87 lines
3.7 KiB
YAML
87 lines
3.7 KiB
YAML
name: deploy on staging.testrun.org, and run tests
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
paths-ignore:
|
|
- 'scripts/**'
|
|
|
|
jobs:
|
|
deploy:
|
|
name: deploy on staging.testrun.org, and run tests
|
|
runs-on: ubuntu-latest
|
|
concurrency:
|
|
group: staging-deploy
|
|
cancel-in-progress: true
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: prepare SSH
|
|
run: |
|
|
mkdir ~/.ssh
|
|
echo "${{ secrets.STAGING_SSH_KEY }}" >> ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
ssh-keyscan staging.testrun.org > ~/.ssh/known_hosts
|
|
# save previous acme & dkim state
|
|
rsync -avz root@staging.testrun.org:/var/lib/acme . || true
|
|
rsync -avz root@staging.testrun.org:/etc/dkimkeys . || true
|
|
# store previous acme & dkim state on ns.testrun.org, if it contains useful certs
|
|
if [ -f dkimkeys/opendkim.private ]; then rsync -avz -e "ssh -o StrictHostKeyChecking=accept-new" dkimkeys root@ns.testrun.org:/tmp/ || true; fi
|
|
if [ -z "$(ls -A acme/certs)" ]; then rsync -avz -e "ssh -o StrictHostKeyChecking=accept-new" acme root@ns.testrun.org:/tmp/ || true; fi
|
|
|
|
- name: rebuild staging.testrun.org to have a clean VPS
|
|
run: |
|
|
curl -X POST \
|
|
-H "Authorization: Bearer ${{ secrets.HETZNER_API_TOKEN }}" \
|
|
-H "Content-Type: application/json" \
|
|
-d '{"image":"debian-12"}' \
|
|
"https://api.hetzner.cloud/v1/servers/${{ secrets.STAGING_SERVER_ID }}/actions/rebuild"
|
|
|
|
- run: scripts/initenv.sh
|
|
|
|
- name: append venv/bin to PATH
|
|
run: echo venv/bin >>$GITHUB_PATH
|
|
|
|
- name: upload TLS cert after rebuilding
|
|
run: |
|
|
echo " --- wait until staging.testrun.org VPS is rebuilt --- "
|
|
rm ~/.ssh/known_hosts
|
|
while ! ssh -o ConnectTimeout=180 -o StrictHostKeyChecking=accept-new -v root@staging.testrun.org id -u ; do sleep 1 ; done
|
|
ssh -o StrictHostKeyChecking=accept-new -v root@staging.testrun.org id -u
|
|
# download acme & dkim state from ns.testrun.org
|
|
rsync -e "ssh -o StrictHostKeyChecking=accept-new" -avz root@ns.testrun.org:/tmp/acme acme-restore || true
|
|
rsync -avz root@ns.testrun.org:/tmp/dkimkeys dkimkeys-restore || true
|
|
# restore acme & dkim state to staging.testrun.org
|
|
rsync -avz acme-restore/acme/ root@staging.testrun.org:/var/lib/acme || true
|
|
rsync -avz dkimkeys-restore/dkimkeys/ root@staging.testrun.org:/etc/dkimkeys || true
|
|
ssh -o StrictHostKeyChecking=accept-new -v root@staging.testrun.org chown root:root -R /var/lib/acme
|
|
|
|
- name: run formatting checks
|
|
run: cmdeploy fmt -v
|
|
|
|
- name: run deploy-chatmail offline tests
|
|
run: pytest --pyargs cmdeploy
|
|
|
|
- run: cmdeploy init staging.testrun.org
|
|
|
|
- run: cmdeploy run
|
|
|
|
- name: set DNS entries
|
|
run: |
|
|
ssh -o StrictHostKeyChecking=accept-new -v root@staging.testrun.org chown opendkim:opendkim -R /etc/dkimkeys
|
|
cmdeploy dns --zonefile staging-generated.zone
|
|
cat staging-generated.zone >> .github/workflows/staging.testrun.org-default.zone
|
|
cat .github/workflows/staging.testrun.org-default.zone
|
|
scp .github/workflows/staging.testrun.org-default.zone root@ns.testrun.org:/etc/nsd/staging.testrun.org.zone
|
|
ssh root@ns.testrun.org nsd-checkzone staging.testrun.org /etc/nsd/staging.testrun.org.zone
|
|
ssh root@ns.testrun.org systemctl reload nsd
|
|
|
|
- name: cmdeploy test
|
|
run: CHATMAIL_DOMAIN2=nine.testrun.org cmdeploy test --slow
|
|
|
|
- name: cmdeploy dns (try 3 times)
|
|
run: cmdeploy dns || cmdeploy dns || cmdeploy dns
|
|
|