557 lines
17 KiB
Bash
557 lines
17 KiB
Bash
#!/usr/bin/env sh
|
||
set -eu
|
||
|
||
if [ "$#" -ne 5 ]; then
|
||
echo "用法: $0 <环境> <镜像仓库> <镜像标签> <服务> <环境文件>" >&2
|
||
exit 2
|
||
fi
|
||
|
||
DEPLOY_ENV="$1"
|
||
IMAGE_REPOSITORY="$2"
|
||
IMAGE_TAG="$3"
|
||
SERVICE="$4"
|
||
ENV_FILE="$5"
|
||
COMPOSE_FILE="deploy/docker-compose.yml"
|
||
IMAGE="$IMAGE_REPOSITORY/$SERVICE:$IMAGE_TAG"
|
||
REGISTRY_HOST="${IMAGE_REPOSITORY%%/*}"
|
||
PROJECT_NAME="firstleg-$DEPLOY_ENV"
|
||
HEALTH_TIMEOUT_SECONDS="${DEPLOY_HEALTH_TIMEOUT_SECONDS:-240}"
|
||
HEALTH_POLL_SECONDS="${DEPLOY_HEALTH_POLL_SECONDS:-5}"
|
||
|
||
for value_name in HEALTH_TIMEOUT_SECONDS HEALTH_POLL_SECONDS; do
|
||
eval "value=\${$value_name}"
|
||
case "$value" in
|
||
''|*[!0-9]*|0)
|
||
echo "$value_name 必须为正整数，当前: $value" >&2
|
||
exit 2
|
||
;;
|
||
esac
|
||
done
|
||
|
||
case "$DEPLOY_ENV" in
|
||
development|test) ;;
|
||
*)
|
||
echo "直接镜像传输仅支持 development/test，当前: $DEPLOY_ENV" >&2
|
||
exit 2
|
||
;;
|
||
esac
|
||
|
||
if [ "$DEPLOY_ENV" = "development" ]; then
|
||
PUBLISHED_BIND_ADDRESS=127.0.0.1
|
||
else
|
||
PUBLISHED_BIND_ADDRESS="${PUBLISHED_BIND_ADDRESS:-0.0.0.0}"
|
||
fi
|
||
export PUBLISHED_BIND_ADDRESS
|
||
|
||
case "$SERVICE" in
|
||
*[!A-Za-z0-9_-]*|'')
|
||
echo "非法服务名: $SERVICE" >&2
|
||
exit 2
|
||
;;
|
||
esac
|
||
|
||
if [ ! -f "$ENV_FILE" ]; then
|
||
echo "必需文件不存在: $ENV_FILE" >&2
|
||
exit 2
|
||
fi
|
||
|
||
env_file_has_key() {
|
||
grep -q "^$1=" "$ENV_FILE"
|
||
}
|
||
|
||
env_file_value() {
|
||
sed -n "s/^$1=//p" "$ENV_FILE" | tail -n 1 | tr -d '\r'
|
||
}
|
||
|
||
case "$SERVICE" in
|
||
gateway-overseas|lastleg-service|warehouse-overseas-service)
|
||
COMPOSE_FILE="deploy/docker-compose.overseas.yml"
|
||
PROJECT_NAME="firstleg-$DEPLOY_ENV-overseas"
|
||
;;
|
||
event-bridge-service)
|
||
BRIDGE_REGION="${EVENT_BRIDGE_REGION_OVERRIDE:-}"
|
||
if [ -z "$BRIDGE_REGION" ] && env_file_has_key REGION_CODE; then
|
||
BRIDGE_REGION="$(env_file_value REGION_CODE)"
|
||
fi
|
||
if [ -z "$BRIDGE_REGION" ]; then
|
||
echo "部署 event-bridge-service 时，环境文件必须显式包含 REGION_CODE=CN 或 REGION_CODE=OVERSEAS" >&2
|
||
exit 2
|
||
fi
|
||
case "$BRIDGE_REGION" in
|
||
CN) ;;
|
||
OVERSEAS)
|
||
COMPOSE_FILE="deploy/docker-compose.overseas.yml"
|
||
PROJECT_NAME="firstleg-$DEPLOY_ENV-overseas"
|
||
;;
|
||
*)
|
||
echo "部署 event-bridge-service 时，REGION_CODE 只能为 CN 或 OVERSEAS" >&2
|
||
exit 2
|
||
;;
|
||
esac
|
||
;;
|
||
esac
|
||
|
||
if [ "$SERVICE" = "gateway-overseas" ]; then
|
||
if ! env_file_has_key AUTH_SESSION_VALIDATION_URL || [ -z "$(env_file_value AUTH_SESSION_VALIDATION_URL)" ]; then
|
||
echo "部署 gateway-overseas 时，环境文件必须包含非空 AUTH_SESSION_VALIDATION_URL" >&2
|
||
exit 2
|
||
fi
|
||
fi
|
||
|
||
for file in "$ENV_FILE" "$COMPOSE_FILE"; do
|
||
if [ ! -f "$file" ]; then
|
||
echo "必需文件不存在: $file" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
|
||
if [ "$SERVICE" = "finance" ]; then
|
||
for key in FINANCE_DB_URL FINANCE_DB_USERNAME FINANCE_DB_PASSWORD; do
|
||
if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
|
||
echo "部署 finance 服务时，环境文件必须包含非空 $key" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
fi
|
||
|
||
case "$SERVICE" in
|
||
gateway-overseas|lastleg-service|warehouse-overseas-service)
|
||
for key in NACOS_SERVER_ADDR OVERSEAS_NACOS_NAMESPACE INTERNAL_SERVICE_TOKEN JWT_ISSUER OVERSEAS_JWT_AUDIENCE JWT_JWK_SET_URI; do
|
||
if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
|
||
echo "部署海外服务时，环境文件必须包含非空 $key" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
;;
|
||
esac
|
||
|
||
if [ "$SERVICE" = "firstleg" ]; then
|
||
if ! env_file_has_key LASTLEG_EVENT_BRIDGE_URL || [ -z "$(env_file_value LASTLEG_EVENT_BRIDGE_URL)" ]; then
|
||
echo "部署 firstleg 时，环境文件必须包含非空 LASTLEG_EVENT_BRIDGE_URL" >&2
|
||
exit 2
|
||
fi
|
||
if [ "$(env_file_value TERMINAL_DRAYAGE_MAIL_ENABLED)" = "true" ]; then
|
||
for key in TERMINAL_DRAYAGE_MAIL_HOST TERMINAL_DRAYAGE_MAIL_PORT TERMINAL_DRAYAGE_MAIL_USERNAME TERMINAL_DRAYAGE_MAIL_PASSWORD; do
|
||
if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
|
||
echo "启用码头车队邮件时，环境文件必须包含非空 $key" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
fi
|
||
fi
|
||
|
||
if [ "$SERVICE" = "lastleg-service" ]; then
|
||
for key in LASTLEG_DB_URL LASTLEG_DB_USERNAME LASTLEG_DB_PASSWORD FIRSTLEG_EVENT_BRIDGE_URL DOMESTIC_WAREHOUSE_URL; do
|
||
if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
|
||
echo "部署 lastleg-service 时，环境文件必须包含非空 $key" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
fi
|
||
|
||
if [ "$SERVICE" = "warehouse-overseas-service" ]; then
|
||
for key in WAREHOUSE_OVERSEAS_DB_URL WAREHOUSE_OVERSEAS_DB_USERNAME WAREHOUSE_OVERSEAS_DB_PASSWORD; do
|
||
if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
|
||
echo "部署 warehouse-overseas-service 时，环境文件必须包含非空 $key" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
fi
|
||
|
||
if [ "$SERVICE" = "event-bridge-service" ]; then
|
||
if [ "$PROJECT_NAME" = "firstleg-$DEPLOY_ENV-overseas" ]; then
|
||
EVENT_BRIDGE_KEYS="EVENT_BRIDGE_OVERSEAS_DB_URL EVENT_BRIDGE_OVERSEAS_DB_USERNAME EVENT_BRIDGE_OVERSEAS_DB_PASSWORD EVENT_CONSUMER_URL"
|
||
else
|
||
EVENT_BRIDGE_KEYS="EVENT_BRIDGE_DB_URL EVENT_BRIDGE_DB_USERNAME EVENT_BRIDGE_DB_PASSWORD FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL"
|
||
fi
|
||
for key in $EVENT_BRIDGE_KEYS; do
|
||
if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
|
||
echo "部署 event-bridge-service 时，环境文件必须包含非空 $key" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
fi
|
||
|
||
if [ "$SERVICE" = "file" ]; then
|
||
if ! env_file_has_key ROCKETMQ_NAME_SERVER || [ -z "$(env_file_value ROCKETMQ_NAME_SERVER)" ]; then
|
||
echo "部署 file 服务时，环境文件必须包含非空 ROCKETMQ_NAME_SERVER" >&2
|
||
exit 2
|
||
fi
|
||
if ! env_file_has_key MQ_TOPIC_PREFIX; then
|
||
echo "部署 file 服务时，环境文件必须显式包含 MQ_TOPIC_PREFIX" >&2
|
||
exit 2
|
||
fi
|
||
MQ_PREFIX=$(env_file_value MQ_TOPIC_PREFIX)
|
||
if [ "$DEPLOY_ENV" = "test" ] && [ "$MQ_PREFIX" != "test-" ]; then
|
||
echo "测试环境部署 file 服务时 MQ_TOPIC_PREFIX 必须为 test-" >&2
|
||
exit 2
|
||
fi
|
||
if [ "$DEPLOY_ENV" = "development" ] && { [ -z "$MQ_PREFIX" ] || [ "$MQ_PREFIX" = "test-" ]; }; then
|
||
echo "开发环境部署 file 服务时 MQ_TOPIC_PREFIX 必须非空且不能使用 test-" >&2
|
||
exit 2
|
||
fi
|
||
fi
|
||
|
||
: "${REGISTRY_USER:?REGISTRY_USER 未设置}"
|
||
: "${REGISTRY_PASSWORD:?REGISTRY_PASSWORD 未设置}"
|
||
|
||
local_registry_logout() {
|
||
docker logout "$REGISTRY_HOST" >/dev/null 2>&1 || true
|
||
}
|
||
|
||
local_compose() {
|
||
docker compose \
|
||
--project-name "$PROJECT_NAME" \
|
||
--env-file "$ENV_FILE" \
|
||
-f "$COMPOSE_FILE" \
|
||
"$@"
|
||
}
|
||
|
||
local_container_id() {
|
||
local_compose ps --all --quiet "$SERVICE" | head -n 1
|
||
}
|
||
|
||
local_container_image() {
|
||
container_id="$(local_container_id)"
|
||
if [ -n "$container_id" ]; then
|
||
docker inspect --format '{{.Config.Image}}' "$container_id"
|
||
fi
|
||
}
|
||
|
||
local_health_state() {
|
||
container_id="$(local_container_id)"
|
||
if [ -z "$container_id" ]; then
|
||
echo missing
|
||
return
|
||
fi
|
||
docker inspect --format '{{if .State.Health}}{{.State.Health.Status}}{{else}}no-health:{{.State.Status}}{{end}}' "$container_id" 2>/dev/null || echo missing
|
||
}
|
||
|
||
local_runtime_state() {
|
||
container_id="$(local_container_id)"
|
||
if [ -z "$container_id" ]; then
|
||
echo missing
|
||
return
|
||
fi
|
||
docker inspect --format '{{.State.Status}}' "$container_id" 2>/dev/null || echo missing
|
||
}
|
||
|
||
wait_for_local_health() {
|
||
elapsed=0
|
||
while [ "$elapsed" -lt "$HEALTH_TIMEOUT_SECONDS" ]; do
|
||
runtime_state="$(local_runtime_state)"
|
||
health_state="$(local_health_state)"
|
||
echo "容器运行状态: $runtime_state，健康状态: $health_state（已等待 ${elapsed}s）"
|
||
case "$runtime_state" in
|
||
restarting|exited|dead)
|
||
echo "容器未保持运行，立即停止等待: $runtime_state" >&2
|
||
return 1
|
||
;;
|
||
esac
|
||
case "$health_state" in
|
||
healthy)
|
||
return 0
|
||
;;
|
||
no-health:running)
|
||
echo "容器未配置 HEALTHCHECK，以运行状态作为成功依据" >&2
|
||
return 0
|
||
;;
|
||
unhealthy|no-health:exited|no-health:dead)
|
||
return 1
|
||
;;
|
||
esac
|
||
sleep "$HEALTH_POLL_SECONDS"
|
||
elapsed=$((elapsed + HEALTH_POLL_SECONDS))
|
||
done
|
||
echo "等待容器健康超时: ${HEALTH_TIMEOUT_SECONDS}s" >&2
|
||
return 1
|
||
}
|
||
|
||
deploy_local() {
|
||
printf '%s' "$REGISTRY_PASSWORD" | docker login -u "$REGISTRY_USER" --password-stdin "$REGISTRY_HOST"
|
||
trap local_registry_logout EXIT HUP INT TERM
|
||
previous_image="$(local_container_image || true)"
|
||
if [ -n "$previous_image" ]; then
|
||
echo "部署前运行镜像: $previous_image"
|
||
else
|
||
echo "首次部署，未发现可回滚的旧镜像"
|
||
fi
|
||
docker pull "$IMAGE"
|
||
export DEPLOY_ENV IMAGE_REPOSITORY IMAGE_TAG
|
||
new_started=true
|
||
if ! local_compose up -d --no-deps --pull never "$SERVICE"; then
|
||
echo "新镜像启动命令失败: $IMAGE" >&2
|
||
new_started=false
|
||
fi
|
||
if [ "$new_started" = "true" ] && wait_for_local_health; then
|
||
running_image="$(local_container_image || true)"
|
||
if [ "$running_image" != "$IMAGE" ]; then
|
||
echo "运行容器镜像与请求镜像不一致: expected=$IMAGE actual=${running_image:-missing}" >&2
|
||
return 1
|
||
fi
|
||
echo "新镜像健康检查通过: $IMAGE"
|
||
local_compose ps "$SERVICE"
|
||
local_registry_logout
|
||
trap - EXIT HUP INT TERM
|
||
return 0
|
||
fi
|
||
|
||
echo "新镜像健康检查失败: $IMAGE" >&2
|
||
failed_container_id="$(local_container_id || true)"
|
||
if [ -n "$failed_container_id" ]; then
|
||
echo "新镜像容器最近日志（最多 200 行）:" >&2
|
||
docker logs --tail 200 "$failed_container_id" 2>&1 || true
|
||
else
|
||
echo "新镜像容器不存在，无法读取启动日志" >&2
|
||
fi
|
||
expected_prefix="$IMAGE_REPOSITORY/$SERVICE:"
|
||
case "$previous_image" in
|
||
"$expected_prefix"*)
|
||
previous_tag="${previous_image#"$expected_prefix"}"
|
||
;;
|
||
'')
|
||
echo "首次部署没有可回滚镜像，部署失败" >&2
|
||
local_compose stop "$SERVICE" >/dev/null 2>&1 || true
|
||
return 1
|
||
;;
|
||
*)
|
||
echo "旧镜像不属于当前服务，拒绝自动回滚: $previous_image" >&2
|
||
return 1
|
||
;;
|
||
esac
|
||
if [ "$previous_image" = "$IMAGE" ]; then
|
||
echo "旧镜像与新镜像相同，无法自动回滚: $IMAGE" >&2
|
||
return 1
|
||
fi
|
||
|
||
echo "开始自动回滚到: $previous_image" >&2
|
||
if ! docker pull "$previous_image"; then
|
||
echo "自动回滚失败，无法拉取旧镜像: $previous_image" >&2
|
||
return 1
|
||
fi
|
||
IMAGE_TAG="$previous_tag"
|
||
export IMAGE_TAG
|
||
if ! local_compose up -d --no-deps --pull never "$SERVICE"; then
|
||
echo "自动回滚失败，旧镜像启动命令失败: $previous_image" >&2
|
||
return 1
|
||
fi
|
||
if wait_for_local_health; then
|
||
echo "自动回滚成功: $previous_image" >&2
|
||
local_compose ps "$SERVICE" || true
|
||
else
|
||
echo "自动回滚失败，旧镜像未恢复健康: $previous_image" >&2
|
||
fi
|
||
return 1
|
||
}
|
||
|
||
if [ "${TARGET_IS_LOCAL:-false}" = "true" ]; then
|
||
echo "镜像已在目标服务器本机，直接部署: $IMAGE"
|
||
deploy_local
|
||
exit 0
|
||
fi
|
||
|
||
SSH_TARGET="${TARGET_SSH_TARGET:?TARGET_SSH_TARGET 未设置}"
|
||
SSH_KEY="${TARGET_SSH_KEY:?TARGET_SSH_KEY 未设置}"
|
||
SSH_KNOWN_HOSTS="${TARGET_SSH_KNOWN_HOSTS:?TARGET_SSH_KNOWN_HOSTS 未设置}"
|
||
REMOTE_DIR="${TARGET_DEPLOY_DIR:?TARGET_DEPLOY_DIR 未设置}"
|
||
|
||
for file in "$SSH_KEY" "$SSH_KNOWN_HOSTS"; do
|
||
if [ ! -f "$file" ]; then
|
||
echo "SSH 文件不存在: $file" >&2
|
||
exit 2
|
||
fi
|
||
done
|
||
|
||
run_ssh() {
|
||
ssh -i "$SSH_KEY" \
|
||
-o BatchMode=yes \
|
||
-o Compression=no \
|
||
-o StrictHostKeyChecking=yes \
|
||
-o UserKnownHostsFile="$SSH_KNOWN_HOSTS" \
|
||
-o ConnectTimeout=10 \
|
||
"$SSH_TARGET" "$@"
|
||
}
|
||
|
||
run_scp() {
|
||
scp -i "$SSH_KEY" \
|
||
-o BatchMode=yes \
|
||
-o Compression=no \
|
||
-o StrictHostKeyChecking=yes \
|
||
-o UserKnownHostsFile="$SSH_KNOWN_HOSTS" \
|
||
-o ConnectTimeout=10 \
|
||
"$@"
|
||
}
|
||
|
||
run_ssh install -d -m 750 "$REMOTE_DIR"
|
||
|
||
SUFFIX="${IMAGE_TAG}.$$.${SERVICE}"
|
||
REMOTE_ENV_NAME=".env.$PROJECT_NAME"
|
||
REMOTE_COMPOSE_NAME="docker-compose.$PROJECT_NAME.yml"
|
||
REMOTE_ENV_TMP="$REMOTE_DIR/$REMOTE_ENV_NAME.$SUFFIX.tmp"
|
||
REMOTE_COMPOSE_TMP="$REMOTE_DIR/$REMOTE_COMPOSE_NAME.$SUFFIX.tmp"
|
||
run_scp "$ENV_FILE" "$SSH_TARGET:$REMOTE_ENV_TMP"
|
||
run_scp "$COMPOSE_FILE" "$SSH_TARGET:$REMOTE_COMPOSE_TMP"
|
||
run_ssh sh -s -- "$REMOTE_ENV_TMP" "$REMOTE_COMPOSE_TMP" "$REMOTE_DIR/$REMOTE_ENV_NAME" "$REMOTE_DIR/$REMOTE_COMPOSE_NAME" <<'REMOTE_PREPARE'
|
||
set -eu
|
||
env_tmp="$1"
|
||
compose_tmp="$2"
|
||
env_target="$3"
|
||
compose_target="$4"
|
||
chmod 600 "$env_tmp"
|
||
chmod 644 "$compose_tmp"
|
||
mv -f "$env_tmp" "$env_target"
|
||
mv -f "$compose_tmp" "$compose_target"
|
||
REMOTE_PREPARE
|
||
|
||
remote_registry_logout() {
|
||
run_ssh docker logout "$REGISTRY_HOST" >/dev/null 2>&1 || true
|
||
}
|
||
|
||
echo "目标服务器从共享仓库拉取增量镜像: $IMAGE"
|
||
printf '%s' "$REGISTRY_PASSWORD" | run_ssh docker login -u "$REGISTRY_USER" --password-stdin "$REGISTRY_HOST"
|
||
trap remote_registry_logout EXIT HUP INT TERM
|
||
run_ssh docker pull "$IMAGE"
|
||
|
||
run_ssh sh -s -- "$REMOTE_DIR" "$DEPLOY_ENV" "$IMAGE_REPOSITORY" "$IMAGE_TAG" "$SERVICE" "$PROJECT_NAME" "$REMOTE_ENV_NAME" "$REMOTE_COMPOSE_NAME" "$HEALTH_TIMEOUT_SECONDS" "$HEALTH_POLL_SECONDS" <<'REMOTE_DEPLOY'
|
||
set -eu
|
||
remote_dir="$1"
|
||
deploy_env="$2"
|
||
image_repository="$3"
|
||
image_tag="$4"
|
||
service="$5"
|
||
project_name="$6"
|
||
env_file="$7"
|
||
compose_file="$8"
|
||
health_timeout_seconds="$9"
|
||
health_poll_seconds="${10}"
|
||
cd "$remote_dir"
|
||
export DEPLOY_ENV="$deploy_env"
|
||
export IMAGE_REPOSITORY="$image_repository"
|
||
export IMAGE_TAG="$image_tag"
|
||
if [ "$deploy_env" = "development" ]; then
|
||
export PUBLISHED_BIND_ADDRESS=127.0.0.1
|
||
else
|
||
export PUBLISHED_BIND_ADDRESS="${PUBLISHED_BIND_ADDRESS:-0.0.0.0}"
|
||
fi
|
||
|
||
compose() {
|
||
docker compose \
|
||
--project-name "$project_name" \
|
||
--env-file "$env_file" \
|
||
-f "$compose_file" \
|
||
"$@"
|
||
}
|
||
|
||
container_id() {
|
||
compose ps --all --quiet "$service" | head -n 1
|
||
}
|
||
|
||
container_image() {
|
||
id="$(container_id)"
|
||
if [ -n "$id" ]; then
|
||
docker inspect --format '{{.Config.Image}}' "$id"
|
||
fi
|
||
}
|
||
|
||
health_state() {
|
||
id="$(container_id)"
|
||
if [ -z "$id" ]; then
|
||
echo missing
|
||
return
|
||
fi
|
||
docker inspect --format '{{if .State.Health}}{{.State.Health.Status}}{{else}}no-health:{{.State.Status}}{{end}}' "$id" 2>/dev/null || echo missing
|
||
}
|
||
|
||
wait_for_health() {
|
||
elapsed=0
|
||
while [ "$elapsed" -lt "$health_timeout_seconds" ]; do
|
||
state="$(health_state)"
|
||
echo "容器健康状态: $state（已等待 ${elapsed}s）"
|
||
case "$state" in
|
||
healthy) return 0 ;;
|
||
no-health:running)
|
||
echo "容器未配置 HEALTHCHECK，以运行状态作为成功依据" >&2
|
||
return 0
|
||
;;
|
||
unhealthy|no-health:exited|no-health:dead) return 1 ;;
|
||
esac
|
||
sleep "$health_poll_seconds"
|
||
elapsed=$((elapsed + health_poll_seconds))
|
||
done
|
||
echo "等待容器健康超时: ${health_timeout_seconds}s" >&2
|
||
return 1
|
||
}
|
||
|
||
new_image="$image_repository/$service:$image_tag"
|
||
previous_image="$(container_image || true)"
|
||
if [ -n "$previous_image" ]; then
|
||
echo "部署前运行镜像: $previous_image"
|
||
else
|
||
echo "首次部署，未发现可回滚的旧镜像"
|
||
fi
|
||
|
||
new_started=true
|
||
if ! compose up -d --no-deps --pull never "$service"; then
|
||
echo "新镜像启动命令失败: $new_image" >&2
|
||
new_started=false
|
||
fi
|
||
if [ "$new_started" = "true" ] && wait_for_health; then
|
||
running_image="$(container_image || true)"
|
||
if [ "$running_image" != "$new_image" ]; then
|
||
echo "运行容器镜像与请求镜像不一致: expected=$new_image actual=${running_image:-missing}" >&2
|
||
exit 1
|
||
fi
|
||
echo "新镜像健康检查通过: $new_image"
|
||
compose ps "$service"
|
||
exit 0
|
||
fi
|
||
|
||
echo "新镜像健康检查失败: $new_image" >&2
|
||
failed_container_id="$(remote_container_id || true)"
|
||
if [ -n "$failed_container_id" ]; then
|
||
echo "新镜像容器最近日志（最多 200 行）:" >&2
|
||
docker logs --tail 200 "$failed_container_id" 2>&1 || true
|
||
else
|
||
echo "新镜像容器不存在，无法读取启动日志" >&2
|
||
fi
|
||
expected_prefix="$image_repository/$service:"
|
||
case "$previous_image" in
|
||
"$expected_prefix"*) previous_tag="${previous_image#"$expected_prefix"}" ;;
|
||
'')
|
||
echo "首次部署没有可回滚镜像，部署失败" >&2
|
||
compose stop "$service" >/dev/null 2>&1 || true
|
||
exit 1
|
||
;;
|
||
*)
|
||
echo "旧镜像不属于当前服务，拒绝自动回滚: $previous_image" >&2
|
||
exit 1
|
||
;;
|
||
esac
|
||
if [ "$previous_image" = "$new_image" ]; then
|
||
echo "旧镜像与新镜像相同，无法自动回滚: $new_image" >&2
|
||
exit 1
|
||
fi
|
||
|
||
echo "开始自动回滚到: $previous_image" >&2
|
||
if ! docker pull "$previous_image"; then
|
||
echo "自动回滚失败，无法拉取旧镜像: $previous_image" >&2
|
||
exit 1
|
||
fi
|
||
IMAGE_TAG="$previous_tag"
|
||
export IMAGE_TAG
|
||
if ! compose up -d --no-deps --pull never "$service"; then
|
||
echo "自动回滚失败，旧镜像启动命令失败: $previous_image" >&2
|
||
exit 1
|
||
fi
|
||
if wait_for_health; then
|
||
echo "自动回滚成功: $previous_image" >&2
|
||
compose ps "$service" || true
|
||
else
|
||
echo "自动回滚失败，旧镜像未恢复健康: $previous_image" >&2
|
||
fi
|
||
exit 1
|
||
REMOTE_DEPLOY
|
||
|
||
remote_registry_logout
|
||
trap - EXIT HUP INT TERM
|