gitoriaLog in with ident

ident

All repositories: gitoria

ReadmeCodePull requestsReleasesTicketsSettingsCommit81b15b7b81b15b7bState of 2026-09-27, before the move to gitoriamre81b15b7b/deploy.sh

6.9 KB

  1. #!/usr/bin/env bash
  2. # deploy.sh — ident.worldapi.org: Loreana (this folder) → Byrodin. Run ON LOREANA.
  3. #
  4. # ./deploy.sh gates → rsync → restart the container → public URL 200
  5. # ./deploy.sh --dry-run gates → rsync -n (shows what WOULD be sent), no restart, no URL check
  6. # ./deploy.sh --skip-tests skips the gates (LOUD warning) — only when you know why
  7. # ./deploy.sh --target DIR|HOST:DIR another destination (default below); a local DIR is
  8. # how the script is tested without touching Byrodin
  9. # ./deploy.sh --url URL the URL that must answer 200 after the restart
  10. # (env: DEPLOY_TARGET, DEPLOY_URL, DEPLOY_SSH override the same defaults)
  11. #
  12. # THE FIRST DEPLOY is done by the architect on Byrodin (folder, .env with SMTP, nginx vhost,
  13. # cert, DNS). This script only updates the CODE: storage/, .sessions/, .env, .scratch/,
  14. # server.*, testapp/ and logs are never sent, so live data on Byrodin is never touched.
  15. # No --delete: a file removed here stays on Byrodin (harmless — nothing imports it).
  16. set -euo pipefail
  18. # ---- the app ------------------------------------------------------------------------------
  19. APP=ident.worldapi.org
  20. CONTAINER=ident.worldapi.org
  21. [email protected]:/CONTAINERS/projects/ident.worldapi.org
  22. DEFAULT_URL=https://ident.worldapi.org/
  23. GATES=(
  24. "node tests/browser.mjs"
  25. "node tests/apps.mjs"
  26. "node tests/selector.mjs"
  27. "node tests/migration.mjs"
  28. "node tests/iplimit.mjs"
  29. "node tests/notify.mjs"
  30. )
  31. # NEVER SENT (rsync patterns; a leading / anchors at the app folder)
  32. EXCLUDES=(
  33. /storage/ /.sessions/ /.env /.env.* /.scratch/ /server.* /testapp/
  34. '*.log' '*.pid' node_modules/
  35. )
  36. # ---------------------------------------------------------------------------------------------
  38. DRY=0
  39. SKIP=0
  40. TARGET=${DEPLOY_TARGET:-$DEFAULT_TARGET}
  41. URL=${DEPLOY_URL:-$DEFAULT_URL}
  42. # Loreana's ssh config may not apply to Byrodin: -F /dev/null (ident STATUS)
  43. SSH=${DEPLOY_SSH:-ssh -F /dev/null -o BatchMode=yes -o ConnectTimeout=15}
  45. usage() { sed -n '2,13p' "$0" | sed 's/^# \{0,1\}//'; }
  46. while [ $# -gt 0 ]; do
  47. case "$1" in
  48. --dry-run) DRY=1 ;;
  49. --skip-tests) SKIP=1 ;;
  50. --target) TARGET=${2:?--target needs a value}; shift ;;
  51. --target=*) TARGET=${1#--target=} ;;
  52. --url) URL=${2:?--url needs a value}; shift ;;
  53. --url=*) URL=${1#--url=} ;;
  54. -h|--help) usage; exit 0 ;;
  55. *) echo "deploy: unknown argument: $1" >&2; usage >&2; exit 2 ;;
  56. esac
  57. shift
  58. done
  60. HERE=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
  61. cd "$HERE"
  63. step() { printf '\n==> %s\n' "$*"; }
  64. run() { printf ' $ %s\n' "$*" >&2; "$@"; }
  65. die() { printf '\ndeploy: REFUSED — %s\n' "$*" >&2; exit 1; }
  67. # a target `host:dir` is remote, a plain path is local
  68. if [[ "$TARGET" == *:* ]]; then
  69. REMOTE_HOST=${TARGET%%:*}
  70. REMOTE_DIR=${TARGET#*:}
  71. else
  72. REMOTE_HOST=
  73. REMOTE_DIR=$TARGET
  74. fi
  76. step "[0/4] $APP → $TARGET (dry run: $DRY, skip tests: $SKIP)"
  77. echo " from $HERE"
  78. echo " url $URL"
  79. [ -x bin/hybriel ] || die "bin/hybriel is missing here"
  80. [ -f docker-compose.yml ] || die "docker-compose.yml is missing here"
  81. [ -f project.hl ] || die "project.hl is missing here"
  82. command -v rsync >/dev/null || die "rsync is not installed"
  84. # ---- 1. the gates ---------------------------------------------------------------------------
  85. if [ "$SKIP" = 1 ]; then
  86. step "[1/4] GATES SKIPPED"
  87. printf ' !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n'
  88. printf ' !! --skip-tests: NOTHING WAS TESTED. You deploy untested code. !!\n'
  89. printf ' !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n'
  90. else
  91. step "[1/4] gates (${#GATES[@]})"
  92. # headless Chromes that exist BEFORE the gates are not ours (other sessions' test runs, e.g. Anton's)
  93. chromes() { ps -eo pid=,ppid=,args= | awk '/[h]l-browser-tier/ && /remote-debugging-port/ && !/--type=/ {print $1, $2}'; }
  94. before=" $(chromes | awk '{print $1}' | tr '\n' ' ') "
  95. for g in "${GATES[@]}"; do
  96. printf ' $ %s\n' "$g"
  97. out=$(mktemp)
  98. if ! $g > "$out" 2>&1; then
  99. grep -E '^FAIL|passed,' "$out" | sed 's/^/ /' || true
  100. echo " (full output: $out)"
  101. die "gate failed: $g"
  102. fi
  103. grep -E 'passed,' "$out" | tail -1 | sed 's/^/ /'
  104. rm -f "$out"
  105. done
  106. # a Chrome our gates LEFT: new since the gates began AND no longer owned by a running node test
  107. # (a Chrome whose parent is a live node process belongs to another session's test run right now)
  108. leaked=""
  109. while read -r pid ppid; do
  110. [ -z "$pid" ] && continue
  111. case "$before" in *" $pid "*) continue ;; esac
  112. ps -o args= -p "$ppid" 2>/dev/null | grep -q '^node\|/node ' && continue
  113. leaked="$leaked $pid"
  114. done < <(chromes)
  115. if [ -n "$leaked" ]; then
  116. die "a gate left a headless Chrome (pids:$leaked; ps -eo pid,args | grep hl-browser-tier)"
  117. fi
  118. fi
  120. # ---- 2. rsync the code ----------------------------------------------------------------------
  121. RSYNC=(rsync -az --no-owner --no-group --itemize-changes)
  122. for e in "${EXCLUDES[@]}"; do RSYNC+=("--exclude=$e"); done
  123. if [ -n "$REMOTE_HOST" ]; then
  124. RSYNC+=(-e "$SSH")
  125. else
  126. mkdir -p "$REMOTE_DIR"
  127. fi
  128. # the preview is ALWAYS made first (rsync -n): nothing that must stay on Byrodin may be in it
  129. step "[2/4] rsync preview (what would be sent)"
  130. preview=$(mktemp)
  131. run "${RSYNC[@]}" -n ./ "$TARGET/" > "$preview"
  132. sed 's/^/ /' "$preview"
  133. echo " ($(grep -c . "$preview" || true) lines)"
  134. if awk '{print $2}' "$preview" | grep -E '^(storage/|\.sessions/|\.env|\.scratch/|server\.|testapp/)|\.log$|\.pid$' ; then
  135. die "the preview holds a path that must never be sent (see above)"
  136. fi
  137. rm -f "$preview"
  138. if [ "$DRY" = 1 ]; then
  139. step "[2/4] DRY RUN: nothing sent"
  140. else
  141. step "[2/4] rsync"
  142. run "${RSYNC[@]}" ./ "$TARGET/" | sed 's/^/ /'
  143. fi
  145. # ---- 3. restart the container ---------------------------------------------------------------
  146. RESTART="cd '$REMOTE_DIR' && docker compose up -d --build && docker compose restart && docker compose ps"
  147. if [ "$DRY" = 1 ]; then
  148. step "[3/4] DRY RUN: would restart $CONTAINER"
  149. if [ -n "$REMOTE_HOST" ]; then echo " would run: $SSH $REMOTE_HOST \"$RESTART\""; else echo " would run: bash -c \"$RESTART\""; fi
  150. else
  151. step "[3/4] restart $CONTAINER"
  152. if [ -n "$REMOTE_HOST" ]; then
  153. run $SSH "$REMOTE_HOST" "$RESTART"
  154. else
  155. run bash -c "$RESTART"
  156. fi
  157. fi
  159. # ---- 4. the URL answers 200 -----------------------------------------------------------------
  160. if [ "$DRY" = 1 ]; then
  161. step "[4/4] DRY RUN: would check $URL answers 200"
  162. step "dry run done — nothing was sent, nothing restarted"
  163. exit 0
  164. fi
  165. step "[4/4] $URL must answer 200"
  166. code=000
  167. for i in $(seq 1 20); do
  168. code=$(curl -s -o /dev/null -w '%{http_code}' --max-time 10 "$URL" || true)
  169. echo " try $i: $code"
  170. [ "$code" = 200 ] && break
  171. sleep 1
  172. done
  173. if [ "$code" != 200 ]; then
  174. if [ -n "$REMOTE_HOST" ]; then die "$URL answered $code, not 200 — look: $SSH $REMOTE_HOST docker logs --tail 50 $CONTAINER"; fi
  175. die "$URL answered $code, not 200 — look: docker logs --tail 50 $CONTAINER"
  176. fi
  177. step "deployed $APP → $TARGET, $URL answers 200"

Branches

Latest commits

  • 81b15b7bState of 2026-09-27, before the move to gitoriamre