xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 11 Pull Requests 1 Actions 3 Packages Projects Releases 7 Wiki Activity

fix(release): prevent runtime builds on production host
CI/CD Pipeline / Validate Code Quality And Tests (push) Has been cancelled
Details
Deploy / Deploy Staging (push) Has been cancelled
Details
Deploy / Deploy Production (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Xiaoxia AI
2026-06-22 15:00:23 +08:00
parent ccc6aa27e8
commit 7716371c8d
3 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/build_release_images.sh
+8
View File
@@ -20,6 +20,14 @@ TAR_PATH="$OUTPUT_DIR/xiaoxia-runtime-images-$VERSION.tar"
cd "$ROOT_DIR"
if docker ps --format '{{.Names}}' | grep -Eq '^(xiaoxia-(api|web|worker|postgres|redis)-production|gitea)$'; then
if [ "${ALLOW_SHARED_PRODUCTION_BUILD_HOST:-false}" != "true" ]; then
echo "Refusing to build runtime images on a host that is running production services."
echo "Use a dedicated build host/CI runner, or set ALLOW_SHARED_PRODUCTION_BUILD_HOST=true only for an explicitly approved emergency."
exit 1
fi
fi
docker build --pull=false -f infra/docker/api.Dockerfile -t "$API_IMAGE" -t "$API_LATEST" .
docker build --pull=false -f infra/docker/worker.Dockerfile -t "$WORKER_IMAGE" -t "$WORKER_LATEST" .
docker save "$API_IMAGE" "$API_LATEST" "$WORKER_IMAGE" "$WORKER_LATEST" -o "$TAR_PATH"