ci(deploy): 优化部署流程并提升安全性
Some checks failed
CI/CD Pipeline / build-and-deploy (push) Failing after 2m9s
CI/CD Pipeline / remote-internal-deploy (push) Has been skipped
CI/CD Pipeline / remote-singapore-deploy (push) Has been skipped

- 添加下载并使用 drone-scp 二进制文件的步骤,以提高 SCP传输的安全性
- 修改目标路径,将 docker-compose 文件直接复制到目标目录
- 为 SCP传输步骤设置 DRONE_SCP_BINARY 环境变量,指定自定义 SCP 二进制文件
This commit is contained in:
gewuyou 2025-05-11 12:05:33 +08:00
parent a12c8b61f7
commit fb224b3bce

View File

@ -76,24 +76,33 @@ jobs:
uses: ${{env.JCNC_GITEA_URL}}/gradle/actions/setup-gradle@v4
with:
gradle-version: wrapper # 使用项目自带的gradle-wrapper
- name: 🔽 Download drone-scp
run: |
curl -L "https://github.moeyy.xyz/https://github.com/appleboy/drone-scp/releases/download/v1.8.0/drone-scp-1.8.0-linux-amd64" \
-o drone-scp
chmod +x drone-scp
- name: 📦 Copy Compose File to Internal Server
uses: ${{env.JCNC_GITEA_URL}}/appleboy/scp-action@v1
env:
DRONE_SCP_BINARY: ./drone-scp
with:
host: ${{ env.INTERNAL_SERVER_HOST }}
port: $INTERNAL_SERVER_PROT
username: root
password: ${{ secrets.INTERNAL_SERVER_PASSWORD }}
source: $MAIN_COMPOSE_FILE
target: "/home/luke/deploy/llmx/docker-compose.master.yml"
target: "/home/luke/deploy/llmx/"
- name: 📦 Copy Compose File to Singapore Server
uses: ${{env.JCNC_GITEA_URL}}/appleboy/scp-action@v1
env:
DRONE_SCP_BINARY: ./drone-scp
with:
host: $SINGAPORE_SERVER_HOST
port: $SSH_PROT
username: root
password: ${{ secrets.SINGAPORE_SERVER_PASSWORD }}
source: $AGENT_COMPOSE_FILE
target: "/home/deploy/llmx/docker-compose.master.yml"
target: "/home/deploy/llmx/"
# ========== 5. 构建阶段 ==========
- name: 🏗️ Build with Jib
run: |