xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 17 Pull Requests 8 Actions 34.2k Packages Projects Releases 7 Wiki Activity

fix(ci): staging SSH 默认目标改为业务机 47.98.113.167:22222 #2057

Merged
auto-approve-bot merged 1 commits from fix/staging-ssh-host into develop 2026-09-27 00:59:29 +08:00
Conversation 2 Commits 1 Files Changed 2
+9 -8
xiaoxia commented 2026-09-27 00:48:26 +08:00
Owner
Copy Link
Copy Source

背景

排查发现 CI Deploy Staging 的默认兜底 STAGING_SSH_HOST=127.0.0.1、PORT=22 已过时：

  • 6 个 CI runner（docker-runner-1~6）实际运行在独立 CI 机器，不在 staging 业务机；
  • deploy job 在隔离的 GITEA task 网络容器内执行（非 host 网络），127.0.0.1 指向 job 容器自身，无 sshd，必失败；
  • staging 业务机（47.98.113.167）公网 sshd 监听 22222（内网 VPC 10.0.0.2:22）。

当前为何没出问题

生产靠 secrets 覆盖（STAGING_SSH_HOST/STAGING_SSH_KEY），run #55689 Deploy Staging 成功、正确落到业务机。但一旦 secret 缺失就会静默退回到错误的 127.0.0.1。

改动

  • .gitea/workflows/ci-pipeline.yml：默认 host→47.98.113.167、port→22222，更新注释；
  • scripts/ci_staging_healthcheck.sh：同步兜底值与注释。

secrets 显式配置时仍优先生效，不影响现有部署。

## 背景 排查发现 CI Deploy Staging 的默认兜底 `STAGING_SSH_HOST=127.0.0.1`、`PORT=22` 已过时： - 6 个 CI runner（docker-runner-1~6）实际运行在**独立 CI 机器**，不在 staging 业务机； - deploy job 在隔离的 GITEA task 网络容器内执行（非 host 网络），127.0.0.1 指向 job 容器自身，无 sshd，必失败； - staging 业务机（47.98.113.167）公网 sshd 监听 **22222**（内网 VPC 10.0.0.2:22）。 ## 当前为何没出问题 生产靠 secrets 覆盖（STAGING_SSH_HOST/STAGING_SSH_KEY），run #55689 Deploy Staging 成功、正确落到业务机。但一旦 secret 缺失就会静默退回到错误的 127.0.0.1。 ## 改动 - `.gitea/workflows/ci-pipeline.yml`：默认 host→47.98.113.167、port→22222，更新注释； - `scripts/ci_staging_healthcheck.sh`：同步兜底值与注释。 secrets 显式配置时仍优先生效，不影响现有部署。
xiaoxia added 1 commit 2026-09-27 00:48:28 +08:00
fix(ci): staging SSH 默认目标改为业务机 47.98.113.167:22222
CI/CD Pipeline / Check push changed paths (pull_request) Has been skipped
Details
CI/CD Pipeline / Dedup Check - skip PR tests when covered by push pipeline (pull_request) Successful in 3s
Details
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Check if frontend-only change (pull_request) Successful in 4s
Details
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Frontend Lint (pull_request) Has been skipped
Details
CI/CD Pipeline / Frontend Unit Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / PR Build API Image (pull_request) Successful in 24s
Details
CI/CD Pipeline / PR Build Web Image (pull_request) Has been skipped
Details
Preview Deploy / Deploy Preview Environment (pull_request) Successful in 1m53s
Details
CI/CD Pipeline / Retag skipped Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Retag skipped Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Retag skipped Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / PR Build Worker Image (pull_request) Successful in 26s
Details
PR Automation / Auto Approve on CI Green (pull_request) Successful in 3m21s
Details
CI/CD Pipeline / Validate - Python (mypy + alembic) (pull_request) Successful in 3m17s
Details
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
CI/CD Pipeline / Integration Tests (pull_request) Successful in 3m10s
Details
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / ACR Image Cleanup (pull_request) Has been skipped
Details
CI/CD Pipeline / Validate - Style (pull_request) Successful in 4m5s
Details
AI Code Review / AI Code Review (pull_request) Successful in 6m49s
Details
CI/CD Pipeline / Validate - Security (pull_request) Successful in 8m16s
Details
CI/CD Pipeline / Unit Tests (pull_request) Successful in 10m0s
Details
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / CI Gate (pull_request) Successful in 1s
Details
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Canary Release to Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
Details
PR Automation / Auto Merge on CI Green + Approved (pull_request) Successful in 7m35s
Details
ACR Cleanup / ACR Image Cleanup (pull_request_target) Successful in 59s
Details
Preview Cleanup / Cleanup Preview Environment (pull_request) Successful in 5m28s
Details
028438da9c 
CI runner 已迁移到独立 CI 机器，deploy job 在隔离容器网络中执行，
原默认 127.0.0.1:22 会指向 job 容器自身导致失败。改为 staging 业务机
公网地址（sshd 22222）；secrets 仍可覆盖。同步修正 healthcheck 脚本。
gitea-actions bot commented 2026-09-27 00:50:24 +08:00
Copy Link
Copy Source

🚀 预览环境已部署

项目 详情
PR号 #2057
预览链接 https://pr-2057.preview.xiaoxiajianji.com
API环境 staging

💡 预览环境使用 staging API 数据，请勿在预览环境中操作重要数据。

🔄 每次提交新代码后预览环境会自动更新。

🗑️ PR 关闭或合并后，预览环境会自动清理。

🚀 **预览环境已部署** | 项目 | 详情 | |------|------| | PR号 | #2057 | | 预览链接 | [https://pr-2057.preview.xiaoxiajianji.com](https://pr-2057.preview.xiaoxiajianji.com) | | API环境 | staging | > 💡 预览环境使用 staging API 数据，请勿在预览环境中操作重要数据。 > > 🔄 每次提交新代码后预览环境会自动更新。 > > 🗑️ PR 关闭或合并后，预览环境会自动清理。
auto-approve-bot merged commit 3a8d5e50d0 into develop 2026-09-27 00:59:29 +08:00
auto-approve-bot deleted branch fix/staging-ssh-host 2026-09-27 00:59:33 +08:00
gitea-actions bot commented 2026-09-27 01:04:57 +08:00
Copy Link
Copy Source

🗑️ 预览环境已清理

PR #2057 已关闭或合并，对应的预览环境已被清理。

如有需要，可以重新打开 PR 来重新生成预览环境。

🗑️ **预览环境已清理** PR #2057 已关闭或合并，对应的预览环境已被清理。 > 如有需要，可以重新打开 PR 来重新生成预览环境。
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
architecture
架构设计
 backend
后端相关
 blocked
阻塞中
 bug
Bug修复
 ci-bug
CI本身的bug
 ci-optimization
CI优化类任务
 ci-pipeline
CI流水线/workflow相关
 cleanup
代码清理
 devops
运维/部署/CI
 documentation
文档相关
 feature
新功能
 frontend
前端相关
 P0
阻塞性，必须立即处理
 P1
高优先级
 P2
中优先级
 P3
低优先级/后考虑
 question
需要讨论确认
 ready
PR CI通过，可合并
 refactor
代码重构
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
auto-approve-bot frontend-dev xiaoxia
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xiaoxia/xiaoxia-saas#2057
Delete Branch "fix/staging-ssh-host"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?