Merge dev to main: Security improvements and comprehensive test infrastructure #39

Merged
jimmy merged 195 commits from dev into main 2026-04-08 01:42:27 +08:00
Showing only changes of commit 3e62abfc65 - Show all commits
+12 -5
View File
@@ -16,10 +16,13 @@ jobs:
steps: steps:
- name: Checkout repository - name: Checkout repository
run: | run: |
cd /volume1/repos/nas-tools # Clone into a temp directory accessible by runner
git fetch origin dev WORK_DIR="/tmp/nas-tools-deploy-$$"
rm -rf "$WORK_DIR"
git clone http://gitea:3000/jimmy/nas-tools.git "$WORK_DIR"
cd "$WORK_DIR"
git checkout ${{ github.sha }} git checkout ${{ github.sha }}
git clean -fd echo "WORK_DIR=$WORK_DIR" >> $GITHUB_ENV
- name: Warm mirror cache for base images - name: Warm mirror cache for base images
run: | run: |
set -u set -u
@@ -52,13 +55,13 @@ jobs:
- name: Build dev image - name: Build dev image
run: | run: |
cd /volume1/repos/nas-tools cd $WORK_DIR
export DOCKER_API_VERSION=1.43 export DOCKER_API_VERSION=1.43
DOCKER_BUILDKIT=0 docker build --cache-from nas-dashboard-dev:latest -t nas-dashboard-dev:latest dashboard/ DOCKER_BUILDKIT=0 docker build --cache-from nas-dashboard-dev:latest -t nas-dashboard-dev:latest dashboard/
- name: Sync runtime compose file - name: Sync runtime compose file
run: | run: |
mkdir -p /volume1/docker/nas-dashboard mkdir -p /volume1/docker/nas-dashboard
cp /volume1/repos/nas-tools/dashboard/docker-compose.dev.yml /volume1/docker/nas-dashboard/docker-compose.dev.yml cp $WORK_DIR/dashboard/docker-compose.dev.yml /volume1/docker/nas-dashboard/docker-compose.dev.yml
- name: Deploy dev - name: Deploy dev
run: | run: |
set -euo pipefail set -euo pipefail
@@ -81,3 +84,7 @@ jobs:
# Connect to gitea_gitea network for database access (OPC_DB) # Connect to gitea_gitea network for database access (OPC_DB)
docker network connect gitea_gitea nas-dashboard-dev || true docker network connect gitea_gitea nas-dashboard-dev || true
- name: Cleanup
if: always()
run: |
rm -rf $WORK_DIR