Stan Runge
d0c7b6548b
Some checks failed
Test and deploy staging / staging (push) Has been cancelled
53 lines
1.6 KiB
YAML
53 lines
1.6 KiB
YAML
name: Test and deploy staging
|
|
on:
|
|
push:
|
|
branches: [staging]
|
|
|
|
jobs:
|
|
staging:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: 1.4.0
|
|
- name: Install and test
|
|
run: |
|
|
bun install --frozen-lockfile
|
|
bun run test:unit -- --run
|
|
|
|
# Build once. The same SHA-tagged image stays on the deployment host for
|
|
# one-click promotion to production; the production workflow never rebuilds it.
|
|
- uses: docker/build-push-action@v5
|
|
with:
|
|
context: .
|
|
push: false
|
|
load: true
|
|
tags: git.stanrunge.dev/stan/personal-website:${{ github.sha }}
|
|
build-args: |
|
|
GIT_SHA=${{ github.sha }}
|
|
|
|
- name: Configure deployment SSH key
|
|
env:
|
|
DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
|
|
run: |
|
|
set -euo pipefail
|
|
install -d -m 700 ~/.ssh
|
|
printf '%s\n' "$DEPLOY_KEY" > ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
ssh-keyscan -H 172.17.0.1 >> ~/.ssh/known_hosts
|
|
|
|
- name: Transfer tested image
|
|
run: |
|
|
set -euo pipefail
|
|
image="git.stanrunge.dev/stan/personal-website:${{ github.sha }}"
|
|
docker save "$image" | ssh -o BatchMode=yes deploy@172.17.0.1 'sudo docker load'
|
|
|
|
- name: Deploy staging
|
|
run: |
|
|
set -euo pipefail
|
|
ssh -o BatchMode=yes deploy@172.17.0.1 \
|
|
"bash -s -- '${{ github.sha }}' '/opt/personal-website-staging' 'https://staging.stanrunge.dev'" \
|
|
< scripts/deploy-remote.sh
|