mxmehl/poc-deployment
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use a remote script file instead of inline quoted ssh command
ci/woodpecker/push/deploy Pipeline was successful
Details
ci/woodpecker/deployment/deploy Pipeline failed
Details

Browse Source
This commit is contained in:
mxmehl
2026-09-18 21:47:58 +02:00
parent 97eb12070a
commit 886bbc6a0b
1 changed files with 21 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.woodpecker/deploy.yaml
+21 -13
View File
@@ -49,29 +49,37 @@ steps:
- echo "$DEPLOY_SSH_KEY" > /tmp/ssh/id_deploy - echo "$DEPLOY_SSH_KEY" > /tmp/ssh/id_deploy
- chmod 600 /tmp/ssh/id_deploy - chmod 600 /tmp/ssh/id_deploy
# Ensure the remote working directory exists, then transfer # Ensure the remote working directory exists, then transfer
# compose.yaml, release.env and the decrypted secrets to the target host. # compose.yaml, release.env, the decrypted secrets and a small deploy
# script to the target host.
- >- - >-
ssh -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new ssh -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new
"$SSH_USER@$SSH_HOST" "$SSH_USER@$SSH_HOST"
"mkdir -p /tmp/poc-deploy" "mkdir -p /tmp/poc-deploy"
- |
cat > /tmp/deploy-bundle/run-deploy.sh <<'SCRIPT'
#!/bin/sh
set -e
set -a
. /tmp/poc-deploy/release.env
set +a
docker compose --project-directory /tmp/poc-deploy \
-f /tmp/poc-deploy/compose.yaml \
--env-file /tmp/poc-deploy/secrets.decrypted.env \
pull
docker compose --project-directory /tmp/poc-deploy \
-f /tmp/poc-deploy/compose.yaml \
--env-file /tmp/poc-deploy/secrets.decrypted.env \
up -d --remove-orphans
SCRIPT
- >- - >-
scp -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new scp -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new
compose.yaml release.env secrets.decrypted.env compose.yaml release.env secrets.decrypted.env run-deploy.sh
"$SSH_USER@$SSH_HOST:/tmp/poc-deploy/" "$SSH_USER@$SSH_HOST:/tmp/poc-deploy/"
# Run the deployment on the target host, then remove the plaintext secrets. # Run the deployment on the target host, then remove the plaintext secrets.
- >- - >-
ssh -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new ssh -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new
"$SSH_USER@$SSH_HOST" ' "$SSH_USER@$SSH_HOST"
set -a; . /tmp/poc-deploy/release.env; set +a; "sh /tmp/poc-deploy/run-deploy.sh"
docker compose --project-directory /tmp/poc-deploy
-f /tmp/poc-deploy/compose.yaml
--env-file /tmp/poc-deploy/secrets.decrypted.env
pull &&
docker compose --project-directory /tmp/poc-deploy
-f /tmp/poc-deploy/compose.yaml
--env-file /tmp/poc-deploy/secrets.decrypted.env
up -d --remove-orphans
'
- >- - >-
ssh -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new ssh -i /tmp/ssh/id_deploy -o StrictHostKeyChecking=accept-new
"$SSH_USER@$SSH_HOST" "$SSH_USER@$SSH_HOST"