beeeeg update

scripts/verify-staging-image.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+sha=${1:?staging commit required}
+case "$sha" in
+  *[!0-9a-f]*|'') echo 'Invalid image tag' >&2; exit 2 ;;
+esac
+directory=/opt/personal-website-staging
+tag=$(sed -n 's/^IMAGE_TAG=//p' "$directory/.env" | head -n 1)
+if [ "$tag" != "$sha" ]; then
+  echo "Staging runs $tag, not $sha" >&2
+  exit 1
+fi
+image="git.stanrunge.dev/stan/personal-website:$sha"
+container=$(sudo docker compose --env-file "$directory/.env" -f "$directory/compose.prod.yml" ps -q app)
+expected=$(sudo docker image inspect -f '{{.Id}}' "$image")
+actual=$(sudo docker inspect -f '{{.Image}}' "$container")
+if [ "$actual" != "$expected" ]; then
+  echo 'Staging container differs from the tested image' >&2
+  exit 1
+fi
+curl --fail --silent --show-error https://staging.stanrunge.dev/login >/dev/null
+echo "Verified staging image $sha"