115 lines
4.5 KiB
YAML
115 lines
4.5 KiB
YAML
# Standalone reusable workflow for Node/Vite static sites.
|
||
# Does not reference reusable-release-skill.yaml; skill workflows remain unchanged.
|
||
#
|
||
# Node：请在 Runner 上预装 Node 20+（勿用 actions/setup-node，避免每次从 GitHub 拉包）。
|
||
# npm：通过 npm_registry 输入使用国内镜像（默认 npmmirror）。
|
||
# Checkout：不用 actions/checkout（host 模式下 JS Action 仍会进无 Node 的容器）；改用 git + github.token。
|
||
# 重要：act_runner 会把 run: 脚本写到 $GITHUB_WORKSPACE/workflow/*.sh，
|
||
# 所以 checkout 绝对不能在 workspace 根上 rm -rf ./*，否则会把自己这个脚本一起删了。
|
||
# 解决办法：克隆到 $GITHUB_WORKSPACE/_src 子目录，后续 step 都在该子目录操作。
|
||
# 浅拉不要用「裸 SHA」作 fetch 参数（Gitea 上易失败）；按分支 clone 再对齐 SHA。
|
||
|
||
name: Reusable Frontend Deploy
|
||
|
||
on:
|
||
workflow_call:
|
||
inputs:
|
||
deploy_path:
|
||
description: "Target directory for static files (trailing slash optional)"
|
||
required: false
|
||
type: string
|
||
default: "/www/wwwroot/sandbox/web"
|
||
build_command:
|
||
required: false
|
||
type: string
|
||
default: "npm run build:jc2009"
|
||
npm_registry:
|
||
description: "npm registry (e.g. npmmirror for CN)"
|
||
required: false
|
||
type: string
|
||
default: "https://registry.npmmirror.com"
|
||
runs_on:
|
||
description: "Runner label; must match a registered runner"
|
||
required: false
|
||
type: string
|
||
default: "ubuntu-latest"
|
||
chown_www:
|
||
description: "Run chown -R www:www after sync (requires permission on runner)"
|
||
required: false
|
||
type: boolean
|
||
default: true
|
||
|
||
jobs:
|
||
build-and-deploy:
|
||
runs-on: ${{ inputs.runs_on }}
|
||
defaults:
|
||
run:
|
||
shell: bash
|
||
working-directory: ${{ github.workspace }}/_src
|
||
env:
|
||
NPM_CONFIG_REGISTRY: ${{ inputs.npm_registry }}
|
||
steps:
|
||
- name: Checkout
|
||
# 这一步在 workspace 根执行，不能用默认的 _src（此时还不存在）
|
||
working-directory: ${{ github.workspace }}
|
||
env:
|
||
GITEA_HOST: git.jc2009.com
|
||
GITEA_TOKEN: ${{ github.token }}
|
||
GITHUB_TOKEN: ${{ github.token }}
|
||
run: |
|
||
set -euo pipefail
|
||
git config --global --add safe.directory '*'
|
||
REPO="${{ github.repository }}"
|
||
SHA="${{ github.sha }}"
|
||
BRANCH="${{ github.ref_name }}"
|
||
TOKEN="${GITEA_TOKEN:-${GITHUB_TOKEN:-}}"
|
||
test -n "$TOKEN" || { echo "Checkout: empty token (github.token not available to this job)"; exit 1; }
|
||
URL="https://x-access-token:${TOKEN}@${GITEA_HOST}/${REPO}.git"
|
||
|
||
SRC_DIR="${GITHUB_WORKSPACE}/_src"
|
||
# 只清理 _src，不动 workspace 根（保护 runner 写入的 workflow/*.sh）
|
||
rm -rf "$SRC_DIR"
|
||
git clone --depth 1 --branch "$BRANCH" "$URL" "$SRC_DIR"
|
||
cd "$SRC_DIR"
|
||
if [ "$(git rev-parse HEAD)" != "$SHA" ]; then
|
||
git fetch --depth 200 origin "refs/heads/${BRANCH}"
|
||
git checkout --force "$SHA"
|
||
fi
|
||
echo "Checked out $(git rev-parse HEAD) to $SRC_DIR"
|
||
|
||
- name: Check Node.js (pre-installed on runner)
|
||
run: |
|
||
set -e
|
||
command -v node >/dev/null || { echo "Runner 上未找到 node，请先安装 Node 20+"; exit 1; }
|
||
command -v npm >/dev/null || { echo "Runner 上未找到 npm"; exit 1; }
|
||
node -v
|
||
npm -v
|
||
NODE_MAJOR=$(node -p "process.versions.node.split('.')[0]")
|
||
test "$NODE_MAJOR" -ge 20 || { echo "需要 Node 20 及以上，当前: $(node -v)"; exit 1; }
|
||
|
||
- name: Install dependencies
|
||
run: npm ci
|
||
|
||
- name: Build
|
||
run: ${{ inputs.build_command }}
|
||
|
||
- name: Deploy (sync dist to web root)
|
||
run: |
|
||
set -euo pipefail
|
||
test -d dist
|
||
DEST="${{ inputs.deploy_path }}"
|
||
DEST="${DEST%/}"
|
||
mkdir -p "$DEST"
|
||
# 宝塔面板会自动生成 .user.ini(并加 immutable 属性)和 .htaccess,跳过它们
|
||
find "$DEST" -mindepth 1 -maxdepth 1 \
|
||
! -name ".user.ini" \
|
||
! -name ".htaccess" \
|
||
-exec rm -rf {} +
|
||
cp -a dist/. "$DEST/"
|
||
|
||
- name: Set ownership for Nginx (Baota www)
|
||
run: |
|
||
if [ "${{ inputs.chown_www }}" != "true" ]; then exit 0; fi
|
||
DEST="${{ inputs.deploy_path }}"
|
||
DEST="${DEST%/}"
|
||
chown -R www:www "$DEST" || chown -R nginx:nginx "$DEST" || true |