!114 · krz/gitbay

5

#   make deploy-runner update the CI runner on HOST (only when cmd/gitbay-runner changed)

5

#   make deploy-runner update the CI runner on HOST (only when cmd/gitbay-runner changed)

6

#

6

#

7

# Override the target host with: make deploy HOST=example.org PORT=22

7

# Override the target host with: make deploy HOST=example.org PORT=22

8

# Deploy an uncommitted build on purpose with: ALLOW_DIRTY=1 make deploy

8

9

HOST ?= 46.232.248.67

10

HOST ?= 46.232.248.67

10

PORT     ?= 2222

11

PORT     ?= 2222

25

26

# Fail in seconds on an unreachable host or a wedged ssh-agent, rather

27

# Fail in seconds on an unreachable host or a wedged ssh-agent, rather

27

# than hanging on a credential prompt mid-deploy.

28

# than hanging on a credential prompt mid-deploy.

29

#

30

# Also refuse a dirty tree. Every build target compiles the working tree, not

31

# HEAD, so uncommitted work ships silently -- and migrations/ is embedded, so a

32

# migration file that exists only on disk still migrates the production

33

# database on restart. That happened once: 0027 reached gitbay.org inside an

34

# unrelated deploy, an hour before it merged. Untracked counts; go:embed does

35

# not consult the index.

28

preflight:

36

preflight:

37

	@[ -n "$(ALLOW_DIRTY)" ] || [ -z "$$(git status --porcelain)" ] \

38

	  || { echo "working tree is dirty; deploy builds the tree, not HEAD:" >&2; \

39

	       git status --short >&2; \

40

	       echo "commit first, or ALLOW_DIRTY=1 make deploy to ship it anyway." >&2; \

41

	       exit 1; }

29

	@echo "==> checking $(HOST):$(PORT)"

42

	@echo "==> checking $(HOST):$(PORT)"

30

	@ssh -p $(PORT) -o BatchMode=yes -o ConnectTimeout=10 root@$(HOST) true \

43

	@ssh -p $(PORT) -o BatchMode=yes -o ConnectTimeout=10 root@$(HOST) true \

31

	  || { echo "cannot reach root@$(HOST):$(PORT) without a prompt." >&2; \

44

	  || { echo "cannot reach root@$(HOST):$(PORT) without a prompt." >&2; \

deploy: refuse to build a dirty tree !114