testing
This commit is contained in:
parent
4017cced6f
commit
06e2412e8a
1 changed files with 18 additions and 18 deletions
|
@ -11,7 +11,7 @@ on:
|
||||||
jobs:
|
jobs:
|
||||||
deploy-rs:
|
deploy-rs:
|
||||||
runs-on: ubuntu
|
runs-on: ubuntu
|
||||||
container:
|
container:
|
||||||
image: ubuntu:23.10
|
image: ubuntu:23.10
|
||||||
options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged
|
options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged
|
||||||
steps:
|
steps:
|
||||||
|
@ -19,7 +19,7 @@ jobs:
|
||||||
run: |
|
run: |
|
||||||
set -x
|
set -x
|
||||||
pwd
|
pwd
|
||||||
ls -lah
|
ls -lah
|
||||||
id
|
id
|
||||||
uname -a
|
uname -a
|
||||||
hostname
|
hostname
|
||||||
|
@ -28,7 +28,7 @@ jobs:
|
||||||
id
|
id
|
||||||
cat /etc/resolv.conf
|
cat /etc/resolv.conf
|
||||||
|
|
||||||
- name: "Setup: Runner"
|
- name: "Setup: Runner"
|
||||||
run: |
|
run: |
|
||||||
apt update -y
|
apt update -y
|
||||||
apt install git nodejs nix-bin sudo sudo curl -y
|
apt install git nodejs nix-bin sudo sudo curl -y
|
||||||
|
@ -37,27 +37,27 @@ jobs:
|
||||||
echo "100.64.0.13 gotify.sysctl.io" >> /etc/hosts
|
echo "100.64.0.13 gotify.sysctl.io" >> /etc/hosts
|
||||||
|
|
||||||
- name: "Setup: Tailscale Repo"
|
- name: "Setup: Tailscale Repo"
|
||||||
run: |
|
run: |
|
||||||
mkdir -p --mode=0755 /usr/share/keyrings
|
mkdir -p --mode=0755 /usr/share/keyrings
|
||||||
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
|
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
|
||||||
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list
|
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list
|
||||||
apt update -y
|
apt update -y
|
||||||
apt install tailscale -y
|
apt install tailscale -y
|
||||||
|
|
||||||
- name: "Setup: SSH"
|
- name: "Setup: SSH"
|
||||||
run: |
|
run: |
|
||||||
rm -rf /root/.ssh
|
rm -rf /root/.ssh
|
||||||
mkdir /root/.ssh
|
mkdir /root/.ssh
|
||||||
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
|
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
|
||||||
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
|
||||||
chmod 700 /root/.ssh
|
chmod 700 /root/.ssh
|
||||||
chmod 600 /root/.ssh/id_ed25519
|
chmod 600 /root/.ssh/id_ed25519
|
||||||
chmod 644 /root/.ssh/id_ed25519.pub
|
chmod 644 /root/.ssh/id_ed25519.pub
|
||||||
echo "Public Key: "
|
echo "Public Key: "
|
||||||
cat /root/.ssh/id_ed25519.pub
|
cat /root/.ssh/id_ed25519.pub
|
||||||
|
|
||||||
- name: "Setup: Headscale Network"
|
- name: "Setup: Headscale Network"
|
||||||
run: |
|
run: |
|
||||||
echo "tailscaled --cleanup"
|
echo "tailscaled --cleanup"
|
||||||
sudo tailscaled --cleanup
|
sudo tailscaled --cleanup
|
||||||
echo ""
|
echo ""
|
||||||
|
@ -72,30 +72,30 @@ jobs:
|
||||||
--authkey ${{ secrets.TAILSCALE_KEY }} \
|
--authkey ${{ secrets.TAILSCALE_KEY }} \
|
||||||
--hostname forgejo-runner \
|
--hostname forgejo-runner \
|
||||||
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
|
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
|
||||||
sudo tailscale status
|
sudo tailscale status
|
||||||
sudo tailscale netcheck
|
sudo tailscale netcheck
|
||||||
|
|
||||||
- name: "nixos-version (Pre)"
|
- name: "nixos-version (Pre)"
|
||||||
run: |
|
run: |
|
||||||
ssh -q -A -o StrictHostKeyChecking=no albert@steamdeck \
|
ssh -q -A -o StrictHostKeyChecking=no albert@steamdeck \
|
||||||
"
|
"
|
||||||
nixos-version
|
nixos-version
|
||||||
"
|
"
|
||||||
|
|
||||||
- name: "SSH and Deploy"
|
- name: "SSH and Deploy"
|
||||||
run: |
|
run: |
|
||||||
ssh -o StrictHostKeyChecking=no albert@steamdeck \
|
ssh -o StrictHostKeyChecking=no albert@steamdeck \
|
||||||
"
|
"
|
||||||
set -x
|
set -x
|
||||||
source ~/.config/fish/config.fish
|
source ~/.config/fish/config.fish
|
||||||
cd /etc/nixos/git
|
cd /etc/nixos/git
|
||||||
git pull
|
git pull
|
||||||
sudo nixos-rebuild switch --flake /etc/nixos/git
|
sudo nixos-rebuild switch --flake /etc/nixos/git
|
||||||
home-manager switch -b backup --flake /etc/nixos/git
|
home-manager switch -b backup --flake /etc/nixos/git
|
||||||
"
|
"
|
||||||
|
|
||||||
- name: "nixos-version (Post)"
|
- name: "nixos-version (Post)"
|
||||||
run: |
|
run: |
|
||||||
ssh -q -A -o StrictHostKeyChecking=no albert@steamdeck \
|
ssh -q -A -o StrictHostKeyChecking=no albert@steamdeck \
|
||||||
"
|
"
|
||||||
nixos-version
|
nixos-version
|
||||||
|
@ -103,18 +103,18 @@ jobs:
|
||||||
tailscale down
|
tailscale down
|
||||||
|
|
||||||
- if: success()
|
- if: success()
|
||||||
uses: https://git.sysctl.io/actions/gotify-action@master
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
||||||
with:
|
with:
|
||||||
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
||||||
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
||||||
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Steam Deck Updated'
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Steam Deck Updated'
|
||||||
notification_message: 'Deployment completed successfully.'
|
notification_message: 'Deployment completed successfully.'
|
||||||
name: "Send Notification - Success"
|
name: "Send Notification - Success"
|
||||||
- if: failure()
|
- if: failure()
|
||||||
uses: https://git.sysctl.io/actions/gotify-action@master
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
||||||
with:
|
with:
|
||||||
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
||||||
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
||||||
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed'
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed'
|
||||||
notification_message: 'Your deployment has failed. Check Forgejo.'
|
notification_message: 'Your deployment has failed. Check Forgejo.'
|
||||||
name: "Send Notification - Failure"
|
name: "Send Notification - Failure"
|
||||||
|
|
Loading…
Reference in a new issue