Make first deployment race-safe

2026-07-29 13:18:44 +02:00
parent 15359a7989
commit 99ba1a2373
5 changed files with 179 additions and 5 deletions
@@ -0,0 +1,120 @@
+#!/usr/bin/env bash
+
+set -Eeuo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../.." && pwd)"
+UPLOAD_SCRIPT="$ROOT_DIR/deploy/scripts/upload-and-deploy.sh"
+TEST_ROOT="$(mktemp -d)"
+FAKE_BIN="$TEST_ROOT/bin"
+FAKE_LOG="$TEST_ROOT/calls.log"
+CHECK_COUNT="$TEST_ROOT/release-check-count"
+TEST_IDENTITY="$TEST_ROOT/deploy-key"
+REVISION="3333333333333333333333333333333333333333"
+LOCAL_ENV="$ROOT_DIR/deploy/.env.production"
+CREATED_LOCAL_ENV=false
+
+cleanup() {
+  if [[ "$CREATED_LOCAL_ENV" == "true" && -f "$LOCAL_ENV" ]]; then
+    rm -f -- "$LOCAL_ENV"
+  fi
+  rm -rf -- "$TEST_ROOT"
+}
+trap cleanup EXIT
+
+mkdir -p "$FAKE_BIN"
+touch "$FAKE_LOG" "$TEST_IDENTITY"
+printf '0\n' >"$CHECK_COUNT"
+
+if [[ ! -f "$LOCAL_ENV" ]]; then
+  cp "$ROOT_DIR/deploy/.env.production.example" "$LOCAL_ENV"
+  CREATED_LOCAL_ENV=true
+fi
+
+fail() {
+  printf 'Fehler: %s\n' "$*" >&2
+  exit 1
+}
+
+assert_contains() {
+  local expected="$1"
+  local actual="$2"
+  grep -Fq -- "$expected" <<<"$actual" ||
+    fail "Erwarteter Text fehlt: $expected"
+}
+
+cat >"$FAKE_BIN/git" <<'SH'
+#!/usr/bin/env bash
+set -Eeuo pipefail
+case "$*" in
+  *"status --porcelain --untracked-files=normal"*)
+    exit 0
+    ;;
+  *"rev-parse HEAD"*)
+    printf '%s\n' "$FAKE_REVISION"
+    ;;
+  *)
+    printf 'Unerwarteter Git-Aufruf: %s\n' "$*" >&2
+    exit 90
+    ;;
+esac
+SH
+
+cat >"$FAKE_BIN/rsync" <<'SH'
+#!/usr/bin/env bash
+set -Eeuo pipefail
+printf 'rsync|%s\n' "$*" >>"$FAKE_CALL_LOG"
+SH
+
+cat >"$FAKE_BIN/ssh" <<'SH'
+#!/usr/bin/env bash
+set -Eeuo pipefail
+printf 'ssh|%s\n' "$*" >>"$FAKE_CALL_LOG"
+
+if [[ "$*" == *"WATERMAPS_DEPLOY_REVISION=$FAKE_REVISION"* ]]; then
+  count="$(<"$FAKE_CHECK_COUNT")"
+  count=$((count + 1))
+  printf '%s\n' "$count" >"$FAKE_CHECK_COUNT"
+  ((count >= 2))
+fi
+SH
+
+cat >"$FAKE_BIN/sleep" <<'SH'
+#!/usr/bin/env bash
+set -Eeuo pipefail
+printf 'sleep|%s\n' "$*" >>"$FAKE_CALL_LOG"
+SH
+
+chmod 0755 "$FAKE_BIN/"*
+
+set +e
+output="$(
+  PATH="$FAKE_BIN:$PATH" \
+  FAKE_CALL_LOG="$FAKE_LOG" \
+  FAKE_CHECK_COUNT="$CHECK_COUNT" \
+  FAKE_REVISION="$REVISION" \
+  WATERMAPS_RELEASE_WAIT_SECONDS=60 \
+  WATERMAPS_RELEASE_POLL_SECONDS=5 \
+    "$UPLOAD_SCRIPT" \
+      --host 203.0.113.10 \
+      --identity "$TEST_IDENTITY" \
+      2>&1
+)"
+status=$?
+set -e
+
+[[ "$status" -eq 0 ]] ||
+  fail "Upload-Simulation ist fehlgeschlagen: $output"
+[[ "$(<"$CHECK_COUNT")" == "2" ]] ||
+  fail "Der revisionsgenaue Status wurde nicht bis zur Aktivierung erneut geprüft."
+assert_contains \
+  "systemctl start --no-block watermaps-auto-deploy.service" \
+  "$(<"$FAKE_LOG")"
+assert_contains \
+  "Das revisionsgenaue Erstdeployment läuft unter systemd" \
+  "$output"
+assert_contains \
+  "Commit $REVISION ist auf dem Server aktiv." \
+  "$output"
+assert_contains "sleep|5" "$(<"$FAKE_LOG")"
+
+printf 'Upload/Erstdeployment: systemd-Start und revisionsgenaues Warten: OK\n'