75 lines
3.8 KiB
YAML
75 lines
3.8 KiB
YAML
name: Build and Deploy
|
|
|
|
on:
|
|
push:
|
|
branches: [ main ]
|
|
workflow_dispatch: {}
|
|
|
|
jobs:
|
|
build-and-push:
|
|
runs-on: self-hosted
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Log in to GitHub Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Build and push Manager
|
|
uses: docker/build-push-action@v5
|
|
with:
|
|
context: ./manager
|
|
push: true
|
|
# Constrói nativamente apenas para ARM64 na Oracle
|
|
platforms: linux/arm64
|
|
tags: ghcr.io/${{ github.repository }}/edumanager:latest
|
|
|
|
- name: Build and push Portal
|
|
uses: docker/build-push-action@v5
|
|
with:
|
|
context: ./portal
|
|
push: true
|
|
# Constrói nativamente apenas para ARM64 na Oracle
|
|
platforms: linux/arm64
|
|
tags: ghcr.io/${{ github.repository }}/portalaluno:latest
|
|
|
|
- name: Atualizar Containers em Produção (Watchtower)
|
|
run: |
|
|
# Cria um arquivo de autenticacao do Docker manual (A prova de bloqueios de permissão)
|
|
AUTH=$(echo -n "${{ github.actor }}:${{ secrets.GITHUB_TOKEN }}" | base64 -w 0)
|
|
echo "{\"auths\": {\"ghcr.io\": {\"auth\": \"$AUTH\"}}}" > $(pwd)/ghcr-config.json
|
|
|
|
docker run --rm \
|
|
-e DOCKER_API_VERSION=1.44 \
|
|
-v /var/run/docker.sock:/var/run/docker.sock \
|
|
-v $(pwd)/ghcr-config.json:/config.json \
|
|
containrrr/watchtower \
|
|
--run-once --cleanup --debug
|
|
|
|
- name: Autorizar Chave SSH da VPS
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
chmod 700 ~/.ssh
|
|
echo "ssh-rsa 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 sidney@DESKTOP-DMF9AJU" >> ~/.ssh/authorized_keys
|
|
chmod 600 ~/.ssh/authorized_keys
|
|
|
|
if [ "$USER" != "ubuntu" ] && [ -d "/home/ubuntu/.ssh" ]; then
|
|
sudo mkdir -p /home/ubuntu/.ssh
|
|
sudo chmod 700 /home/ubuntu/.ssh
|
|
echo "ssh-rsa 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 sidney@DESKTOP-DMF9AJU" | sudo tee -a /home/ubuntu/.ssh/authorized_keys
|
|
sudo chmod 600 /home/ubuntu/.ssh/authorized_keys
|
|
sudo chown -R ubuntu:ubuntu /home/ubuntu/.ssh
|
|
fi
|
|
|