chore: 并入 iotlcm-openapi 历史到 openapi/（原提交 3b05d5a）

2026-11-02 13:28:02 +08:00
parent c3c1f09ebd 3b05d5a73a
commit b10b8cfc51
484 changed files with 34732 additions and 0 deletions
@@ -0,0 +1,64 @@
+name: mirror-to-gitee
+
+# 把本仓同步到 Gitee 企业仓 snowgoat/<同名仓库>。
+# 触发：main 分支推送、v* tag 推送、手动；另有每日兜底重试。
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - 'v*'
+  schedule:
+    # Gitea Actions 的 cron 用 UTC：18:30 UTC = 次日 02:30 北京时间
+    - cron: '30 18 * * *'
+  workflow_dispatch:
+
+concurrency:
+  group: mirror-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  mirror:
+    runs-on: host
+    steps:
+      - name: 同步到 Gitee
+        env:
+          SRC_TOKEN: ${{ secrets.SRC_GIT_TOKEN }}
+          DST_TOKEN: ${{ secrets.GITEE_TOKEN }}
+          DST_OWNER: ${{ secrets.GITEE_OWNER }}
+          DST_USER: ${{ secrets.GITEE_USER }}
+          REPO_NAME: ${{ github.event.repository.name }}
+        run: |
+          set -u
+
+          if [ -z "${REPO_NAME:-}" ]; then
+            echo "未取到仓库名，退出"; exit 1
+          fi
+
+          WORK=$(mktemp -d)
+          trap 'rm -rf "$WORK"' EXIT
+
+          echo "源：git.5iot.com/iotlcm-public/$REPO_NAME"
+          echo "目标：gitee.com/$DST_OWNER/$REPO_NAME"
+
+          git clone --mirror "https://jenkins:${SRC_TOKEN}@git.5iot.com/iotlcm-public/${REPO_NAME}.git" "$WORK/repo.git"
+          cd "$WORK/repo.git"
+          echo "本地 ref：$(git for-each-ref --format='%(refname:short)' | tr '\n' ' ')"
+
+          # Gitee 在推送密集时会返回 429 Pending queue overflowed / 408 Authorization server timeout，
+          # 属服务端限流，退避重试即可。
+          attempt=0
+          while [ "$attempt" -lt 5 ]; do
+            attempt=$((attempt + 1))
+            echo "----- 推送尝试 $attempt/5"
+            if git push --mirror "https://${DST_USER}:${DST_TOKEN}@gitee.com/${DST_OWNER}/${REPO_NAME}.git" 2>&1; then
+              echo "✅ 已同步到 Gitee"
+              exit 0
+            fi
+            wait_s=$((attempt * 30))
+            echo "推送失败，${wait_s}s 后重试"
+            sleep "$wait_s"
+          done
+
+          echo "❌ 连续 5 次推送失败，请检查 Gitee 状态或令牌"
+          exit 1
@@ -0,0 +1,80 @@
+name: trigger-jenkins-oss
+
+# 打 tag 时触发 Jenkins 构建开源镜像并推送到镜像仓库。
+# 仅在 tag 推送时触发；main 分支的日常提交不触发。
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+# 同一 ref 连续触发时取消旧任务，只跑最新的
+concurrency:
+  group: ${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  trigger:
+    runs-on: host
+    steps:
+      - name: 触发 Jenkins 镜像构建
+        env:
+          JU: ${{ secrets.JENKINS_USER }}
+          JT: ${{ secrets.JENKINS_API_TOKEN }}
+          JURL: ${{ secrets.JENKINS_URL }}
+          JOB_PATH: ${{ secrets.JENKINS_JOB_PATH }}
+          REPO_NAME: ${{ github.event.repository.name }}
+          TAG_NAME: ${{ github.ref_name }}
+        run: |
+          set -eu
+
+          # 只有 tag 推送才构建；手动触发时按 tag 取，没有就退出
+          case "${GITHUB_REF:-}" in
+            refs/tags/v*) ;;
+            *)
+              if [ "${GITHUB_EVENT_NAME:-}" != "workflow_dispatch" ]; then
+                echo "非 tag 推送，跳过：${GITHUB_REF:-unknown}"
+                exit 0
+              fi
+              ;;
+          esac
+
+          if [ -z "${TAG_NAME:-}" ]; then
+            echo "未取到 tag 名，退出"
+            exit 1
+          fi
+
+          # job 在 Jenkins 文件夹下的路径（组织密钥 JENKINS_JOB_PATH），
+          # 例如 job/iotlcm-opensrc/job/iotlcm-oss-build。
+          # 用密钥而非硬编码，Jenkins 里移动 job 时不用改 11 个仓。
+          JP="${JOB_PATH:-job/iotlcm-oss-build}"
+
+          echo "仓库：$REPO_NAME   版本：$TAG_NAME   job：$JP"
+
+          WORK=$(mktemp -d)
+          trap 'rm -rf "$WORK"' EXIT
+
+          # 取 CSRF crumb
+          curl -s -c "$WORK/cj" -u "$JU:$JT" "$JURL/crumbIssuer/api/json" -o "$WORK/crumb.json"
+          CR=$(python3 -c "import json;print(json.load(open('$WORK/crumb.json'))['crumb'])")
+
+          # 触发参数化任务：SERVICES=仓库名，VERSION=tag
+          code=$(curl -s -o "$WORK/out" -w '%{http_code}' -X POST -b "$WORK/cj" -u "$JU:$JT" \
+            -H "Jenkins-Crumb: $CR" \
+            --data-urlencode "SERVICES=$REPO_NAME" \
+            --data-urlencode "VERSION=$TAG_NAME" \
+            --data-urlencode "FORCE=true" \
+            "$JURL/$JP/buildWithParameters")
+
+          echo "Jenkins 触发 HTTP $code"
+          if [ "$code" != "201" ] && [ "$code" != "200" ] && [ "$code" != "302" ] && [ "$code" != "303" ]; then
+            echo "触发失败："
+            cat "$WORK/out"
+            exit 1
+          fi
+
+          LINK="$JURL/$JP/"
+          echo "=========================================="
+          echo "Jenkins 构建：$LINK"
+          echo "=========================================="
+          echo "::notice title=Jenkins 镜像构建::[$LINK]($LINK)"