恢复预览环境本地配置注入

恢复 API 与 worker 的 .env.local BuildKit secret 挂载补齐 Jenkins 固定文件校验与预览文档增加双配置文件构建门禁
2026-09-03 11:38:40 +08:00
parent 53070e0390
commit 8ed0626627
7 changed files with 104 additions and 28 deletions
@@ -24,12 +24,20 @@ RUN mkdir -p /var/lib/genarrative/auth /var/lib/genarrative/tracking-outbox /var
    chown -R genarrative:genarrative /srv/genarrative /var/lib/genarrative

 ARG GENARRATIVE_PREVIEW_SECRETS_SHA256=
+ARG GENARRATIVE_PREVIEW_ENV_LOCAL_SHA256=
 RUN --mount=type=secret,id=genarrative_preview_secrets,required=false \
+    --mount=type=secret,id=genarrative_preview_env_local,required=false \
    if [ -n "${GENARRATIVE_PREVIEW_SECRETS_SHA256}" ]; then \
      test -f /run/secrets/genarrative_preview_secrets; \
      test "$(sha256sum /run/secrets/genarrative_preview_secrets | cut -d ' ' -f 1)" = "${GENARRATIVE_PREVIEW_SECRETS_SHA256}"; \
      install -o genarrative -g genarrative -m 0400 \
        /run/secrets/genarrative_preview_secrets /srv/genarrative/.env.secrets.local; \
+    fi; \
+    if [ -n "${GENARRATIVE_PREVIEW_ENV_LOCAL_SHA256}" ]; then \
+      test -f /run/secrets/genarrative_preview_env_local; \
+      test "$(sha256sum /run/secrets/genarrative_preview_env_local | cut -d ' ' -f 1)" = "${GENARRATIVE_PREVIEW_ENV_LOCAL_SHA256}"; \
+      install -o genarrative -g genarrative -m 0400 \
+        /run/secrets/genarrative_preview_env_local /srv/genarrative/.env.local; \
    fi

 USER genarrative