ci: make release artifacts selectable

This commit is contained in:
2026-08-14 13:31:15 +08:00
parent 51e4c41ee2
commit 506dca898e
Vendored
+158 -25
View File
@@ -14,6 +14,34 @@ pipeline {
buildDiscarder(logRotator(daysToKeepStr: '30', numToKeepStr: '20'))
}
parameters {
booleanParam(
name: 'RUN_TESTS',
defaultValue: true,
description: '运行前端构建检查和 .NET 全量测试'
)
booleanParam(
name: 'BUILD_FNOS',
defaultValue: true,
description: '构建 fnOS x86_64 FPK 安装包'
)
booleanParam(
name: 'UPLOAD_FNOS',
defaultValue: true,
description: '将本次构建的 fnOS 包上传到 OpenList(仅 BUILD_FNOS 生效)'
)
choice(
name: 'API_IMAGE_PLATFORMS',
choices: ['amd64+arm64', 'amd64', 'arm64', 'none'],
description: '选择需要构建并推送的 API Docker 镜像架构'
)
choice(
name: 'WEB_IMAGE_PLATFORMS',
choices: ['amd64+arm64', 'amd64', 'arm64', 'none'],
description: '选择需要构建并推送的 Web Docker 镜像架构'
)
}
environment {
PATH = '/home/nanxunai/.local/bin:/usr/local/bin:/usr/bin:/bin'
REGISTRY_URL = 'reg.nxsir.cn'
@@ -79,6 +107,13 @@ pipeline {
stage('Metadata And Preflight') {
steps {
script {
if (!params.RUN_TESTS &&
!params.BUILD_FNOS &&
params.API_IMAGE_PLATFORMS == 'none' &&
params.WEB_IMAGE_PLATFORMS == 'none') {
error('Select at least one test or build output.')
}
env.APP_VERSION = sh(
script: "sed -n 's/^version=//p' fnos/manifest | head -n 1",
returnStdout: true
@@ -160,6 +195,9 @@ pipeline {
}
stage('Restore And Test') {
when {
expression { params.RUN_TESTS }
}
steps {
sh '''
set -euo pipefail
@@ -171,7 +209,22 @@ pipeline {
}
}
stage('Prepare fnOS Dependencies') {
when {
expression { params.BUILD_FNOS && !params.RUN_TESTS }
}
steps {
sh '''
set -euo pipefail
npm ci --prefix frontend
'''
}
}
stage('Build fnOS x64') {
when {
expression { params.BUILD_FNOS }
}
steps {
sh '''
set -euo pipefail
@@ -184,6 +237,12 @@ pipeline {
}
stage('Prepare Docker Builder') {
when {
expression {
params.API_IMAGE_PLATFORMS != 'none' ||
params.WEB_IMAGE_PLATFORMS != 'none'
}
}
steps {
withCredentials([usernamePassword(
credentialsId: "${NODE_CREDENTIALS}",
@@ -192,10 +251,15 @@ pipeline {
)]) {
sh '''
set -euo pipefail
if [ "$API_IMAGE_PLATFORMS" = arm64 ] ||
[ "$API_IMAGE_PLATFORMS" = amd64+arm64 ] ||
[ "$WEB_IMAGE_PLATFORMS" = arm64 ] ||
[ "$WEB_IMAGE_PLATFORMS" = amd64+arm64 ]; then
if ! ./scripts/ci-docker.sh run --rm --platform linux/arm64 "$ARM_TEST_IMAGE" uname -m 2>/dev/null | grep -q aarch64; then
./scripts/ci-docker.sh run --privileged --rm "$BINFMT_IMAGE" --install arm64
fi
./scripts/ci-docker.sh run --rm --platform linux/arm64 "$ARM_TEST_IMAGE" uname -m | grep -q aarch64
fi
if ./scripts/ci-docker.sh buildx inspect "$BUILDER_NAME" >/dev/null 2>&1; then
./scripts/ci-docker.sh buildx use "$BUILDER_NAME"
@@ -218,6 +282,12 @@ pipeline {
}
stage('Prepare Harbor Authentication') {
when {
expression {
params.API_IMAGE_PLATFORMS != 'none' ||
params.WEB_IMAGE_PLATFORMS != 'none'
}
}
steps {
withCredentials([usernamePassword(
credentialsId: "${HARBOR_CREDENTIALS}",
@@ -238,6 +308,12 @@ pipeline {
}
stage('Build And Push amd64') {
when {
expression {
params.API_IMAGE_PLATFORMS.contains('amd64') ||
params.WEB_IMAGE_PLATFORMS.contains('amd64')
}
}
steps {
withCredentials([usernamePassword(
credentialsId: "${NODE_CREDENTIALS}",
@@ -251,6 +327,7 @@ pipeline {
api_ref="$API_IMAGE_REPO:$IMMUTABLE_TAG-$arch"
web_ref="$WEB_IMAGE_REPO:$IMMUTABLE_TAG-$arch"
if [ "$API_IMAGE_PLATFORMS" = amd64 ] || [ "$API_IMAGE_PLATFORMS" = amd64+arm64 ]; then
./scripts/ci-docker.sh buildx build \
--builder "$BUILDER_NAME" --platform "$platform" --network host \
--progress=plain --provenance=false \
@@ -263,6 +340,8 @@ pipeline {
--build-arg https_proxy="$HTTP_PROXY_URL" \
--build-arg no_proxy="$NO_PROXY_HOSTS" \
-f src/LiveRecorder.WebApi/Dockerfile -t "$api_ref" --push .
fi
if [ "$WEB_IMAGE_PLATFORMS" = amd64 ] || [ "$WEB_IMAGE_PLATFORMS" = amd64+arm64 ]; then
./scripts/ci-docker.sh buildx build \
--builder "$BUILDER_NAME" --platform "$platform" --network host \
--progress=plain --provenance=false \
@@ -276,12 +355,19 @@ pipeline {
--build-arg no_proxy="$NO_PROXY_HOSTS" \
--build-arg VITE_API_BASE_URL=/api \
-f frontend/Dockerfile -t "$web_ref" --push frontend
fi
'''
}
}
}
stage('Build And Push arm64') {
when {
expression {
params.API_IMAGE_PLATFORMS.contains('arm64') ||
params.WEB_IMAGE_PLATFORMS.contains('arm64')
}
}
steps {
withCredentials([usernamePassword(
credentialsId: "${NODE_CREDENTIALS}",
@@ -295,6 +381,7 @@ pipeline {
api_ref="$API_IMAGE_REPO:$IMMUTABLE_TAG-$arch"
web_ref="$WEB_IMAGE_REPO:$IMMUTABLE_TAG-$arch"
if [ "$API_IMAGE_PLATFORMS" = arm64 ] || [ "$API_IMAGE_PLATFORMS" = amd64+arm64 ]; then
./scripts/ci-docker.sh buildx build \
--builder "$BUILDER_NAME" --platform "$platform" --network host \
--progress=plain --provenance=false \
@@ -307,6 +394,8 @@ pipeline {
--build-arg https_proxy="$HTTP_PROXY_URL" \
--build-arg no_proxy="$NO_PROXY_HOSTS" \
-f src/LiveRecorder.WebApi/Dockerfile -t "$api_ref" --push .
fi
if [ "$WEB_IMAGE_PLATFORMS" = arm64 ] || [ "$WEB_IMAGE_PLATFORMS" = amd64+arm64 ]; then
./scripts/ci-docker.sh buildx build \
--builder "$BUILDER_NAME" --platform "$platform" --network host \
--progress=plain --provenance=false \
@@ -320,12 +409,19 @@ pipeline {
--build-arg no_proxy="$NO_PROXY_HOSTS" \
--build-arg VITE_API_BASE_URL=/api \
-f frontend/Dockerfile -t "$web_ref" --push frontend
fi
'''
}
}
}
stage('Publish Multi-arch Manifests') {
when {
expression {
params.API_IMAGE_PLATFORMS == 'amd64+arm64' ||
params.WEB_IMAGE_PLATFORMS == 'amd64+arm64'
}
}
steps {
withCredentials([usernamePassword(
credentialsId: "${NODE_CREDENTIALS}",
@@ -334,7 +430,8 @@ pipeline {
)]) {
sh '''
set -euo pipefail
for repository in "$API_IMAGE_REPO" "$WEB_IMAGE_REPO"; do
publish_manifest() {
repository=$1
immutable_ref="$repository:$IMMUTABLE_TAG"
./scripts/ci-docker.sh buildx imagetools create \
--tag "$immutable_ref" \
@@ -343,20 +440,26 @@ pipeline {
manifest=$(./scripts/ci-docker.sh buildx imagetools inspect --raw "$immutable_ref")
printf '%s' "$manifest" | grep -q '"architecture"[[:space:]]*:[[:space:]]*"amd64"'
printf '%s' "$manifest" | grep -q '"architecture"[[:space:]]*:[[:space:]]*"arm64"'
done
./scripts/ci-docker.sh buildx imagetools create \
--tag "$repository:$APP_VERSION" --tag "$repository:latest" \
"$immutable_ref"
}
./scripts/ci-docker.sh buildx imagetools create \
--tag "$API_IMAGE_REPO:$APP_VERSION" --tag "$API_IMAGE_REPO:latest" \
"$API_IMAGE_REPO:$IMMUTABLE_TAG"
./scripts/ci-docker.sh buildx imagetools create \
--tag "$WEB_IMAGE_REPO:$APP_VERSION" --tag "$WEB_IMAGE_REPO:latest" \
"$WEB_IMAGE_REPO:$IMMUTABLE_TAG"
if [ "$API_IMAGE_PLATFORMS" = amd64+arm64 ]; then
publish_manifest "$API_IMAGE_REPO"
fi
if [ "$WEB_IMAGE_PLATFORMS" = amd64+arm64 ]; then
publish_manifest "$WEB_IMAGE_REPO"
fi
'''
}
}
}
stage('Upload fnOS Artifact') {
when {
expression { params.BUILD_FNOS && params.UPLOAD_FNOS }
}
steps {
withCredentials([usernamePassword(
credentialsId: "${OPENLIST_CREDENTIALS}",
@@ -374,29 +477,59 @@ pipeline {
stage('Build Summary') {
steps {
sh '''
set -euo pipefail
printf '%s\n' \
"Commit: $(git rev-parse HEAD)" \
"Product version: $APP_VERSION" \
"fnOS package version: $FNOS_VERSION" \
"fnOS: $FPK_BASENAME" \
"Checksum: $(awk '{print $1}' "$FPK_PATH.sha256")" \
"API amd64: $API_IMAGE_REPO:$IMMUTABLE_TAG-amd64" \
"API arm64: $API_IMAGE_REPO:$IMMUTABLE_TAG-arm64" \
"API multi-arch: $API_IMAGE_REPO:$IMMUTABLE_TAG" \
"Web amd64: $WEB_IMAGE_REPO:$IMMUTABLE_TAG-amd64" \
"Web arm64: $WEB_IMAGE_REPO:$IMMUTABLE_TAG-arm64" \
"Web multi-arch: $WEB_IMAGE_REPO:$IMMUTABLE_TAG" \
"OpenList: $OPENLIST_BASE_URL$OPENLIST_REMOTE_DIR/$FPK_BASENAME"
'''
script {
def summary = [
'Commit: ' + sh(script: 'git rev-parse HEAD', returnStdout: true).trim(),
'Product version: ' + env.APP_VERSION,
'Tests: ' + (params.RUN_TESTS ? 'executed' : 'skipped')
]
if (params.BUILD_FNOS) {
def checksum = sh(
script: "cut -d ' ' -f 1 '" + env.FPK_PATH + ".sha256'",
returnStdout: true
).trim()
summary.addAll([
'fnOS package version: ' + env.FNOS_VERSION,
'fnOS: ' + env.FPK_BASENAME,
'Checksum: ' + checksum
])
if (params.UPLOAD_FNOS) {
summary << 'OpenList: ' + env.OPENLIST_BASE_URL + env.OPENLIST_REMOTE_DIR + '/' + env.FPK_BASENAME
}
}
if (params.API_IMAGE_PLATFORMS != 'none') {
summary << 'API platforms: ' + params.API_IMAGE_PLATFORMS
if (params.API_IMAGE_PLATFORMS.contains('amd64')) {
summary << 'API amd64: ' + env.API_IMAGE_REPO + ':' + env.IMMUTABLE_TAG + '-amd64'
}
if (params.API_IMAGE_PLATFORMS.contains('arm64')) {
summary << 'API arm64: ' + env.API_IMAGE_REPO + ':' + env.IMMUTABLE_TAG + '-arm64'
}
if (params.API_IMAGE_PLATFORMS == 'amd64+arm64') {
summary << 'API multi-arch: ' + env.API_IMAGE_REPO + ':' + env.IMMUTABLE_TAG
}
}
if (params.WEB_IMAGE_PLATFORMS != 'none') {
summary << 'Web platforms: ' + params.WEB_IMAGE_PLATFORMS
if (params.WEB_IMAGE_PLATFORMS.contains('amd64')) {
summary << 'Web amd64: ' + env.WEB_IMAGE_REPO + ':' + env.IMMUTABLE_TAG + '-amd64'
}
if (params.WEB_IMAGE_PLATFORMS.contains('arm64')) {
summary << 'Web arm64: ' + env.WEB_IMAGE_REPO + ':' + env.IMMUTABLE_TAG + '-arm64'
}
if (params.WEB_IMAGE_PLATFORMS == 'amd64+arm64') {
summary << 'Web multi-arch: ' + env.WEB_IMAGE_REPO + ':' + env.IMMUTABLE_TAG
}
}
echo summary.join('\n')
}
}
}
}
post {
success {
echo "LiveRecorder ${env.IMMUTABLE_TAG} published successfully."
echo "LiveRecorder ${env.IMMUTABLE_TAG} selected pipeline completed successfully."
}
failure {
echo 'LiveRecorder pipeline failed; stable Docker tags were only updated if all architecture builds succeeded.'