Update workflows

This commit is contained in:
albert 2024-09-03 21:40:50 +09:00
parent 821695dbe4
commit 0990eedc4f
Signed by: albert
GPG key ID: 3895DD267CA11BA9

View file

@ -8,7 +8,7 @@ on:
jobs: jobs:
deploy-rs: deploy-rs:
runs-on: ubuntu runs-on: ubuntu
container: container:
image: ubuntu:24.04 image: ubuntu:24.04
options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged
steps: steps:
@ -16,7 +16,7 @@ jobs:
run: | run: |
set -x set -x
pwd pwd
ls -lah ls -lah
id id
uname -a uname -a
hostname hostname
@ -25,8 +25,8 @@ jobs:
id id
cat /etc/resolv.conf cat /etc/resolv.conf
- name: "Setup: Runner" - name: "Setup: Runner"
run: | run:
apt update -y apt update -y
apt install git nodejs nix-bin sudo curl -y apt install git nodejs nix-bin sudo curl -y
git config --global user.email "${{github.actor}}" git config --global user.email "${{github.actor}}"
@ -34,25 +34,25 @@ jobs:
echo "100.64.0.14 gotify.sysctl.io" >> /etc/hosts echo "100.64.0.14 gotify.sysctl.io" >> /etc/hosts
- name: "Setup: Tailscale Repo" - name: "Setup: Tailscale Repo"
run: | run: |
mkdir -p --mode=0755 /usr/share/keyrings mkdir -p --mode=0755 /usr/share/keyrings
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list
apt update -y apt update -y
apt install tailscale -y apt install tailscale -y
- name: "Setup: SSH" - name: "Setup: SSH"
run: | run: |
rm -rf /root/.ssh rm -rf /root/.ssh
mkdir /root/.ssh mkdir /root/.ssh
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519 echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
chmod 700 /root/.ssh chmod 700 /root/.ssh
chmod 600 /root/.ssh/id_ed25519 chmod 600 /root/.ssh/id_ed25519
chmod 644 /root/.ssh/id_ed25519.pub chmod 644 /root/.ssh/id_ed25519.pub
- name: "Setup: Headscale Network" - name: "Setup: Headscale Network"
run: | run: |
echo "tailscaled --cleanup" echo "tailscaled --cleanup"
sudo tailscaled --cleanup sudo tailscaled --cleanup
echo "" echo ""
@ -67,21 +67,21 @@ jobs:
--authkey ${{ secrets.TAILSCALE_KEY }} \ --authkey ${{ secrets.TAILSCALE_KEY }} \
--hostname forgejo-runner \ --hostname forgejo-runner \
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral" --advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
sudo tailscale status sudo tailscale status
sudo tailscale netcheck sudo tailscale netcheck
- name: "nixos-version (Pre)" - name: "nixos-version (Pre)"
run: | run: |
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \ ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
" "
nixos-version nixos-version
" "
- name: "SSH and Deploy" - name: "SSH and Deploy"
run: | run: |
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \ ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
" "
set -x set -x
eval (ssh-agent -c) eval (ssh-agent -c)
ssh-add ssh-add
env | grep SSH env | grep SSH
@ -95,7 +95,7 @@ jobs:
" "
- name: "nixos-version (Post)" - name: "nixos-version (Post)"
run: | run: |
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \ ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
" "
nixos-version nixos-version
@ -103,18 +103,18 @@ jobs:
tailscale down tailscale down
- if: success() - if: success()
uses: https://git.sysctl.io/actions/gotify-action@master uses: https://git.sysctl.io/actions/gotify-action@master
with: with:
gotify_api_base: '${{ secrets.GOTIFY_URL }}' gotify_api_base: '${{ secrets.GOTIFY_URL }}'
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}' gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] NixOS Deployed' notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] NixOS Deployed'
notification_message: 'Deployment completed successfully.' notification_message: 'Deployment completed successfully.'
name: "Send Notification - Success" name: "Send Notification - Success"
- if: failure() - if: failure()
uses: https://git.sysctl.io/actions/gotify-action@master uses: https://git.sysctl.io/actions/gotify-action@master
with: with:
gotify_api_base: '${{ secrets.GOTIFY_URL }}' gotify_api_base: '${{ secrets.GOTIFY_URL }}'
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}' gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed' notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed'
notification_message: 'Your deployment has failed. Check Forgejo.' notification_message: 'Your deployment has failed. Check Forgejo.'
name: "Send Notification - Failure" name: "Send Notification - Failure"