mirror of
https://github.com/chatmail/relay.git
synced 2026-05-10 16:04:37 +00:00
77a6f49c9b
Deployments to test servers will not be cancelled anymore, but it is not clear if we even want it. This setup is much simpler because it only depends on GitHub Actions features and does not allocate a runner just to sleep there and wait in the queue.
96 lines
4.4 KiB
YAML
96 lines
4.4 KiB
YAML
name: deploy on staging-ipv4.testrun.org, and run tests
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
paths-ignore:
|
|
- 'scripts/**'
|
|
- '**/README.md'
|
|
- 'CHANGELOG.md'
|
|
- 'LICENSE'
|
|
|
|
jobs:
|
|
deploy:
|
|
name: deploy on staging-ipv4.testrun.org, and run tests
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
environment:
|
|
name: staging-ipv4.testrun.org
|
|
url: https://staging-ipv4.testrun.org/
|
|
concurrency: staging-ipv4.testrun.org
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: prepare SSH
|
|
run: |
|
|
mkdir ~/.ssh
|
|
echo "${{ secrets.STAGING_SSH_KEY }}" >> ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
ssh-keyscan staging-ipv4.testrun.org > ~/.ssh/known_hosts
|
|
# save previous acme & dkim state
|
|
rsync -avz root@staging-ipv4.testrun.org:/var/lib/acme acme-ipv4 || true
|
|
rsync -avz root@staging-ipv4.testrun.org:/etc/dkimkeys dkimkeys-ipv4 || true
|
|
# store previous acme & dkim state on ns.testrun.org, if it contains useful certs
|
|
if [ -f dkimkeys-ipv4/dkimkeys/opendkim.private ]; then rsync -avz -e "ssh -o StrictHostKeyChecking=accept-new" dkimkeys-ipv4 root@ns.testrun.org:/tmp/ || true; fi
|
|
if [ "$(ls -A acme-ipv4/acme/certs)" ]; then rsync -avz -e "ssh -o StrictHostKeyChecking=accept-new" acme-ipv4 root@ns.testrun.org:/tmp/ || true; fi
|
|
# make sure CAA record isn't set
|
|
scp -o StrictHostKeyChecking=accept-new .github/workflows/staging-ipv4.testrun.org-default.zone root@ns.testrun.org:/etc/nsd/staging-ipv4.testrun.org.zone
|
|
ssh root@ns.testrun.org sed -i '/CAA/d' /etc/nsd/staging-ipv4.testrun.org.zone
|
|
ssh root@ns.testrun.org nsd-checkzone staging-ipv4.testrun.org /etc/nsd/staging-ipv4.testrun.org.zone
|
|
ssh root@ns.testrun.org systemctl reload nsd
|
|
|
|
- name: rebuild staging-ipv4.testrun.org to have a clean VPS
|
|
run: |
|
|
curl -X POST \
|
|
-H "Authorization: Bearer ${{ secrets.HETZNER_API_TOKEN }}" \
|
|
-H "Content-Type: application/json" \
|
|
-d '{"image":"debian-12"}' \
|
|
"https://api.hetzner.cloud/v1/servers/${{ secrets.STAGING_IPV4_SERVER_ID }}/actions/rebuild"
|
|
|
|
- run: scripts/initenv.sh
|
|
|
|
- name: append venv/bin to PATH
|
|
run: echo venv/bin >>$GITHUB_PATH
|
|
|
|
- name: upload TLS cert after rebuilding
|
|
run: |
|
|
echo " --- wait until staging-ipv4.testrun.org VPS is rebuilt --- "
|
|
rm ~/.ssh/known_hosts
|
|
while ! ssh -o ConnectTimeout=180 -o StrictHostKeyChecking=accept-new -v root@staging-ipv4.testrun.org id -u ; do sleep 1 ; done
|
|
ssh -o StrictHostKeyChecking=accept-new -v root@staging-ipv4.testrun.org id -u
|
|
# download acme & dkim state from ns.testrun.org
|
|
rsync -e "ssh -o StrictHostKeyChecking=accept-new" -avz root@ns.testrun.org:/tmp/acme-ipv4/acme acme-restore || true
|
|
rsync -avz root@ns.testrun.org:/tmp/dkimkeys-ipv4/dkimkeys dkimkeys-restore || true
|
|
# restore acme & dkim state to staging2.testrun.org
|
|
rsync -avz acme-restore/acme root@staging-ipv4.testrun.org:/var/lib/ || true
|
|
rsync -avz dkimkeys-restore/dkimkeys root@staging-ipv4.testrun.org:/etc/ || true
|
|
ssh -o StrictHostKeyChecking=accept-new -v root@staging-ipv4.testrun.org chown root:root -R /var/lib/acme || true
|
|
|
|
- name: run deploy-chatmail offline tests
|
|
run: pytest --pyargs cmdeploy
|
|
|
|
- run: |
|
|
cmdeploy init staging-ipv4.testrun.org
|
|
sed -i 's#disable_ipv6 = False#disable_ipv6 = True#' chatmail.ini
|
|
|
|
- run: cmdeploy run --verbose --skip-dns-check
|
|
|
|
- name: set DNS entries
|
|
run: |
|
|
ssh -o StrictHostKeyChecking=accept-new -v root@staging-ipv4.testrun.org chown opendkim:opendkim -R /etc/dkimkeys
|
|
cmdeploy dns --zonefile staging-generated.zone
|
|
cat staging-generated.zone >> .github/workflows/staging-ipv4.testrun.org-default.zone
|
|
cat .github/workflows/staging-ipv4.testrun.org-default.zone
|
|
scp .github/workflows/staging-ipv4.testrun.org-default.zone root@ns.testrun.org:/etc/nsd/staging-ipv4.testrun.org.zone
|
|
ssh root@ns.testrun.org nsd-checkzone staging-ipv4.testrun.org /etc/nsd/staging-ipv4.testrun.org.zone
|
|
ssh root@ns.testrun.org systemctl reload nsd
|
|
|
|
- name: cmdeploy test
|
|
run: CHATMAIL_DOMAIN2=ci-chatmail.testrun.org cmdeploy test --slow
|
|
|
|
- name: cmdeploy dns
|
|
run: cmdeploy dns -v
|
|
|