blob: 4704231a9d61aff22cbad1b8ea48bbaa3b3c4058 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
---
image: debian:unstable
stages:
- static
- build
- deploy
cache:
paths:
- vendor
# Jobs that start with a period are disabled
# This is just a template, to be used further below in the individual job definitions
.setup_apt: &setup_apt
before_script:
# Export APT env vars to cache packages archives and lists based on the current working directory
- export APT_DIR=$CI_PROJECT_DIR/vendor/apt && export APT_ARCHIVES_DIR=$APT_DIR/archives && export APT_LISTS_DIR=$APT_DIR/lists
# Configure APT: Only install necessary packages, set cache location
- printf
"apt::install-recommends 0;\n
apt::install-suggests 0;\n
dir::cache::archives ${APT_ARCHIVES_DIR};\n
dir::state::lists ${APT_LISTS_DIR};\n"
>> /etc/apt/apt.conf.d/99custom
# Ensure the custom APT directory does exist
- mkdir -p {${APT_ARCHIVES_DIR},${APT_LISTS_DIR}}/partial
- apt-get update -qq
# To keep things DRY, use an env var to handle packages to be installed via APT
- apt-get install -qq -y $APT_INSTALL_PACKAGES
codespell:
variables:
APT_INSTALL_PACKAGES: codespell
<<: *setup_apt
script:
# Run codespell to check for spelling errors, using a config to ignore
# warnings about binary files and to check file names as well.
- codespell -q 2 -f
stage: static
build:
variables:
APT_INSTALL_PACKAGES: jekyll
<<: *setup_apt
script:
- jekyll build
- tar cfz site.tar.gz _site
stage: build
artifacts:
paths:
- site.tar.gz
expire_in: 2 weeks
deploy:
variables:
APT_INSTALL_PACKAGES: lftp openssh-client
<<: *setup_apt
script:
# Disable bash history to prevent secret variables to be recorded and saved
- unset HISTFILE
# Start SSH agent
- eval $(ssh-agent -s)
# Add the SSH key stored in the SSH_DEPLOY_KEY variable to the agent store
# We're using 'tr' to fix line endings which makes ed25519 keys work without
# extra base64 encoding
- echo "$DEPLOY_KEY" | tr -d '\r' | ssh-add - > /dev/null
- mkdir -p ~/.ssh
- chmod 700 ~/.ssh
- printf "
|1|ZfxGVbfwfCHlaURlet/V6y+2gjg=|/X7OweXQUnXZnGSKkvF/IpVz4n4= ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPJx38PfGvaHtkSsHptiHoIQxlI3Yf0cskPNTwAQnY14\n
|1|8YPsezXF2SYQ7rq9U5TbDnMsVjo=|SJOodZB+8j+dO+l6YTdZ7+44XLw= ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPJx38PfGvaHtkSsHptiHoIQxlI3Yf0cskPNTwAQnY14
" > ~/.ssh/known_hosts
- tar fxv site.tar.gz
# It seems, lftp needs a "dummy" password, even if key-based authentication is used
- lftp -e "mirror -eRv -x ^download/ _site www; quit;" -u $DEPLOY_USER,dummy sftp://$DEPLOY_HOST
stage: deploy
only:
- master@schleuder/schleuder-website
- tags@schleuder/schleuder-website
|
