mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-07 18:05:09 +00:00
Kevin Veen-Birkenbach
f21bf5d459
- Switch to Python-based vault password generation - Export VAULT_PASSWORD for internal container usage - Add first deploy with --debug - Add second deploy with --reset --debug - Add third async deploy (no debug) - Remove incorrect volume copy step and create vault file inside container Conversation reference: https://chatgpt.com/share/692f1035-6bc4-800f-91a9-342db54e1a75
100 lines
3.3 KiB
YAML
100 lines
3.3 KiB
YAML
name: Build & Test Infinito.Nexus CLI in Docker Container
|
||
|
||
on:
|
||
push:
|
||
branches:
|
||
- master
|
||
pull_request:
|
||
|
||
jobs:
|
||
test-deploy:
|
||
runs-on: ubuntu-latest
|
||
timeout-minutes: 30
|
||
|
||
steps:
|
||
- name: Checkout repository
|
||
uses: actions/checkout@v4
|
||
|
||
- name: Generate vault password automatically
|
||
run: |
|
||
python3 - << 'EOF' > .vault_pass
|
||
import secrets
|
||
import string
|
||
|
||
alphabet = string.ascii_letters + string.digits
|
||
pw = ''.join(secrets.choice(alphabet) for _ in range(64))
|
||
print(pw, end="")
|
||
EOF
|
||
|
||
chmod 600 .vault_pass
|
||
|
||
# Export password as environment variable
|
||
echo "VAULT_PASSWORD=$(cat .vault_pass)" >> "$GITHUB_ENV"
|
||
shell: bash
|
||
|
||
- name: Build Docker image
|
||
run: |
|
||
docker build --network=host --no-cache --pull -t infinito:latest .
|
||
|
||
# ----------------------------------------------------------------------
|
||
# 1) First deploy: NORMAL DEPLOY + DEBUG enabled
|
||
# ----------------------------------------------------------------------
|
||
- name: First deploy (normal + debug)
|
||
run: |
|
||
docker run --network=host --rm \
|
||
-e VAULT_PASSWORD="${VAULT_PASSWORD}" \
|
||
infinito:latest \
|
||
/bin/sh -lc '
|
||
echo "$VAULT_PASSWORD" > /tmp/.vault_pass
|
||
chmod 600 /tmp/.vault_pass
|
||
export ANSIBLE_VAULT_PASSWORD_FILE=/tmp/.vault_pass
|
||
|
||
cd /opt/infinito-src
|
||
|
||
infinito create inventory inventories/github-ci \
|
||
--host localhost \
|
||
--ssl-disabled
|
||
|
||
INVENTORY_PATH="inventories/github-ci/servers.yml"
|
||
infinito deploy "$INVENTORY_PATH" -T server --debug
|
||
'
|
||
|
||
# ----------------------------------------------------------------------
|
||
# 2) Second deploy: RESET + DEBUG
|
||
# ----------------------------------------------------------------------
|
||
- name: Second deploy (--reset --debug)
|
||
run: |
|
||
docker run --network=host --rm \
|
||
-e VAULT_PASSWORD="${VAULT_PASSWORD}" \
|
||
infinito:latest \
|
||
/bin/sh -lc '
|
||
echo "$VAULT_PASSWORD" > /tmp/.vault_pass
|
||
chmod 600 /tmp/.vault_pass
|
||
export ANSIBLE_VAULT_PASSWORD_FILE=/tmp/.vault_pass
|
||
|
||
cd /opt/infinito-src
|
||
INVENTORY_PATH="inventories/github-ci/servers.yml"
|
||
|
||
infinito deploy "$INVENTORY_PATH" -T server --reset --debug
|
||
'
|
||
|
||
# ----------------------------------------------------------------------
|
||
# 3) Third deploy: ASYNC DEPLOY (no debug flag)
|
||
# ----------------------------------------------------------------------
|
||
- name: Third deploy (async deploy – no debug)
|
||
run: |
|
||
docker run --network=host --rm \
|
||
-e VAULT_PASSWORD="${VAULT_PASSWORD}" \
|
||
infinito:latest \
|
||
/bin/sh -lc '
|
||
echo "$VAULT_PASSWORD" > /tmp/.vault_pass
|
||
chmod 600 /tmp/.vault_pass
|
||
export ANSIBLE_VAULT_PASSWORD_FILE=/tmp/.vault_pass
|
||
|
||
cd /opt/infinito-src
|
||
INVENTORY_PATH="inventories/github-ci/servers.yml"
|
||
|
||
# Without --debug the deploy is asynchronous in several roles
|
||
infinito deploy "$INVENTORY_PATH" -T server
|
||
'
|