squid/.drone/drone-home.yml

---
kind: pipeline
type: docker
name: deploy

platform:
  os: linux
  arch: amd64

steps:
- name: print env
  image: appleboy/drone-ssh:1.6.2
  settings:
    envs:
    - drone_tag
    - drone_commit
    - drone_build_number
    - drone_repo_name
    - drone_repo_namespace
    - local_docker_registry
    - registry_password
    - ssh_host
    - ssh_user
    - ssh_port
    - local_docker_registry
    - ca_crt
    - ssh_key
    - registry_password
    - ca_key
    host:
      from_secret: ssh-host
    key:
      from_secret: ssh-key
    port:
      from_secret: ssh-port
    script:
    - rm -f env-squid
    - "echo \"export LOCAL_DOCKER_REGISTRY='$${LOCAL_DOCKER_REGISTRY}'\" >> env-squid # \"local-docker-registry\""
    - "echo \"export REGISTRY_PASSWORD='$${REGISTRY_PASSWORD}'\" >> env-squid # \"registry-password\""
    - "echo \"export SSH_HOST='$${SSH_HOST}'\" >> env-squid # \"ssh-host\""
    - "echo \"export SSH_USER='$${SSH_USER}'\" >> env-squid # \"ssh-user\""
    - "echo \"export SSH_PORT='$${SSH_PORT}'\" >> env-squid # \"ssh-port\""
    - "echo \"export LOCAL_DOCKER_REGISTRY='$${LOCAL_DOCKER_REGISTRY}'\" >> env-squid # \"local-docker-registry\""
    - "echo \"export CA_CRT='$${CA_CRT}'\" >> env-squid # \"ca-crt\""
    - "echo \"export SSH_KEY='$${SSH_KEY}'\" >> env-squid # \"ssh-key\""
    - "echo \"export REGISTRY_PASSWORD='$${REGISTRY_PASSWORD}'\" >> env-squid # \"registry-password\""
    - "echo \"export CA_KEY='$${CA_KEY}'\" >> env-squid # \"ca-key\""
    username:
      from_secret: ssh-user
  environment:
    CA_CRT:
      from_secret: ca-crt
    CA_KEY:
      from_secret: ca-key
    LOCAL_DOCKER_REGISTRY:
      from_secret: local-docker-registry
    REGISTRY_PASSWORD:
      from_secret: registry-password
    SSH_HOST:
      from_secret: ssh-host
    SSH_KEY:
      from_secret: ssh-key
    SSH_PORT:
      from_secret: ssh-port
    SSH_USER:
      from_secret: ssh-user

- name: scp
  image: appleboy/drone-scp:1.6.2
  settings:
    command_timeout: 2m
    host:
      from_secret: ssh-host
    key:
      from_secret: ssh-key
    port:
      from_secret: ssh-port
    source:
    - .
    target: /stack/squid
    username:
      from_secret: ssh-user

- name: wait
  image: alpine
  commands:
  - sleep 15

- name: "dockerbuild:"
  image: docker:dind
  commands:
  - set -e
  - sh .drone/login.sh
  - sh .drone/build.sh
  - sh .drone/push.sh
  - sh .drone/logout.sh
  environment:
    LOCAL_DOCKER_REGISTRY:
      from_secret: local-docker-registry
    REGISTRY_PASSWORD:
      from_secret: registry-password
  volumes:
  - name: dockersock
    path: /var/run

- name: deploy
  image: appleboy/drone-ssh:1.6.2
  settings:
    envs:
    - drone_tag
    - drone_commit
    - drone_build_number
    - drone_repo_name
    - drone_repo_namespace
    - ssh_host
    - ssh_user
    - ssh_port
    - local_docker_registry
    - ca_crt
    - ssh_key
    - registry_password
    - ca_key
    host:
      from_secret: ssh-host
    key:
      from_secret: ssh-key
    port:
      from_secret: ssh-port
    script:
    - export SSH_KEY=$${SSH_KEY}
    - export REGISTRY_PASSWORD=$${REGISTRY_PASSWORD}
    - export CA_KEY=$${CA_KEY}
    - export SSH_HOST=$${SSH_HOST}
    - export SSH_USER=$${SSH_USER}
    - export SSH_PORT=$${SSH_PORT}
    - export LOCAL_DOCKER_REGISTRY=$${LOCAL_DOCKER_REGISTRY}
    - export CA_CRT=$${CA_CRT}
    - set -e
    - cd /stack/squid
    - sh .drone/login.sh
    - sh .drone/pull.sh
    - sh .drone/deploy.sh
    username:
      from_secret: ssh-user
  environment:
    CA_CRT:
      from_secret: ca-crt
    CA_KEY:
      from_secret: ca-key
    LOCAL_DOCKER_REGISTRY:
      from_secret: local-docker-registry
    REGISTRY_PASSWORD:
      from_secret: registry-password
    SSH_HOST:
      from_secret: ssh-host
    SSH_KEY:
      from_secret: ssh-key
    SSH_PORT:
      from_secret: ssh-port
    SSH_USER:
      from_secret: ssh-user

services:
- name: docker
  image: docker:dind
  privileged: true
  volumes:
  - name: dockersock
    path: /var/run
  - name: ca
    path: /etc/docker/certs.d

volumes:
- name: dockersock
  temp: {}
- name: ca
  host:
    path: /etc/docker/certs.d

...