91 lines
2.6 KiB
YAML
91 lines
2.6 KiB
YAML
---
|
|
kind: pipeline
|
|
type: docker
|
|
name: build
|
|
|
|
workspace:
|
|
path: /drone/src
|
|
|
|
platform:
|
|
os: linux
|
|
arch: amd64
|
|
|
|
trigger:
|
|
branch:
|
|
- master
|
|
|
|
steps:
|
|
- name: build-website
|
|
image: ruby:latest
|
|
environment:
|
|
GITEA_USER:
|
|
from_secret: gitea_user
|
|
GITEA_PASS:
|
|
from_secret: gitea_pass
|
|
SSH_USER:
|
|
from_secret: ssh_user
|
|
SSH_HOST:
|
|
from_secret: ssh_host
|
|
NO_HOSTKEY:
|
|
from_secret: no_hostkey
|
|
SERVER_PASS:
|
|
from_secret: server_pass
|
|
privileged: false
|
|
volumes:
|
|
- name: jekyll
|
|
path: /srv/jekyll
|
|
|
|
commands:
|
|
# general vm information for debugging
|
|
- whoami
|
|
- pwd
|
|
|
|
# add dependencies to tmp docker vm
|
|
- apt-get update && apt-get -y install rsync sshpass openssh-server openssh-client
|
|
|
|
# write the ssh key to disk for rsync handshake to remote server
|
|
- mkdir -p ~/.ssh/
|
|
- chmod 700 ~/.ssh
|
|
## create key id_rsync_ed25519 & id_rsync_ed25519.pub (Only share *.pub with .ssh/authorized_keys on target server B)
|
|
- ssh-keygen -t ed25519 -f ~/.ssh/id_rsync_ed25519 -N ''
|
|
- chmod 600 ~/.ssh/id_rsync_ed25519
|
|
- eval `ssh-agent -s`
|
|
- service ssh start
|
|
- service ssh status
|
|
- echo "$NO_HOSTKEY" > /etc/ssh/ssh_config
|
|
- cat /etc/ssh/ssh_config
|
|
## add private key to ssh-agent for ssh-copy-id
|
|
- ssh-add ~/.ssh/id_rsync_ed25519
|
|
- service ssh reload
|
|
- SSHPASS="$SERVER_PASS" sshpass -ev ssh-copy-id $SSH_USER@$SSH_HOST
|
|
|
|
# setup Jekyll permissions and build jekyll site
|
|
- adduser --no-create-home --disabled-password --gecos "" jekyll
|
|
- chown -R jekyll:jekyll /drone/src
|
|
- gem install bundler
|
|
- bundle install
|
|
- bundle exec jekyll build --trace
|
|
|
|
# prepare _site dir
|
|
- ls -a _site/
|
|
- rm _site/docker-compose.yml
|
|
|
|
# update www-data branch with fresh drone ci Jekyll _site build
|
|
- git clone https://git.sharpetronics.com/sharpetronics/sharpetronics.com.git
|
|
- cd sharpetronics.com/
|
|
- git checkout www-data
|
|
- cp -R ../_site/* .
|
|
- git add *
|
|
- git commit -m "bots beeing bots! A drone www-data push"
|
|
- git push https://$GITEA_USER:$GITEA_PASS@git.sharpetronics.com/sharpetronics/sharpetronics.com.git
|
|
|
|
# sync files to remote server [local _site ] to [remote _site www]
|
|
- rsync -aXvPzr -e ssh ../_site/* $SSH_USER@$SSH_HOST:/var/www/html/
|
|
|
|
# create tar.gz of _site directory for download elsewhere
|
|
- tar -czf ../www-data_sharpetronics.tar.gz ../_site/*
|
|
- ls ../ww*
|
|
|
|
# add download of files from download.sharpetronics.com
|
|
- rsync -aXvPzr -e ssh ../www-data_sharpetronics.tar.gz $SSH_USER@SSH_HOST:/var/www/downloads.sharpetronics.com/html/sharpetronics.com/
|