generalbots/.forgejo/workflows/botserver.yaml
Rodrigo Rodriguez (Pragmatismo) 7673eccc59
Some checks failed
BotServer CI/CD / build (push) Has been cancelled
ci: Fix workflow to run as gbuser with proper permissions
- Use sudo -u gbuser for all git operations
- Add chown/chmod for cache directories
- Use git pull instead of fetch/reset for cleaner updates
- Ensure consistent gbuser ownership
2026-04-17 11:57:22 -03:00

154 lines
6.3 KiB
YAML

name: BotServer CI/CD
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
env:
CARGO_BUILD_JOBS: 8
CARGO_NET_RETRY: 10
RUSTC_WRAPPER: sccache
# Diretórios persistentes para cache entre builds
SCCACHE_DIR: /opt/gbo/data/cache/sccache
CARGO_HOME: /opt/gbo/data/cache/cargo
CARGO_TARGET_DIR: /opt/gbo/data/persistent-botserver/target
PATH: /home/gbuser/.cargo/bin:/home/gbuser/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
jobs:
build:
runs-on: gbo
steps:
- name: Setup Persistent Directories
run: |
# Criar diretórios persistentes para cache (owned by gbuser)
sudo mkdir -p /opt/gbo/data/cache/sccache
sudo mkdir -p /opt/gbo/data/cache/cargo
sudo mkdir -p /opt/gbo/data/persistent-botserver
sudo mkdir -p /opt/gbo/data/gb-ws
# Fix permissions for gbuser
sudo chown -R gbuser:gbuser /opt/gbo/data/cache
sudo chown -R gbuser:gbuser /opt/gbo/data/persistent-botserver
sudo chown -R gbuser:gbuser /opt/gbo/data/gb-ws
sudo chmod -R 755 /opt/gbo/data/cache
sudo chmod -R 755 /opt/gbo/data/persistent-botserver
sudo chmod -R 755 /opt/gbo/data/gb-ws
- name: Setup Git
run: |
sudo -u gbuser git config --global http.sslVerify false
sudo -u gbuser git config --global --add safe.directory "*"
- name: Update Workspace (Git Pull)
run: |
set -e
WORKSPACE="/opt/gbo/data/persistent-botserver"
sudo -u gbuser bash -c "
cd $WORKSPACE
# Atualizar botlib (git pull)
if [ -d botlib/.git ]; then
echo 'Updating botlib...'
cd botlib && git pull origin main && cd ..
else
echo 'Cloning botlib...'
git clone --depth 1 --branch main https://alm.pragmatismo.com.br/GeneralBots/botlib.git botlib
fi
# Atualizar botserver (git pull)
if [ -d botserver/.git ]; then
echo 'Updating botserver...'
cd botserver && git pull origin main && cd ..
else
echo 'Cloning botserver...'
git clone --depth 1 --branch main https://alm.pragmatismo.com.br/GeneralBots/BotServer.git botserver
fi
# Atualizar workspace Cargo.toml do gb
if [ -d /opt/gbo/data/gb-ws/.git ]; then
cd /opt/gbo/data/gb-ws && git pull origin main && cd $WORKSPACE
else
git clone --depth 1 --branch main https://alm.pragmatismo.com.br/GeneralBots/gb.git /opt/gbo/data/gb-ws
fi
cp /opt/gbo/data/gb-ws/Cargo.toml Cargo.toml
for m in botapp botdevice bottest botui botbook botmodels botplugin bottemplates; do
grep -v \"\"$m\"\" Cargo.toml > /tmp/c.toml && mv /tmp/c.toml Cargo.toml
done
"
- name: Install system dependencies
run: |
PKGS="libpq-dev libssl-dev liblzma-dev pkg-config"
MISSING=""
for pkg in $PKGS; do
dpkg -s "$pkg" >/dev/null 2>&1 || MISSING="$MISSING $pkg"
done
if [ -n "$MISSING" ]; then
sudo apt-get update -qq -o Acquire::Retries=3 -o Acquire::http::Timeout=30
sudo apt-get install -y --no-install-recommends $MISSING
else
echo "All system dependencies already installed"
fi
- name: Clean up old artifacts
run: |
# Limpar apenas arquivos antigos do target, não todo o diretório
sudo -u gbuser find /opt/gbo/data/persistent-botserver/target -name "*.rlib" -type f -mtime +7 -delete 2>/dev/null || true
- name: Build BotServer (Incremental)
working-directory: /opt/gbo/data/persistent-botserver
run: |
sudo -u gbuser bash -c "
sccache --start-server 2>/dev/null || true
BOTSERVER_BUILD_DATE=\"$(date -u '+%Y-%m-%dT%H:%M:%SZ')\"
BOTSERVER_COMMIT=\"$(git -C botserver rev-parse --short HEAD 2>/dev/null || echo unknown)\"
echo \"Building BotServer (commit: $BOTSERVER_COMMIT)...\"
cargo build --package botserver 2>&1 | tee /tmp/build.log
sccache --stop-server 2>/dev/null || true
"
continue-on-error: true
- name: Save build log
run: |
sudo cp /tmp/build.log /tmp/build-output.log 2>/dev/null || true
- name: Deploy via SSH to system container
run: |
set -e
SSH_ARGS="-i /home/gbuser/.ssh/id_ed25519 -o StrictHostKeyChecking=no -o ConnectTimeout=5"
echo "=== Deploy started ==="
echo "Step 1: Stopping botserver..."
sudo -u gbuser ssh $SSH_ARGS system "sudo systemctl stop botserver 2>/dev/null || true; sleep 2; pkill -9 botserver 2>/dev/null || true; echo 'OK: botserver stopped'"
echo "Step 2: Transferring binary..."
sudo -u gbuser scp $SSH_ARGS /opt/gbo/data/persistent-botserver/target/debug/botserver system:/tmp/botserver-new
sudo -u gbuser ssh $SSH_ARGS system "sudo mv /tmp/botserver-new /opt/gbo/bin/botserver && sudo chmod +x /opt/gbo/bin/botserver && sudo chown gbuser:gbuser /opt/gbo/bin/botserver && echo 'Binary deployed'"
echo "Step 3: Starting botserver..."
sudo -u gbuser ssh $SSH_ARGS system "sudo systemctl daemon-reload && sudo systemctl start botserver && echo 'Botserver started'"
echo "Step 4: Health check..."
sleep 5
for i in $(seq 1 30); do
if sudo -u gbuser ssh $SSH_ARGS system "curl -sf http://localhost:8080/health" 2>/dev/null; then
echo "Health check passed!"
break
fi
echo "waiting ($i/30)..."
sleep 2
done
echo "=== Deploy completed ==="
- name: Verify botserver started
run: |
SSH_ARGS="-i /home/gbuser/.ssh/id_ed25519 -o StrictHostKeyChecking=no -o ConnectTimeout=5"
sudo -u gbuser ssh $SSH_ARGS system "pgrep -f botserver >/dev/null && echo 'OK: botserver running' || echo 'WARNING: check status'"
- name: Save deploy log
run: |
echo "Deploy completed at $(date)" | sudo tee /tmp/deploy.log