diff --git a/.woodpecker/my-first-workflow.yaml b/.woodpecker/my-first-workflow.yaml index a794655c..09149cb0 100644 --- a/.woodpecker/my-first-workflow.yaml +++ b/.woodpecker/my-first-workflow.yaml @@ -1,4 +1,4 @@ -# 触发条件:仅push、manual手动触发,分支限定main +# 触发条件:仅push、manual手动触发,分支限定main(修正格式错误) when: - event: push - event: manual @@ -13,8 +13,9 @@ variables: JSON_CONFIG_URL: "https://你的JSON配置地址.com/deploy.json" LOG_PATH: "$HOME/run.log" -# 流水线核心步骤:仅保留编译+部署流程 +# 流水线核心步骤:理顺依赖链,确保build依赖clone结果 steps: + # ========== 1. 替代clone:拉取代码(核心依赖) ========== prepare: image: debian:bookworm environment: @@ -22,45 +23,64 @@ steps: WOODPECKER_SSH_KEY: WOODPECKER_SSH_KEY commands: - apt update - - apt install ca-certificates curl git -y - - mkdir -p /root/.ssh - - echo "$WOODPECKER_SSH_KEY" > /root/.ssh/id_ed25519 + # 安装完整依赖(解决SSH/libcrypto问题) + - apt install -y ca-certificates curl git openssh-client openssl libssl-dev + # 清理旧SSH文件,严格配置权限 + - rm -rf /root/.ssh/* + - mkdir -p /root/.ssh && chmod 700 /root/.ssh + # 写入并清理SSH密钥(去除多余换行) + - echo "$WOODPECKER_SSH_KEY" | tr -d '\r' > /root/.ssh/id_ed25519 - chmod 600 /root/.ssh/id_ed25519 - - ssh-keyscan github.com >> /root/.ssh/known_hosts + # 添加GitHub主机密钥 + - ssh-keyscan -H github.com > /root/.ssh/known_hosts && chmod 600 /root/.ssh/known_hosts + # 验证SSH连接(确保代码能拉取) + - ssh -v -i /root/.ssh/id_ed25519 -o StrictHostKeyChecking=accept-new git@github.com 2>&1 | grep "Authenticated to github.com" || { + echo "❌ SSH连接GitHub失败,请检查密钥配置"; exit 1; + } + # 拉取代码(拆分命令,避免静默失败) - git init - git remote add origin $CI_REPO_CLONE_SSH_URL - git config core.sshCommand 'ssh -i /root/.ssh/id_ed25519' - - git fetch && git checkout $CI_REPO_DEFAULT_BRANCH + - git fetch origin $CI_REPO_DEFAULT_BRANCH + - git checkout $CI_REPO_DEFAULT_BRANCH - git submodule update --init --recursive + - echo "✅ 代码拉取完成" + # ========== 2. 初始化Go环境(依赖prepare:代码拉取完成) ========== prepare-go: image: golang:1.25 + depends_on: [prepare] # 明确依赖:先拉代码,再初始化Go commands: - go version - go mod download -x - go mod verify + - echo "✅ Go环境初始化完成" + # ========== 3. 生成版本号(依赖prepare-go:Go环境就绪) ========== set-version: image: golang:1.25 + depends_on: [prepare-go] # 明确依赖:Go环境就绪后生成版本号 commands: - | if [ -n "${CI_COMMIT_TAG}" ]; then VERSION="${CI_COMMIT_TAG}" else - VERSION="v$(git rev-parse --short=8 HEAD)" + VERSION="v$(git rev-parse --short=8 HEAD)" # 依赖prepare拉取的代码 fi echo "BUILD_VERSION=${VERSION}" >> $CI_ENV_FILE echo "✅ 生成版本号:${VERSION}" + # ========== 4. 编译Go服务(核心依赖:prepare+prepare-go+set-version) ========== build_logic: image: golang:1.25 + depends_on: [set-version] # 明确依赖:版本号生成后再编译 environment: CGO_ENABLED: 0 GO111MODULE: on GOSUMDB: off commands: - mkdir -p build - - BIN_NAME="logic_${BUILD_VERSION}" + - BIN_NAME="logic_${BUILD_VERSION}" # 依赖set-version的BUILD_VERSION - echo "BIN_NAME=${BIN_NAME}" >> $CI_ENV_FILE - | go build -v \ @@ -69,7 +89,7 @@ steps: -buildvcs=false \ -ldflags "-s -w -buildid= -extldflags '-static' -X main.version=${BUILD_VERSION}" \ -o ./build/${BIN_NAME} \ - ./logic + ./logic # 依赖prepare拉取的./logic代码目录 - | if [ ! -f ./build/${BIN_NAME} ]; then echo "❌ 编译失败:产物${BIN_NAME}不存在" @@ -79,8 +99,10 @@ steps: - ./build/${BIN_NAME} -v || true - echo "✅ Go服务编译完成" + # ========== 5. 拉取部署配置(可并行,建议依赖prepare确保代码拉取完成) ========== fetch-deploy-config: image: alpine:latest + depends_on: [prepare] # 确保代码拉取完成后再拉配置 commands: - apk add --no-cache curl jq - echo "🔧 拉取部署配置:${JSON_CONFIG_URL}" @@ -119,6 +141,7 @@ steps: - echo "REMOTE_PASSWORDS=${REMOTE_PASSWORDS}" >> $CI_ENV_FILE - echo "REMOTE_ONLINE_IDS=${REMOTE_ONLINE_IDS}" >> $CI_ENV_FILE + # ========== 6. SCP推送产物(依赖编译+配置解析) ========== scp-exe-to-servers: image: appleboy/drone-scp:1.6.2 settings: @@ -134,6 +157,7 @@ steps: - build_logic - fetch-deploy-config + # ========== 7. 远程部署(依赖SCP推送) ========== deploy-to-servers: image: appleboy/drone-ssh:1.7.0 settings: @@ -174,11 +198,12 @@ steps: echo "❌ 启动失败,无${SCREEN_NAME}会话" screen -ls && exit 1 fi - depends_on: - - scp-exe-to-servers + depends_on: [scp-exe-to-servers] + # ========== 8. 打印部署汇总(依赖部署完成) ========== print-deploy-info: image: alpine:latest + depends_on: [deploy-to-servers] commands: - echo "======================================" - echo "🎉 全量部署完成!" @@ -190,6 +215,4 @@ steps: - echo "📌 程序目录:${REMOTE_EXE_DIR}" - echo "📌 日志路径:${LOG_PATH}" - echo "📌 对应Commit:${CI_COMMIT_SHA}" - - echo "======================================" - depends_on: - - deploy-to-servers \ No newline at end of file + - echo "======================================" \ No newline at end of file