init project+ci/cd

.gitea/workflows/cd.yml

@@ -0,0 +1,85 @@
+name: CD
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+env:
+  DEPLOY_DIR: /opt/syscall_monitor
+  HEALTH_URL: http://127.0.0.1:5000
+
+jobs:
+  deploy:
+    runs-on: self-hosted
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Show target host info
+        run: |
+          echo "deploying on: $(hostname)"
+          echo "user: $(id -un) ($(id -u))"
+          echo "ref: ${{ gitea.ref }}"
+          echo "deploy dir: $DEPLOY_DIR"
+
+      - name: Stop running instance (if any)
+        run: |
+          if [ -x "$DEPLOY_DIR/stop.sh" ]; then
+            sudo -n "$DEPLOY_DIR/stop.sh" || true
+          else
+            echo "no prior install at $DEPLOY_DIR, skipping stop"
+          fi
+
+      - name: Sync code to deploy dir
+        run: |
+          sudo -n /usr/bin/rsync -a --delete \
+            --exclude='.git' \
+            --exclude='.venv' \
+            --exclude='.venv-ci' \
+            --exclude='logs' \
+            --exclude='.pid' \
+            ./ "$DEPLOY_DIR/"
+          sudo -n chmod +x "$DEPLOY_DIR/setup.sh" "$DEPLOY_DIR/run.sh" "$DEPLOY_DIR/stop.sh"
+
+      - name: Setup venv and dependencies
+        run: sudo -n "$DEPLOY_DIR/setup.sh"
+
+      - name: Start service
+        run: sudo -n "$DEPLOY_DIR/run.sh"
+
+      - name: Verify pid is alive
+        run: |
+          sleep 2
+          PID_FILE="$DEPLOY_DIR/.pid"
+          if [ ! -f "$PID_FILE" ]; then
+            echo "no .pid file at $PID_FILE" >&2
+            sudo -n tail -n 50 "$DEPLOY_DIR/logs/app.log" >&2 || true
+            exit 1
+          fi
+          PID=$(cat "$PID_FILE")
+          if ! kill -0 "$PID" 2>/dev/null; then
+            echo "pid $PID not alive" >&2
+            sudo -n tail -n 50 "$DEPLOY_DIR/logs/app.log" >&2 || true
+            exit 1
+          fi
+          echo "service running, pid=$PID"
+
+      - name: HTTP health check
+        run: |
+          for i in 1 2 3 4 5 6 7 8 9 10; do
+            if curl -fsS -o /dev/null "$HEALTH_URL"; then
+              echo "health check passed on attempt $i"
+              exit 0
+            fi
+            echo "attempt $i failed, retrying..."
+            sleep 2
+          done
+          echo "health check failed: $HEALTH_URL unreachable" >&2
+          sudo -n tail -n 80 "$DEPLOY_DIR/logs/app.log" >&2 || true
+          exit 1
+
+      - name: Tail startup log
+        if: always()
+        run: sudo -n tail -n 30 "$DEPLOY_DIR/logs/app.log" || true