Deploy IFT: optional observer-web/logrotate, bootstrap build on IFT server.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-10 14:33:19 +03:00
parent 3239970e1d
commit 63cb9e7e02
5 changed files with 130 additions and 15 deletions
@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+# Сборка observer-web / logrotate на сервере IFT (fallback, если runner не тянет Alpine).
+# Usage: BACK_DIR=/path/to/back build-optional-aux-on-server.sh <registry> <sha-tag> <commit-sha>
+set -euo pipefail
+
+REGISTRY="${1:?registry}"
+TAG="${2:?sha-tag}"
+COMMIT="${3:?commit-sha}"
+
+git_with_auth() {
+  if [[ -n "${REGISTRY_USER:-}" && -n "${REGISTRY_PASSWORD:-}" ]]; then
+    local askpass
+    askpass="$(mktemp)"
+    cat > "${askpass}" <<'EOF'
+#!/bin/sh
+case "$1" in
+  *[Pp]assword*) printf '%s\n' "$REGISTRY_PASSWORD" ;;
+  *) printf '%s\n' "$REGISTRY_USER" ;;
+esac
+EOF
+    chmod +x "${askpass}"
+    GIT_TERMINAL_PROMPT=0 GIT_ASKPASS="${askpass}" \
+      REGISTRY_USER="${REGISTRY_USER}" REGISTRY_PASSWORD="${REGISTRY_PASSWORD}" \
+      "$@"
+    rm -f "${askpass}"
+  else
+    GIT_TERMINAL_PROMPT=0 "$@"
+  fi
+}
+
+need_build() {
+  docker buildx imagetools inspect "${REGISTRY}/$1:${TAG}" >/dev/null 2>&1 && return 1
+  docker buildx imagetools inspect "${REGISTRY}/$1:ift" >/dev/null 2>&1 && return 1
+  return 0
+}
+
+build_one() {
+  local name="$1"
+  local context="$2"
+  local dockerfile="$3"
+
+  if ! need_build "${name}"; then
+    if docker buildx imagetools inspect "${REGISTRY}/${name}:${TAG}" >/dev/null 2>&1; then
+      echo "== ${name}: ${TAG} exists, skip"
+    else
+      echo "== ${name}: promote :ift -> ${TAG}"
+      docker buildx imagetools create -t "${REGISTRY}/${name}:${TAG}" "${REGISTRY}/${name}:ift"
+    fi
+    return 0
+  fi
+
+  echo "== ${name}: build on IFT server"
+  bash scripts/retry-docker-build.sh 5 60 -- \
+    docker buildx build -f "${dockerfile}" --push \
+      -t "${REGISTRY}/${name}:${TAG}" \
+      -t "${REGISTRY}/${name}:ift" \
+      --provenance=false --sbom=false \
+      "${context}" || {
+        echo "WARN: ${name}: server build failed, deploy continues without it"
+        return 0
+      }
+}
+
+if [[ -n "${BACK_DIR:-}" ]]; then
+  cd "${BACK_DIR}"
+else
+  WORKDIR="$(mktemp -d)"
+  trap 'rm -rf "${WORKDIR}"' EXIT
+  git_with_auth git clone --depth 1 "https://git.sabilin.com/EventHub/EventHubBack.git" "${WORKDIR}/back"
+  git_with_auth git -C "${WORKDIR}/back" fetch --depth 1 origin "${COMMIT}"
+  git -C "${WORKDIR}/back" checkout "${COMMIT}"
+  cd "${WORKDIR}/back"
+fi
+
+build_one observer-web . docker/ObserverWeb.Dockerfile
+build_one logrotate docker/logrotate docker/logrotate/Dockerfile