Petru Paler
01ebff3596
Update all registry paths from ppetru/* to alo/* and workflow references from ppetru/alo-cluster to alo/alo-cluster. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
97 lines
3.2 KiB
YAML
97 lines
3.2 KiB
YAML
# ABOUTME: Reusable workflow for building Nix Docker images and deploying to Nomad.
|
|
# ABOUTME: Called by service repos with: uses: alo/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
|
|
|
|
name: Deploy to Nomad
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
service_name:
|
|
required: true
|
|
type: string
|
|
description: "Nomad job name (must match job ID in services/*.hcl)"
|
|
flake_output:
|
|
required: false
|
|
type: string
|
|
default: "dockerImage"
|
|
description: "Flake output to build (default: dockerImage)"
|
|
registry:
|
|
required: false
|
|
type: string
|
|
default: "gitea.v.paler.net"
|
|
description: "Container registry hostname"
|
|
secrets:
|
|
REGISTRY_USERNAME:
|
|
required: true
|
|
REGISTRY_PASSWORD:
|
|
required: true
|
|
NOMAD_ADDR:
|
|
required: true
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: nix
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Build Docker image
|
|
run: |
|
|
echo "Building .#${{ inputs.flake_output }}..."
|
|
nix build ".#${{ inputs.flake_output }}" --out-link result
|
|
|
|
- name: Push to registry
|
|
run: |
|
|
echo "Pushing to ${{ inputs.registry }}/alo/${{ inputs.service_name }}:latest..."
|
|
skopeo copy \
|
|
--dest-creds "${{ secrets.REGISTRY_USERNAME }}:${{ secrets.REGISTRY_PASSWORD }}" \
|
|
--insecure-policy \
|
|
docker-archive:result \
|
|
"docker://${{ inputs.registry }}/alo/${{ inputs.service_name }}:latest"
|
|
|
|
- name: Deploy to Nomad
|
|
env:
|
|
NOMAD_ADDR: ${{ secrets.NOMAD_ADDR }}
|
|
SERVICE: ${{ inputs.service_name }}
|
|
run: |
|
|
echo "Deploying $SERVICE to Nomad..."
|
|
|
|
# Fetch current job, update UUID to force deployment
|
|
JOB=$(curl -sS "$NOMAD_ADDR/v1/job/$SERVICE")
|
|
NEW_UUID=$(cat /proc/sys/kernel/random/uuid)
|
|
echo "New deployment UUID: $NEW_UUID"
|
|
UPDATED_JOB=$(echo "$JOB" | jq --arg uuid "$NEW_UUID" '.Meta.uuid = $uuid')
|
|
|
|
# Submit updated job
|
|
RESULT=$(echo "{\"Job\": $UPDATED_JOB}" | curl -sS -X POST "$NOMAD_ADDR/v1/jobs" \
|
|
-H "Content-Type: application/json" -d @-)
|
|
echo "Submit result: $RESULT"
|
|
|
|
# Monitor deployment
|
|
sleep 3
|
|
DEPLOY_ID=$(curl -sS "$NOMAD_ADDR/v1/job/$SERVICE/deployments" | jq -r '.[0].ID')
|
|
echo "Deployment ID: $DEPLOY_ID"
|
|
|
|
if [ "$DEPLOY_ID" = "null" ]; then
|
|
echo "ERROR: No deployment created. Ensure job has 'update' stanza with 'auto_revert = true'"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Monitoring deployment..."
|
|
for i in $(seq 1 30); do
|
|
STATUS=$(curl -sS "$NOMAD_ADDR/v1/deployment/$DEPLOY_ID" | jq -r '.Status')
|
|
echo "[$i/30] Deployment status: $STATUS"
|
|
case $STATUS in
|
|
successful)
|
|
echo "Deployment successful!"
|
|
exit 0
|
|
;;
|
|
failed|cancelled)
|
|
echo "Deployment failed or cancelled"
|
|
exit 1
|
|
;;
|
|
esac
|
|
sleep 10
|
|
done
|
|
echo "Timeout waiting for deployment"
|
|
exit 1
|