# 触发条件：仅push、manual手动触发，分支限定main when: event: - push - manual branch: main skip_clone: true # 流水线核心步骤：理顺依赖链，确保各步骤依赖正确 steps: # ========== 1. 替代clone：拉取代码（核心依赖） ========== prepare: image: alpine/git environment: # WOODPECKER_SSH_KEY: # from_secret: WOODPECKER_SSH_KEY CNB_ACCK: from_secret: CNB_ACCK commands: # # 调试：验证变量是否传递 # - echo "🔍 调试：当前环境变量列表（筛选SSH相关）" # - env | grep -i ssh || echo "⚠️ 无SSH相关环境变量" # # 系统初始化 # # 1. 备份原有软件源文件（防止出错可恢复） # - cp /etc/apt/sources.list /etc/apt/sources.list.bak # 2. 清空原有内容，写入阿里云Debian bookworm镜像源（直接覆盖，无需手动编辑） # - echo "deb http://mirrors.aliyun.com/debian/ bookworm main contrib non-free non-free-firmware # deb http://mirrors.aliyun.com/debian/ bookworm-updates main contrib non-free non-free-firmware # deb http://mirrors.aliyun.com/debian-security/ bookworm-security main contrib non-free non-free-firmware" > /etc/apt/sources.list # # 3. 更新软件源缓存（使新源生效） # - apt update -y # - apt install -y --no-install-recommends ca-certificates curl git openssh-client openssl libssl-dev # # 清理旧SSH文件，严格配置权限 # - rm -rf /root/.ssh/* # - mkdir -p /root/.ssh && chmod 700 /root/.ssh # - DEPLOY_KEY_FILE="$HOME/.ssh/deploy_key" # # 关键修复：SSH密钥写入（EOF内无缩进） # - | # cat > /root/.ssh/id_ed25519 << EOF # $WOODPECKER_SSH_KEY # EOF # chmod 600 /root/.ssh/id_ed25519 # echo "✅ ED25519密钥写入完成" # # 添加GitHub主机密钥 # - SSH_KNOWN_HOSTS_FILE="$HOME/.ssh/known_hosts" # - ssh-keyscan -H github.com > /root/.ssh/known_hosts # - chmod 600 /root/.ssh/known_hosts # - echo "🔍 ${#CI_REPO_CLONE_SSH_URL}调试： ${CI_REPO_CLONE_SSH_URL}" - git config --global core.compression 0 - export GIT_CONFIG_URL="https://cnb:$CNB_ACCK@cnb.cool/blzing/blazing" - echo "🔍 $CNB_ACCK调试： $CNB_ACCK" - git config --global http.sslVerify false - git clone --depth 1 --progress -v $GIT_CONFIG_URL # 拉取代码 - echo "✅ 代码拉取完成" # ========== 4. 编译Logic服务（完全参考GitHub Actions编译配置） ========== build_logic: image: golang:1.25 depends_on: [prepare] environment: CGO_ENABLED: 0 GO111MODULE: on GOSUMDB: off commands: # 2. 清空主源文件（关键：先删空，再写入） - > echo "" > /etc/apt/sources.list # 3. 写入阿里云trixie源（匹配golang:1.25的系统版本，避免版本混跑） - > echo "deb http://mirrors.aliyun.com/debian/ trixie main contrib non-free non-free-firmware deb http://mirrors.aliyun.com/debian/ trixie-updates main contrib non-free non-free-firmware deb http://mirrors.aliyun.com/debian-security/ trixie-security main contrib non-free non-free-firmware" > /etc/apt/sources.list # 4. 删除sources.list.d下的所有额外源（彻底杜绝官方源） - rm -rf /etc/apt/sources.list.d/* # 5. 强制更新，加超时和缓存清理（解决卡住问题） - apt-get clean && apt-get update -y -o Acquire::Timeout=30 # 2. 安装正确的 upx 包（Debian 中包名是 upx-ucl，不是 upx） - apt-get install -y upx-ucl - cd blazing - mkdir -p build - BIN_NAME="login_${CI_PIPELINE_CREATED}" - export GO111MODULE=on - export GOPROXY=https://goproxy.cn - | go build -v \ -p=24 \ -trimpath \ -buildvcs=false \ -ldflags "-s -w -buildid= -extldflags '-static'" \ -o ./build/$BIN_NAME \ ./login # - | # strip ./build/$BIN_NAME # upx --best --lzma ./build/$BIN_NAME - | if [ ! -f ./build/$BIN_NAME ]; then echo "❌ 编译失败：产物$BIN_NAME不存在" exit 1 fi - echo "产物名称：$BIN_NAME" - echo "✅ Login服务编译完成" - BIN_NAME="logic_${CI_PIPELINE_CREATED}" - | go build -v \ -p=24 \ -trimpath \ -buildvcs=false \ -ldflags "-s -w -buildid= -extldflags '-static'" \ -o ./build/$BIN_NAME \ ./logic - | strip ./build/$BIN_NAME upx --best --lzma ./build/$BIN_NAME - | if [ ! -f ./build/$BIN_NAME ]; then echo "❌ 编译失败：产物$BIN_NAME不存在" exit 1 fi - ls -lh ./build/ - echo "产物名称：$BIN_NAME" - echo "✅ Logic服务编译完成" # volumes: # - /ext/go/pkg/mod:~/go/pkg/mod # - /ext/.cache/go-build:~/.cache/go-build # ========== 6. SCP推送产物（依赖编译+配置解析） ========== scp-exe-to-servers: # 与fetch-deploy-config同级，缩进2个空格 image: appleboy/drone-scp:1.6.2 # 子元素，缩进4个空格 settings: # 子元素，缩进4个空格 host: &ssh_host 43.248.3.21 port: &ssh_port 22 username: &ssh_user root password: &ssh_pass KQv7yzna7BDukK source: - blazing/build/** target: /ext/blazing/ strip_components: 1 # 统一缩进6个空格 skip_verify: true # 统一缩进6个空格 timeout: 30s # 统一缩进6个空格 depends_on: # 子元素，缩进4个空格 - build_logic # depends_on内的项，缩进6个空格 start-login-logic: image: appleboy/drone-ssh:1.6.2 depends_on: [scp-exe-to-servers] settings: # 子元素，缩进4个空格 host: *ssh_host port: *ssh_port username: *ssh_user password: *ssh_pass script: - | cd /ext/blazing/build ls -t login_* 2>/dev/null | head -1 BIN_NAME=$(ls -t login_* 2>/dev/null | head -1) echo "BIN_NAME: $BIN_NAME" if [ -z "$BIN_NAME" ]; then echo "❌ 未找到可执行的login文件" exit 1 fi echo "📦 启动Login服务 | Binary: $BIN_NAME" # 停止旧的screen会话 session_name="login" session=$(screen -ls 2>/dev/null | grep -o "[0-9]*\.$session_name" || true) if [[ ! -z "$session" ]]; then screen -X -S $session_name stuff "^C" expect -c "exec screen -x $session_name; wait; exit" 2>/dev/null || true screen -X -S $session_name quit 2>/dev/null || true echo "Info: Stopped login app." fi sleep 1 # 启动新进程 screen -dmS $session_name ./$BIN_NAME echo "✅ Login服务启动成功 | Screen: $session_name" # 等待服务启动并进行健康检查 sleep 3 if screen -list 2>/dev/null | grep -q "$session_name"; then echo "✅ 服务健康检查通过 | Screen: $session_name" else echo "❌ 服务健康检查失败 | Screen: $session_name 不存在" exit 1 fi # 移动logic产物到public目录 LOGIC_BIN=$(ls -t logic_* 2>/dev/null | head -1) if [ -n "$LOGIC_BIN" ]; then mkdir -p /ext/blazing/build/public mv $LOGIC_BIN /ext/blazing/build/public/ echo "✅ Logic产物已移动到 /ext/blazing/build/public/ | 文件: $(basename $LOGIC_BIN)" else echo "⚠️ 未找到Logic产物" fi