Compare commits

..

28 Commits

Author SHA1 Message Date
Steven Agyekum c22c1a5555 Update action.yml 2019-12-04 18:45:06 +01:00
Steven Agyekum 530c686e9a Update README.md 2019-12-04 16:20:24 +01:00
Steven Agyekum fd809f93e2 Update action.yml 2019-12-04 16:16:03 +01:00
Steven Agyekum cd8d80d480 Create action.yml 2019-12-04 16:15:06 +01:00
Steven Agyekum 65d16d5e1b Update LICENSE 2019-12-04 16:09:28 +01:00
Steven Agyekum 7681fdf023 Update README.md 2019-12-04 16:08:51 +01:00
Steven Agyekum 0ce1e18957 Update README.md 2019-12-04 16:08:15 +01:00
Steven Agyekum 7d15fca650 Update README.md 2019-11-25 22:13:12 +01:00
Steven Agyekum ab6e32151b Update Dockerfile 2019-11-22 00:31:36 +01:00
Steven Agyekum fa33e6606d removed --includes, --excludes and --filters switches
removed --includes, --excludes and --filters switches. Use --switches instead to include/exclude files and folders interchangeably
2019-11-22 00:30:25 +01:00
Steven Agyekum 44615a7931 remove --includes, --excludes and --filters switches. Use --switches instead to include/exclude files and folders interchangeably 2019-11-22 00:28:06 +01:00
Steven Agyekum 84e60e763c change base image 2019-11-16 20:00:57 +01:00
Steven Agyekum a7b38d9b16 Update README.md 2019-11-13 00:45:15 +01:00
Steven Agyekum cdb8f481ea mention includes and filters args 2019-11-12 23:39:54 +01:00
Steven Agyekum afc3d5d8d4 added INPUT_INCLUDES and INPUT_FILTERS args 2019-11-12 23:37:25 +01:00
Steven Agyekum e07b616b2e mention new rsh arg 2019-11-12 23:12:20 +01:00
Steven Agyekum 59a1203852 add support to add additional remote shell (--rsh) commands 2019-11-12 23:06:22 +01:00
Steven Agyekum f8b88bb4fa not on bash 2019-11-12 22:55:41 +01:00
Steven Agyekum 7d8c19d72a Update README.md 2019-11-12 22:50:40 +01:00
Steven Agyekum 0370813668 fix 'mkdir: cannot create directory' error
Fix ``mkdir: cannot create directory '/github/home/.ssh': File exists`` error
2019-11-12 22:49:15 +01:00
Mick Ryan 8ad6165315 Add updated readme for Yaml style actions 2019-09-14 11:33:49 -07:00
Mick Ryan c36b09ff5d add new param for path 2019-09-14 09:53:44 -07:00
Mick Ryan 2026161543 Fix typo 2019-09-14 02:04:26 -07:00
Mick Ryan 9abeae5926 change args 2019-09-14 01:59:20 -07:00
Contention 65ac047ad6 Updated refs in Dockerfile to current url.
Fixes #1
2019-05-13 14:37:48 +01:00
Barry Bell 980b08d70e Minor changes to readme 2019-02-09 13:19:13 +00:00
Barry Bell f8860c9bce Initial code commit 2019-02-09 13:17:45 +00:00
Contention dc7ac312a6 Initial commit 2019-02-09 13:15:17 +00:00
12 changed files with 111 additions and 169 deletions
+23 -12
View File
@@ -1,16 +1,27 @@
FROM alpine:3.20.0
MAINTAINER Dr Internet <internet@limelightgaming.net>
FROM ubuntu:latest
# Install RSync and Open SSH.
RUN apk update && apk add --no-cache rsync openssh-client
RUN rm -rf /var/cache/apk/*
# Prepare SSH dir.
RUN mkdir ~/.ssh
# Update
RUN apt-get update
# Copy in our executables.
COPY agent-* hosts-* /bin/
RUN chmod +x /bin/agent-* /bin/hosts-*
# Prepare for known hosts.
RUN hosts-clear
# Install packages
RUN apt-get -yq install rsync openssh-client
# Label
LABEL "com.github.actions.name"="rsync deployments"
LABEL "com.github.actions.description"="For deploying code to a webserver via rsync over ssh"
LABEL "com.github.actions.icon"="truck"
LABEL "com.github.actions.color"="yellow"
LABEL "repository"="https://github.com/Burnett01/rsync-deployments"
LABEL "homepage"="https://github.com/Burnett01/rsync-deployments"
LABEL "maintainer"="Contention <hello@contention.agency> & Burnett01"
# Copy entrypoint
ADD entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]
+2 -1
View File
@@ -1,6 +1,7 @@
MIT License
Copyright (c) 2020 Joshua Piper
Copyright (c) 2019 Contention
Copyright (c) 2019 Burnett01
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
+45 -81
View File
@@ -1,93 +1,57 @@
# rsync docker image.
# rsync deployments
A simple alpine based docker image for rsync and ssh deployments.
## Using this image
This image has two primary uses. Firstly, as a deployment image for GitLab CI runs. Secondly, as a base image for other images.
### gitlab-ci.yml
```yml
image: drinternet/rsync:1.0.1
...
before_script:
- source agent-autostart "$CI_PROJECT_ID-$CI_PIPELINE_ID-$_CI_CONCURRENT_ID"
- hosts-add "$SSH_KNOWN_HOSTS"
after_script:
- agent-stop "$CI_PROJECT_ID-$CI_PIPELINE_ID-$_CI_CONCURRENT_ID"
```
### Base image in a `Dockerfile
```dockerfile
FROM drinternet/rsync:1.0.1
COPY some/file or/whatever
```
## Inbuilt commands.
This base image also includes a few shell scripts, to help with managing SSH agents and known hosts files.
### SSH Agent Management
#### agent-start
This command starts the SSH agent, if it isn't already started (SSH_AGENT_PID set or ssh agent ID file found).
It takes one optional argument, for the name of the agent to be started. Defaults to "default".
This program needs to be source'd to work correctly.
`source agent-start "default"`
#### agent-stop
This command stops the SSH agent, if it is started (SSH_AGENT_PID set or ssh agent ID file found).
It takes one optional argument, for the name of the agent to be stopped. Defaults to "default".
`agent-stop "my-agent-name"`
#### agent-add
This command adds a key to the currently running SSH agent. The key is taken from stdin, and the agent used is that in SSH_AGENT_PID.
#### agent-autostart
This command starts the SSH agent and loads the private key from the "SSH_PRIVATE_KEY" environment var. The command takes one optional argument, for the name of the agent to be started. Defaults to "default".
As with agent-start, this command needs to be sourced.
#### agent-askpass
This command is called by ssh-add when the [SSH_ASKPASS](https://man.openbsd.org/ssh-add.1#ENVIRONMENT) variable is set active. The command returns the SSH_PASS to [ssh-askpass(1)](https://man.openbsd.org/ssh-askpass.1).
This command is ignored by ssh-add if the key does not require a passphrase.
### known_hosts management
#### hosts-clear
This command truncates the known_hosts file and sets its permissions.
#### hosts-add
This command adds an entry to the known hosts file, and ensures its permissions are correct. It takes one argument, which is the new key to add.
## Tags
Both the repository and Docker Hub images follow the [semantic versioning](https://semver.org/) standard.
Docker Hub image versions are prefixed with v, and contain the full version, version sub patch number and version sub minor and patch.
For example, the repository tag 1.2.3, creates the Hub tags v1.2.3, v1.2 and v1, to allow for binding to a specific version, specific minor version or specific major version.
Forked from [Contention/rsync-deployments](https://github.com/Contention/rsync-deployments)
## Example gitlab-ci.yml
```yml
image: drinternet/rsync:1.0.1
This GitHub Action deploys files in `GITHUB_WORKSPACE` to a folder on a server via rsync over ssh.
stages:
- deploy
Use this action in a build/test workflow which leaves deployable code in `GITHUB_WORKSPACE`.
before_script:
- source agent-autostart "$CI_PROJECT_ID-$CI_PIPELINE_ID-$_CI_CONCURRENT_ID"
- hosts-add "$SSH_KNOWN_HOSTS"
# Required SECRETs
after_script:
- agent-stop "$CI_PROJECT_ID-$CI_PIPELINE_ID-$_CI_CONCURRENT_ID"
This action needs a `DEPLOY_KEY` secret variable. This should be the private key part of a ssh key pair. The public key part should be added to the authorized_keys file on the server that receives the deployment. This should be set in the Github secrets section and then referenced as an `env` variable.
deploy:
stage: deploy
script:
- rsync -zrSlhaO --chmod=D2775,F664 --delete-after . $FTP_USER@$FTP_HOST:/var/www/deployment/
```
# ARGs
## Using with passphrase protected key
This action requires 4 args in the `with` block.
You can supply a passphrase with ``SSH_PASS`` to ``agent-add``, ``agent-start`` or ``agent-autostart``.
1. `swtiches` - The first is for any initial/required rsync flags, eg: `-avzr --delete`
2. `rsh` - Remote shell commands, eg for using a different SSH port: `"-p ${{ secrets.DEPLOY_PORT }}"`
3. `path` - The source path, if none; use `""`
4. `upload_path` - The deployment target, and should be in the format: `[USER]@[HOST]:[PATH]`
# Example usage
```
SSH_PASS="THE_PASSPHRASE" agent-add
name: DEPLOY
on:
push:
branches:
- master
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v1
- name: rsync deployments
uses: burnett01/rsync-deployments@1.0
with:
switches: -avzr --delete --exclude="" --include=""
rsh: "-p ${{ secrets.DEPLOY_PORT }}"
path: src/
upload_path: user@example.com:/var/www/html/
env:
DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
```
## Disclaimer
If you're using GitHub Actions, you probably already know that it's still in limited public beta, and GitHub advise against using Actions in production.
So, check your keys. Check your deployment paths. And use at your own risk.
+24
View File
@@ -0,0 +1,24 @@
name: 'Rsync Deployments Action'
description: 'GitHub Action for deploying code via rsync over ssh'
author: 'Burnett01'
inputs:
switches:
description: 'The switches'
required: true
rsh:
description: 'The remote shell argument'
required: false
default: ''
path:
description: 'The local path'
required: false
default: ''
upload_path:
description: 'The remote path'
required: true
runs:
using: 'docker'
image: 'Dockerfile'
branding:
icon: 'send'
color: 'gray-dark'
-4
View File
@@ -1,4 +0,0 @@
#!/bin/sh
source agent-start "${1:-default}"
cat - | tr -d '\r' | DISPLAY=1 SSH_ASKPASS=agent-askpass ssh-add - >/dev/null
-2
View File
@@ -1,2 +0,0 @@
#!/bin/sh
echo "$SSH_PASS"
-4
View File
@@ -1,4 +0,0 @@
#!/bin/sh
source agent-start "${1:-default}"
echo "$SSH_PRIVATE_KEY" | agent-add
-22
View File
@@ -1,22 +0,0 @@
#!/bin/sh
FOLDER=${1:-default}
STORE_PATH="/tmp/ssh-agent/$FOLDER"
mkdir -p "$STORE_PATH"
# Start the SSH agent if it isn't already.
if [ -z "$SSH_AGENT_PID" ]; then
if [ -f "$STORE_PATH/id" ]; then
# Our auth agent is already running.
# Reload the vars, and export them.
SSH_AGENT_PID=$(cat "$STORE_PATH/id")
export SSH_AGENT_PID
SSH_AUTH_SOCK=$(cat "$STORE_PATH/sock")
export SSH_AUTH_SOCK
else
eval "$(ssh-agent)" > /dev/null
echo "$SSH_AGENT_PID" > "$STORE_PATH"/id
echo "$SSH_AUTH_SOCK" > "$STORE_PATH"/sock
fi
fi
-35
View File
@@ -1,35 +0,0 @@
#!/bin/sh
if [ ! -z "$SSH_AGENT_PID" ]; then
# Here, the environment is set already, just kill the script.
eval $(ssh-agent -k) >/dev/null
exit $?
else
# The env isn't set, construct the file path.
FOLDER=${1:-default}
STORE_PATH="/tmp/ssh-agent/$FOLDER"
if [ ! -d "$STORE_PATH" ]; then
echo "Store Path $STORE_PATH doesn't exist!" >&2
exit 1
fi
# And check our files exist.
if [ -f "$STORE_PATH/id" ]; then
# Grab our PID and socket.
SSH_AGENT_PID=$(cat "$STORE_PATH/id")
export SSH_AGENT_PID
rm "$STORE_PATH/id"
SSH_AUTH_SOCK=$(cat "$STORE_PATH/sock")
export SSH_AUTH_SOCK
rm "$STORE_PATH/sock"
rmdir "$STORE_PATH"
eval $(ssh-agent -k) >/dev/null
exit $?
else
echo "SSH_AGENT_PID not set, $STORE_PATH/id doesn't exist!" >&2
exit 1
fi
fi
Executable
+17
View File
@@ -0,0 +1,17 @@
#!/bin/sh
set -eu
# Set deploy key
SSH_PATH="$HOME/.ssh"
# Create .ssh dir if it doesn't exist
if [ ! -d "$SSH_PATH" ]; then
mkdir "$SSH_PATH"
fi
# Place deploy_key into .ssh dir
echo "$DEPLOY_KEY" > "$SSH_PATH/deploy_key"
# Set r+w to user only
chmod 600 "$SSH_PATH/deploy_key"
# Do deployment
sh -c "rsync $INPUT_SWITCHES -e 'ssh -i $SSH_PATH/deploy_key -o StrictHostKeyChecking=no $INPUT_RSH' $GITHUB_WORKSPACE/$INPUT_PATH $INPUT_UPLOAD_PATH"
-4
View File
@@ -1,4 +0,0 @@
#!/bin/sh
echo "$@" >> ~/.ssh/known_hosts
chmod 0664 ~/.ssh/known_hosts
-4
View File
@@ -1,4 +0,0 @@
#!/bin/sh
truncate -s 0 ~/.ssh/known_hosts
chmod 0664 ~/.ssh/known_hosts