104 lines
2.0 KiB
YAML
104 lines
2.0 KiB
YAML
---
|
|
kind: pipeline
|
|
type: docker
|
|
name: build
|
|
|
|
platform:
|
|
os: linux
|
|
arch: amd64
|
|
|
|
steps:
|
|
- name: scp
|
|
image: appleboy/drone-scp
|
|
settings:
|
|
command_timeout: 2m
|
|
host:
|
|
from_secret: ssh-host
|
|
key:
|
|
from_secret: ssh-key
|
|
port:
|
|
from_secret: ssh-port
|
|
source:
|
|
- .
|
|
target: /stack/squid
|
|
username:
|
|
from_secret: ssh-user
|
|
|
|
- name: wait
|
|
image: alpine
|
|
commands:
|
|
- sleep 15
|
|
|
|
- name: deploy squid
|
|
image: appleboy/drone-ssh
|
|
settings:
|
|
envs:
|
|
- drone_tag
|
|
- drone_commit
|
|
- drone_build_number
|
|
- drone_repo_name
|
|
- drone_repo_namespace
|
|
- ssh_host
|
|
- ssh_user
|
|
- ssh_root_user
|
|
- ssh_password
|
|
- ssh_key
|
|
host:
|
|
from_secret: ssh-host
|
|
key:
|
|
from_secret: ssh-key
|
|
port:
|
|
from_secret: ssh-port
|
|
script:
|
|
- set -e
|
|
- docker network prune -f
|
|
- cd /stack/squid/myCA
|
|
- openssl genrsa -out CA_key.pem 2048
|
|
- openssl req -x509 -days 600 -new -nodes -key CA_key.pem -out CA_crt.pem -extensions v3_ca -config openssl.cnf -subj "/C=US/ST=California/L=Mountain View/O=Google/OU=Enterprise/CN=MyCA"
|
|
- cd ..
|
|
- docker stack rm squid
|
|
- sleep 30
|
|
- docker stack deploy -c docker-compose.yml squid
|
|
- export SSH_HOST="$${SSH_HOST}"
|
|
- echo "$${SSH_HOST}"
|
|
- export SSH_USER="$${SSH_USER}"
|
|
- echo "$${SSH_USER}"
|
|
- export SSH_ROOT_USER="$${SSH_ROOT_USER}"
|
|
- echo "$${SSH_ROOT_USER}"
|
|
- export SSH_PASSWORD="$${SSH_PASSWORD}"
|
|
- echo "$${SSH_PASSWORD}"
|
|
- export SSH_KEY="$${SSH_KEY}"
|
|
- echo "$${SSH_KEY}"
|
|
username:
|
|
from_secret: ssh-user
|
|
environment:
|
|
SSH_HOST:
|
|
from_secret: ssh-host
|
|
SSH_KEY:
|
|
from_secret: ssh-key
|
|
SSH_PASSWORD:
|
|
from_secret: ssh-password
|
|
SSH_ROOT_USER:
|
|
from_secret: ssh-root-user
|
|
SSH_USER:
|
|
from_secret: ssh-user
|
|
|
|
services:
|
|
- name: docker
|
|
image: docker:dind
|
|
privileged: true
|
|
volumes:
|
|
- name: dockersock
|
|
path: /var/run
|
|
- name: ca
|
|
path: /etc/docker/certs.d
|
|
|
|
volumes:
|
|
- name: dockersock
|
|
temp: {}
|
|
- name: ca
|
|
host:
|
|
path: /etc/docker/certs.d
|
|
|
|
...
|