ci: 改用 docker 方式部署

jiangwenbin · jiangwenbin · commit d94a16f82a68 · 2024-06-11T15:36:21.000+08:00
diff --git a/.dockerignore b/.dockerignore
@@ -0,0 +1,33 @@
+# Include any files or directories that you don't want to be copied to your
+# container here (e.g., local build artifacts, temporary files, etc.).
+#
+# For more help, visit the .dockerignore file reference guide at
+# https://docs.docker.com/go/build-context-dockerignore/
+
+**/.classpath
+**/.dockerignore
+**/.git
+**/.gitignore
+**/.project
+**/.settings
+**/.toolstarget
+**/.vs
+**/.vscode
+**/.next
+**/.cache
+**/*.*proj.user
+**/*.dbmdl
+**/*.jfm
+**/charts
+**/docker-compose*
+**/compose.y*ml
+**/Dockerfile*
+**/node_modules
+**/npm-debug.log
+**/obj
+**/secrets.dev.yaml
+**/values.dev.yaml
+**/build
+**/dist
+LICENSE
+README.md
diff --git a/.github/workflows/ci_cd.yml b/.github/workflows/ci_cd.yml
@@ -1,8 +1,8 @@
 name: ci_cd
 on:
-  push:
-    branches:
-      - main
+  release:
+    types: [created]
+
 env:
   SSH_HOST: ${{secrets.SSH_HOST}}
   SSH_USERNAME: ${{secrets.SSH_USERNAME}}
@@ -13,54 +13,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
-    - name: Setup Node
-      uses: actions/setup-node@v2
-      with:
-        node-version: '12.x'
-    
-    - name: Cache node modules
-      uses: actions/cache@v2
-      env:
-        cache-name: cache-node-modules
-      with:
-        # npm cache files are stored in `~/.npm` on Linux/macOS
-        path: ~/.npm
-        # 缓存命中
-        key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/package-lock.json') }}
-        # 存储key
-        restore-keys: |
-          ${{ runner.os }}-build-${{ env.cache-name }}-
-          ${{ runner.os }}-build-
-          ${{ runner.os }}-
-    - name: Install Dependency
+    - name: Build & Push Image
       run: |
-        yarn config set registry https://registry.npmmirror.com
-        yarn
-
-    - name: Build
-      run: yarn build
-
-    - name: Archive production artifacts
-      uses: actions/upload-artifact@v2
-      with:
-        #产物名称
-        name: artifact
-        #产物路径
-        path: dist
+        docker login --username=${{secrets.DOCKER_USERNAME}} --password=${{secrets.DOCKER_PASSWORD}} ${{secrets.DOCKER_REGISTRY}}
+        docker build -t ${{secrets.DOCKER_REGISTRY}}/${{secrets.DOCKER_NAMESPACE}}/${{secrets.DOCKER_REPOSITORY}}:${{github.ref_name}} .
+        docker push ${{secrets.DOCKER_REGISTRY}}/${{secrets.DOCKER_NAMESPACE}}/${{secrets.DOCKER_REPOSITORY}}:${{github.ref_name}}
 
   deploy:
     needs: build
     runs-on: ubuntu-latest
     steps:
-      - name: Download production artifacts
-        uses: actions/download-artifact@v2
-        with:
-          name: artifact
-          path: dist
-
-      - name: SSH Auth && Deploy To the Server
+      - name: SSH Auth && Pull Image
         run: |
           ssh -V
           eval $(ssh-agent -s)
@@ -69,8 +34,9 @@ jobs:
           chmod 700 ~/.ssh
           echo "PubkeyAcceptedKeyTypes +ssh-rsa" > ~/.ssh/config
           ssh-keyscan $SSH_HOST >> ~/.ssh/known_hosts
-          chmod 644 ~/.ssh/known_hosts
-          cat ~/.ssh/known_hosts
-          cat ~/.ssh/config
-          ls dist
-          scp -r dist/* $SSH_USERNAME@$SSH_HOST:$DEPLOY_DIR
+          chmod 644 ~/.ssh/
+          docker login --username=${{secrets.DOCKER_USERNAME}} --password=${{secrets.DOCKER_PASSWORD}} ${{secrets.DOCKER_REGISTRY}}
+          docker pull ${{secrets.DOCKER_REGISTRY}}/${{secrets.DOCKER_NAMESPACE}}/${{secrets.DOCKER_REPOSITORY}}:${{github.ref_name}}
+          docker stop ${{secrets.DOCKER_CONTAINER_NAME}}
+          docker rm ${{secrets.DOCKER_CONTAINER_NAME}}
+          docker run -dp ${{secrets.HOST_PORT}}:${{secrets.CONTAINER_PORT}} --name ${{secrets.DOCKER_CONTAINER_NAME}} ${{secrets.DOCKER_NAMESPACE}}/${{secrets.DOCKER_REPOSITORY}}:${{github.ref_name}}
diff --git a/.release-it.cjs b/.release-it.cjs
@@ -0,0 +1,27 @@
+const options = {
+    git: {
+        // 具体参考源码 https://github.com/release-it/release-it/blob/master/lib/plugin/git/Git.js
+        addUntrackedFiles: true,
+        commitMessage: 'chore: release v${version}',
+        tagMatch: "[0-9]*"
+    },
+    // 默认需要 GITHUB_TOKEN 环境变量，可以通过 tokenRef 定制
+    github: {
+        release: true,
+    },
+    npm: {
+        // 不做 npm publish 操作
+        publish: false,
+    },
+    plugins: {
+        '@release-it/conventional-changelog': {
+            preset: 'angular',
+            infile: 'CHANGELOG.md',
+        },
+    },
+    hooks: {
+        'after:release': 'echo Successfully released ${name} v${version} to ${repo.repository}.',
+    },
+}
+
+module.exports = options
diff --git a/Dockerfile b/Dockerfile
@@ -0,0 +1,29 @@
+# 使用官方Node.js作为基础镜像
+FROM node:16 as builder
+
+# 设置工作目录
+WORKDIR /app
+
+# 首先复制项目的依赖配置文件
+COPY package.json yarn.lock ./
+
+# 安装项目依赖，这一步会生成一个独立的层，并且只有在package.json变化时才会重新执行
+RUN yarn install
+
+# 接着复制项目所有文件，这一步会生成一个新的层
+COPY . .
+
+# 构建项目，这一步也会生成一个新的层
+RUN yarn build
+
+# 使用Nginx镜像来运行构建好的项目
+FROM nginx:latest
+
+# 将构建好的项目复制到Nginx镜像的/usr/share/nginx/html目录下
+COPY --from=builder /app/dist/ /usr/share/nginx/html
+
+# 复制自定义的Nginx配置到镜像中，覆盖默认配置
+COPY nginx/default.conf /etc/nginx/conf.d/default.conf
+
+# 暴露端口
+EXPOSE 80
diff --git a/nginx/default.conf b/nginx/default.conf
@@ -0,0 +1,9 @@
+server {
+    listen 80;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}
diff --git a/package.json b/package.json
@@ -11,7 +11,9 @@
         "webpack-output": "vue inspect > output.js",
         "version": "conventional-changelog -p angular -i CHANGELOG.md -s && git add CHANGELOG.md",
         "postinstall": "husky install",
-        "prepare": "husky install"
+        "prepare": "husky install",
+        "create-release": "release-it --ci",
+        "sync-remote-tags": "git tag -l | xargs git tag -d && git pull --tags"
     },
     "repository": {
         "type": "git",
@@ -45,6 +47,7 @@
     "devDependencies": {
         "@commitlint/cli": "^13.1.0",
         "@commitlint/config-conventional": "^13.1.0",
+        "@release-it/conventional-changelog": "7.0.2",
         "@types/dompurify": "^2.2.2",
         "@types/jest": "^24.0.19",
         "@types/js-cookie": "^2.2.6",
@@ -77,6 +80,7 @@
         "less-loader": "^7.3.0",
         "lint-staged": "^9.5.0",
         "prettier": "^2.2.1",
+        "release-it": "16.3.0",
         "sass": "^1.26.5",
         "sass-loader": "^8.0.2",
         "sass-resources-loader": "^2.2.1",
@@ -102,4 +106,4 @@
             "path": "./node_modules/cz-conventional-changelog"
         }
     }
-}
+}
diff --git a/yarn.lock b/yarn.lock
