deploy: refuse to build a dirty tree !114
1 file changed, +13 −0
Layout: unified · split
Makefile +13
| @@ -5,6 +5,7 @@ | ||
| 5 | 5 | # make deploy-runner update the CI runner on HOST (only when cmd/gitbay-runner changed) |
| 6 | 6 | # |
| 7 | 7 | # Override the target host with: make deploy HOST=example.org PORT=22 |
| 8 | # Deploy an uncommitted build on purpose with: ALLOW_DIRTY=1 make deploy | |
| 8 | 9 | |
| 9 | 10 | HOST ?= 46.232.248.67 |
| 10 | 11 | PORT ?= 2222 |
| @@ -25,7 +26,19 @@ test: | ||
| 25 | 26 | |
| 26 | 27 | # Fail in seconds on an unreachable host or a wedged ssh-agent, rather |
| 27 | 28 | # than hanging on a credential prompt mid-deploy. |
| 29 | # | |
| 30 | # Also refuse a dirty tree. Every build target compiles the working tree, not | |
| 31 | # HEAD, so uncommitted work ships silently -- and migrations/ is embedded, so a | |
| 32 | # migration file that exists only on disk still migrates the production | |
| 33 | # database on restart. That happened once: 0027 reached gitbay.org inside an | |
| 34 | # unrelated deploy, an hour before it merged. Untracked counts; go:embed does | |
| 35 | # not consult the index. | |
| 28 | 36 | preflight: |
| 37 | @[ -n "$(ALLOW_DIRTY)" ] || [ -z "$$(git status --porcelain)" ] \ | |
| 38 | || { echo "working tree is dirty; deploy builds the tree, not HEAD:" >&2; \ | |
| 39 | git status --short >&2; \ | |
| 40 | echo "commit first, or ALLOW_DIRTY=1 make deploy to ship it anyway." >&2; \ | |
| 41 | exit 1; } | |
| 29 | 42 | @echo "==> checking $(HOST):$(PORT)" |
| 30 | 43 | @ssh -p $(PORT) -o BatchMode=yes -o ConnectTimeout=10 root@$(HOST) true \ |
| 31 | 44 | || { echo "cannot reach root@$(HOST):$(PORT) without a prompt." >&2; \ |