karti-ai
1ace52b2ab
The snapshot path was single-quoted inside the ssh payload, so the remote shell never expanded the command substitution: every deploy wrote into one directory named after the un-expanded literal, and the second deploy died on 'File exists'. It looked correct for exactly as long as there had only ever been one deploy — which is the failure mode this repo keeps finding, and the reason deploy.sh smoke-tests the public hostname instead of trusting an exit code. Two real snapshots now exist on the host. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019mt6sHQHEnEYrJZvoMCJSB
66 lines
3.0 KiB
Bash
Executable File
66 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Ship dist/ to cloud-2.
|
|
#
|
|
# Run from a machine on the tailnet (cloud-2's :22 is tailnet-only, which is
|
|
# also why a GitHub-hosted runner cannot do this).
|
|
#
|
|
# bash deploy/deploy.sh
|
|
#
|
|
# Keeps the last 10 releases as hard-linked snapshots, so a rollback is a
|
|
# directory rename rather than a rebuild.
|
|
set -euo pipefail
|
|
|
|
HOST="${PIG_DEMO_HOST:-ubuntu@100.92.185.76}"
|
|
ROOT="/var/www/demo.primeintellectgrowth.com"
|
|
SNAPS="${ROOT}-rollbacks"
|
|
URL="https://demo.primeintellectgrowth.com"
|
|
|
|
cd "$(dirname "$0")/.."
|
|
|
|
[ -d dist ] || { echo "no dist/ — run 'pnpm build' first"; exit 1; }
|
|
[ -f dist/index.html ] || { echo "dist/index.html missing"; exit 1; }
|
|
# The prerender pass is what makes shared links preview correctly. A dist
|
|
# without it builds and serves fine, which is exactly why it needs asserting.
|
|
[ -f dist/404.html ] || { echo "dist/404.html missing — did prerender run?"; exit 1; }
|
|
|
|
echo "==> preflight on ${HOST}"
|
|
ssh "$HOST" "set -e
|
|
free=\$(df --output=avail -BG / | tail -1 | tr -dc 0-9)
|
|
[ \"\$free\" -ge 3 ] || { echo \"only \${free}G free on /\"; exit 1; }
|
|
mkdir -p '$SNAPS'
|
|
if [ -d '$ROOT' ] && [ -n \"\$(ls -A '$ROOT' 2>/dev/null)\" ]; then
|
|
# Double quotes, not single. Inside single quotes the remote shell never
|
|
# expands the command substitution, so every deploy wrote into a single
|
|
# directory named after the un-expanded literal, and the SECOND deploy died
|
|
# on 'File exists'. It looked like it worked for exactly as long as there
|
|
# had only ever been one deploy. Note this comment is inside a
|
|
# double-quoted ssh payload: anything it names gets expanded too.
|
|
cp -al '$ROOT' \"$SNAPS/\$(date +%Y%m%d-%H%M%S)\"
|
|
fi
|
|
ls -1dt '$SNAPS'/*/ 2>/dev/null | tail -n +11 | xargs -r rm -rf"
|
|
|
|
echo "==> rsync"
|
|
rsync -az --delete --checksum dist/ "$HOST:$ROOT/"
|
|
|
|
echo "==> smoke test against the public hostname"
|
|
# Against the real name from THIS machine, never --resolve from cloud-2: a
|
|
# missing `bind 10.0.0.2` in the Caddy block serves an empty 200 to the
|
|
# internet while a local --resolve check still passes.
|
|
code=$(curl -sS -o /tmp/pigdemo-smoke.html -w '%{http_code}' --max-time 30 "$URL/")
|
|
size=$(wc -c < /tmp/pigdemo-smoke.html)
|
|
echo " / -> $code, ${size}b"
|
|
[ "$code" = "200" ] || { echo "FAILED: / returned $code"; exit 1; }
|
|
[ "$size" -gt 1000 ] || { echo "FAILED: / is ${size}b — almost certainly the empty-200 bind bug"; exit 1; }
|
|
grep -q '<div id="root"' /tmp/pigdemo-smoke.html || { echo "FAILED: no app root in the HTML"; exit 1; }
|
|
|
|
demo=$(curl -sS -o /tmp/pigdemo-demo.html -w '%{http_code}' --max-time 30 "$URL/demos/wordle")
|
|
echo " /demos/wordle -> $demo"
|
|
[ "$demo" = "200" ] || { echo "FAILED: demo route returned $demo"; exit 1; }
|
|
grep -q 'og:title' /tmp/pigdemo-demo.html || { echo "FAILED: demo route has no baked og tags"; exit 1; }
|
|
|
|
missing=$(curl -sS -o /dev/null -w '%{http_code}' --max-time 30 "$URL/nope-not-a-page")
|
|
echo " /nope-not-a-page -> $missing"
|
|
[ "$missing" = "404" ] || { echo "WARNING: unknown path returned $missing, expected 404"; }
|
|
|
|
echo "==> live: $URL"
|