justme
0a66f5e07a
CI signs the image digest of each agent and probe release; the panel only stores and forwards it. Nodes write the manifest to their data directory and a host updater verifies the signature with a local public key, pulls by digest, restarts the unit and rolls back when it is unhealthy. The panel can list releases, ask a node to update and show the reported update state.
64 lines
1.5 KiB
YAML
64 lines
1.5 KiB
YAML
labels:
|
|
ci: domain-linux-native
|
|
platform: linux/amd64
|
|
|
|
clone:
|
|
- name: git
|
|
image: plugin-git
|
|
settings:
|
|
lfs: false
|
|
|
|
when:
|
|
- event: push
|
|
branch: main
|
|
evaluate: 'CI_COMMIT_MESSAGE contains "[CI]"'
|
|
|
|
concurrency: 1
|
|
|
|
steps:
|
|
- name: build-linux-amd64-backend
|
|
image: bash
|
|
environment:
|
|
NUGET_PACKAGES: /home/justme/.nuget/packages
|
|
ZOT_REGISTRY: registry.oeo.one
|
|
ZOT_USERNAME: justme
|
|
ZOT_SECRET:
|
|
from_secret: zot_secret
|
|
commands:
|
|
- bash ci/build-main-amd64.sh backend
|
|
depends_on: []
|
|
|
|
- name: build-linux-amd64-agent
|
|
image: bash
|
|
environment:
|
|
NUGET_PACKAGES: /home/justme/.nuget/packages
|
|
ZOT_REGISTRY: registry.oeo.one
|
|
ZOT_USERNAME: justme
|
|
ZOT_SECRET:
|
|
from_secret: zot_secret
|
|
RELEASE_API_URL: https://mo.oeo.one
|
|
RELEASE_SIGNING_KEY:
|
|
from_secret: release_signing_key
|
|
RELEASE_API_TOKEN:
|
|
from_secret: release_api_token
|
|
commands:
|
|
- bash ci/build-main-amd64.sh agent
|
|
depends_on: []
|
|
|
|
- name: build-linux-amd64-probe
|
|
image: bash
|
|
environment:
|
|
NUGET_PACKAGES: /home/justme/.nuget/packages
|
|
ZOT_REGISTRY: registry.oeo.one
|
|
ZOT_USERNAME: justme
|
|
ZOT_SECRET:
|
|
from_secret: zot_secret
|
|
RELEASE_API_URL: https://mo.oeo.one
|
|
RELEASE_SIGNING_KEY:
|
|
from_secret: release_signing_key
|
|
RELEASE_API_TOKEN:
|
|
from_secret: release_api_token
|
|
commands:
|
|
- bash ci/build-main-amd64.sh probe
|
|
depends_on: []
|