更新工作流以使用SSH密钥部署
Some checks failed
构建并部署 Spring Boot 应用 / build-and-deploy (push) Failing after 14s

This commit is contained in:
2025-09-26 01:42:49 +08:00
parent 32ed64f5dd
commit aa3c1b8590

View File

@@ -3,48 +3,43 @@ on: [push]
jobs: jobs:
build-and-deploy: build-and-deploy:
runs-on: ubuntu-24.04 # 使用您注册Runner时设置的标签 runs-on: ubuntu-24.04
steps: steps:
# 步骤1获取最新的代码
- name: 检出代码 - name: 检出代码
uses: actions/checkout@v4 uses: actions/checkout@v4
# 步骤2设置 Java 环境
- name: 设置 JDK 17 - name: 设置 JDK 17
uses: actions/setup-java@v4 uses: actions/setup-java@v4
with: with:
java-version: '17' java-version: '17'
distribution: 'temurin' distribution: 'temurin'
# 步骤3使用 Maven 打包应用
- name: 使用 Maven 打包 - name: 使用 Maven 打包
run: mvn clean package -DskipTests run: mvn clean package -DskipTests
# 步骤4构建 Docker 镜像
- name: 构建 Docker 镜像 - name: 构建 Docker 镜像
run: | run: |
docker build -t light-delivery-app:latest . docker build -t light-delivery-app:latest .
# 步骤5部署到应用服务器
- name: 部署到服务器 - name: 部署到服务器
env: env:
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }} # 引用刚才添加的Secret SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
run: | run: |
# 配置SSH环境 # 配置SSH环境
mkdir -p ~/.ssh mkdir -p ~/.ssh
chmod 700 ~/.ssh
# 将私钥保存到文件
echo "$SSH_PRIVATE_KEY" > ~/.ssh/deploy_key echo "$SSH_PRIVATE_KEY" > ~/.ssh/deploy_key
chmod 600 ~/.ssh/deploy_key chmod 600 ~/.ssh/deploy_key
# 禁用主机密钥检查(避免第一次连接时的确认提示)
echo -e "Host *\n\tStrictHostKeyChecking no\n" > ~/.ssh/config echo -e "Host *\n\tStrictHostKeyChecking no\n" > ~/.ssh/config
# 使用密钥连接到服务器执行部署 # 部署到服务器
ssh -i ~/.ssh/deploy_key root@115.190.121.151 ' ssh -i ~/.ssh/deploy_key root@115.190.121.151 '
echo "🚀 开始部署应用..." echo "🚀 开始部署应用..."
docker rm -f light-delivery-container || true
# 停止并移除现有容器(如果存在)
docker stop light-delivery-container || true
docker rm light-delivery-container || true
# 运行新容器
docker run -d \ docker run -d \
--name light-delivery-container \ --name light-delivery-container \
-p 443:443 \ -p 443:443 \
@@ -52,6 +47,5 @@ jobs:
-v /etc/ssl/certs:/etc/ssl/certs \ -v /etc/ssl/certs:/etc/ssl/certs \
-e KEY_STORE_PASSWORD="$(cat /etc/ssl/certs/keyStorePass.txt)" \ -e KEY_STORE_PASSWORD="$(cat /etc/ssl/certs/keyStorePass.txt)" \
light-delivery-app:latest light-delivery-app:latest
echo "✅ 部署完成!" echo "✅ 部署完成!"
' '