122 lines
3.8 KiB
Python
122 lines
3.8 KiB
Python
#!/usr/bin/env python3
|
||
import subprocess, os, sys
|
||
|
||
NEW_SERVER = os.environ.get("NEW_SERVER", "172.30.18.199")
|
||
KEY_PATH = os.environ.get("SSH_KEY_PATH", "/root/.ssh/new_server_ed25519")
|
||
|
||
def ssh(cmd, timeout=600):
|
||
"""SSH执行命令，流式输出"""
|
||
print(f"[SSH] {cmd[:100]}...")
|
||
proc = subprocess.Popen(
|
||
f'ssh -i {KEY_PATH} -o StrictHostKeyChecking=no -o ConnectTimeout=10 root@{NEW_SERVER} "{cmd}"',
|
||
shell=True, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True
|
||
)
|
||
output = []
|
||
for line in proc.stdout:
|
||
print(line.rstrip())
|
||
output.append(line)
|
||
proc.wait(timeout=timeout)
|
||
if proc.returncode != 0:
|
||
print(f"[ERROR] SSH command failed with code {proc.returncode}")
|
||
sys.exit(proc.returncode)
|
||
return "".join(output)
|
||
|
||
def scp_upload(local_path, remote_path):
|
||
print(f"[SCP] {local_path} -> {remote_path}")
|
||
r = subprocess.run(
|
||
f'scp -i {KEY_PATH} -o StrictHostKeyChecking=no {local_path} root@{NEW_SERVER}:{remote_path}',
|
||
shell=True, capture_output=True, text=True
|
||
)
|
||
if r.returncode != 0:
|
||
print(f"[ERROR] SCP upload failed: {r.stderr}")
|
||
sys.exit(1)
|
||
print("[SCP] upload ok")
|
||
|
||
print("=" * 60)
|
||
print("STEP 1: 检查系统版本")
|
||
print("=" * 60)
|
||
ssh("cat /etc/os-release && echo '---' && uname -r")
|
||
|
||
print("\n" + "=" * 60)
|
||
print("STEP 2: 安装编译依赖")
|
||
print("=" * 60)
|
||
ssh("yum install -y gcc openssl-devel bzip2-devel libffi-devel zlib-devel wget make readline-devel sqlite-devel 2>&1 | tail -20")
|
||
|
||
print("\n" + "=" * 60)
|
||
print("STEP 3: 下载 Python 3.10.14 源码")
|
||
print("=" * 60)
|
||
ssh("""
|
||
cd /tmp && \
|
||
if [ ! -f Python-3.10.14.tgz ]; then
|
||
wget -q https://www.python.org/ftp/python/3.10.14/Python-3.10.14.tgz
|
||
fi && \
|
||
ls -lh Python-3.10.14.tgz
|
||
""")
|
||
|
||
print("\n" + "=" * 60)
|
||
print("STEP 4: 编译安装 Python 3.10（约5-10分钟）")
|
||
print("=" * 60)
|
||
ssh("""
|
||
cd /tmp && \
|
||
tar xzf Python-3.10.14.tgz && \
|
||
cd Python-3.10.14 && \
|
||
./configure --prefix=/usr/local/python310 --enable-optimizations --with-ensurepip=install 2>&1 | tail -5 && \
|
||
make -j$(nproc) 2>&1 | tail -10 && \
|
||
make install 2>&1 | tail -10
|
||
""", timeout=900)
|
||
|
||
print("\n" + "=" * 60)
|
||
print("STEP 5: 替换默认 python3 和 pip3")
|
||
print("=" * 60)
|
||
ssh("""
|
||
# 备份旧的python3
|
||
mv /usr/bin/python3 /usr/bin/python3.bak 2>/dev/null || true
|
||
mv /usr/bin/pip3 /usr/bin/pip3.bak 2>/dev/null || true
|
||
# 软链接到新的
|
||
ln -sf /usr/local/python310/bin/python3.10 /usr/bin/python3
|
||
ln -sf /usr/local/python310/bin/pip3.10 /usr/bin/pip3
|
||
ln -sf /usr/local/python310/bin/python3.10 /usr/local/bin/python3
|
||
ln -sf /usr/local/python310/bin/pip3.10 /usr/local/bin/pip3
|
||
# 验证
|
||
python3 --version && pip3 --version && which python3
|
||
""")
|
||
|
||
print("\n" + "=" * 60)
|
||
print("STEP 6: 修复CMD Agent端口（5000→5927）")
|
||
print("=" * 60)
|
||
ssh("""
|
||
# 修改server.py中的端口
|
||
sed -i 's/port=5000/port=5927/g; s/port = 5000/port = 5927/g; s/5000/5927/g' /opt/cmd-agent/server.py 2>/dev/null || true
|
||
grep -n '5927\\|5000\\|port' /opt/cmd-agent/server.py | head -10
|
||
# 重启服务
|
||
systemctl restart cmd-agent
|
||
sleep 2
|
||
systemctl status cmd-agent --no-pager | head -5
|
||
ss -tlnp | grep 5927
|
||
""")
|
||
|
||
print("\n" + "=" * 60)
|
||
print("STEP 7: 重启所有6个Runner服务，让它们用新Python")
|
||
print("=" * 60)
|
||
ssh("""
|
||
for i in 1 2 3 4 5 6; do
|
||
systemctl restart act-runner-$i
|
||
echo "act-runner-$i restarted"
|
||
done
|
||
sleep 3
|
||
systemctl list-units 'act-runner-*' --no-legend
|
||
""")
|
||
|
||
print("\n" + "=" * 60)
|
||
print("STEP 8: 最终验证")
|
||
print("=" * 60)
|
||
ssh("""
|
||
echo "Python版本:" && python3 --version
|
||
echo "Pip版本:" && pip3 --version
|
||
echo "测试 --break-system-packages:" && pip3 install --help 2>&1 | grep break-system || echo "NOT FOUND"
|
||
echo "Runner服务数:" && systemctl list-units 'act-runner-*' --no-legend | wc -l
|
||
echo "CMD Agent:" && ss -tlnp | grep 5927
|
||
""")
|
||
|
||
print("\n✅ 全部完成！")
|