssl-dev
+      # 清理旧SSH文件，严格配置权限
+      - rm -rf /root/.ssh/*
+      - mkdir -p /root/.ssh && chmod 700 /root/.ssh
+      # 写入并清理SSH密钥（去除多余换行）
+      - echo "$WOODPECKER_SSH_KEY" | tr -d '\r' > /root/.ssh/id_ed25519
       - chmod 600 /root/.ssh/id_ed25519
-      - ssh-keyscan github.com >> /root/.ssh/known_hosts
+      # 添加GitHub主机密钥
+      - ssh-keyscan -H github.com > /root/.ssh/known_hosts && chmod 600 /root/.ssh/known_hosts
+      # 验证SSH连接（确保代码能拉取）
+      - ssh -v -i /root/.ssh/id_ed25519 -o StrictHostKeyChecking=accept-new git@github.com 2>&1 | grep "Authenticated to github.com" || {
+          echo "❌ SSH连接GitHub失败，请检查密钥配置"; exit 1;
+        }
+      # 拉取代码（拆分命令，避免静默失败）
       - git init
       - git remote add origin $CI_REPO_CLONE_SSH_URL
       - git config core.sshCommand 'ssh -i /root/.ssh/id_ed25519'
-      - git fetch && git checkout $CI_REPO_DEFAULT_BRANCH
+      - git fetch origin $CI_REPO_DEFAULT_BRANCH
+      - git checkout $CI_REPO_DEFAULT_BRANCH
       - git submodule update --init --recursive
+      - echo "✅ 代码拉取完成"
 
+  # ========== 2. 初始化Go环境（依赖prepare：代码拉取完成） ==========
   prepare-go:
     image: golang:1.25
+    depends_on: [prepare]  # 明确依赖：先拉代码，再初始化Go
     commands:
       - go version
       - go mod download -x
       - go mod verify
+      - echo "✅ Go环境初始化完成"
 
+  # ========== 3. 生成版本号（依赖prepare-go：Go环境就绪） ==========
   set-version:
     image: golang:1.25
+    depends_on: [prepare-go]  # 明确依赖：Go环境就绪后生成版本号
     commands:
       - |
         if [ -n "${CI_COMMIT_TAG}" ]; then
           VERSION="${CI_COMMIT_TAG}"
         else
-          VERSION="v$(git rev-parse --short=8 HEAD)"
+          VERSION="v$(git rev-parse --short=8 HEAD)"  # 依赖prepare拉取的代码
         fi
         echo "BUILD_VERSION=${VERSION}" >> $CI_ENV_FILE
         echo "✅ 生成版本号：${VERSION}"
 
+  # ========== 4. 编译Go服务（核心依赖：prepare+prepare-go+set-version） ==========
   build_logic:
     image: golang:1.25
+    depends_on: [set-version]  # 明确依赖：版本号生成后再编译
     environment:
       CGO_ENABLED: 0
       GO111MODULE: on
       GOSUMDB: off
     commands:
       - mkdir -p build
-      - BIN_NAME="logic_${BUILD_VERSION}"
+      - BIN_NAME="logic_${BUILD_VERSION}"  # 依赖set-version的BUILD_VERSION
       - echo "BIN_NAME=${BIN_NAME}" >> $CI_ENV_FILE
       - |
         go build -v \
@@ -69,7 +89,7 @@ steps:
           -buildvcs=false \
           -ldflags "-s -w -buildid= -extldflags '-static' -X main.version=${BUILD_VERSION}" \
           -o ./build/${BIN_NAME} \
-          ./logic
+          ./logic  # 依赖prepare拉取的./logic代码目录
       - |
         if [ ! -f ./build/${BIN_NAME} ]; then
           echo "❌ 编译失败：产物${BIN_NAME}不存在"
@@ -79,8 +99,10 @@ steps:
       - ./build/${BIN_NAME} -v || true
       - echo "✅ Go服务编译完成"
 
+  # ========== 5. 拉取部署配置（可并行，建议依赖prepare确保代码拉取完成） ==========
   fetch-deploy-config:
     image: alpine:latest
+    depends_on: [prepare]  # 确保代码拉取完成后再拉配置
     commands:
       - apk add --no-cache curl jq
       - echo "🔧 拉取部署配置：${JSON_CONFIG_URL}"
@@ -119,6 +141,7 @@ steps:
       - echo "REMOTE_PASSWORDS=${REMOTE_PASSWORDS}" >> $CI_ENV_FILE
       - echo "REMOTE_ONLINE_IDS=${REMOTE_ONLINE_IDS}" >> $CI_ENV_FILE
 
+  # ========== 6. SCP推送产物（依赖编译+配置解析） ==========
   scp-exe-to-servers:
     image: appleboy/drone-scp:1.6.2
     settings:
@@ -134,6 +157,7 @@ steps:
       - build_logic
       - fetch-deploy-config
 
+  # ========== 7. 远程部署（依赖SCP推送） ==========
   deploy-to-servers:
     image: appleboy/drone-ssh:1.7.0
     settings:
@@ -174,11 +198,12 @@ steps:
               echo "❌ 启动失败，无${SCREEN_NAME}会话"
               screen -ls && exit 1
           fi
-    depends_on:
-      - scp-exe-to-servers
+    depends_on: [scp-exe-to-servers]
 
+  # ========== 8. 打印部署汇总（依赖部署完成） ==========
   print-deploy-info:
     image: alpine:latest
+    depends_on: [deploy-to-servers]
     commands:
       - echo "======================================"
       - echo "🎉 全量部署完成！"
@@ -190,6 +215,4 @@ steps:
       - echo "📌 程序目录：${REMOTE_EXE_DIR}"
       - echo "📌 日志路径：${LOG_PATH}"
       - echo "📌 对应Commit：${CI_COMMIT_SHA}"
-      - echo "======================================"
-    depends_on:
-      - deploy-to-servers
+      - echo "======================================"