Admin/han-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Внедрение KESL на ВМ2 + замена CLAMAV на KESL

Browse Source
This commit is contained in:
mi
2026-09-08 01:39:37 +03:00
parent 85df788f2d
commit fdfdeaffb4
43 changed files with 2210 additions and 329 deletions
Download Patch File Download Diff File Expand all files Collapse all files
support&notes/deploy_stories/260904_1.md
+22 -12
View File
@@ -1,10 +1,10 @@
Логирование операций
1. env:
editor /etc/han/vm1.env
изменение Release_Version
+ две переменные:
HOST_NAME=devhanapp \ prodhanapp.ihan.ru.
HOST_NAME=prodhanapp.ihan.ru \devhanapp \
TELEMETRYGEN_IMAGE=ghcr.io/open-telemetry/opentelemetry-collector-contrib/telemetrygen@sha256:9461e2c7213219467e5f775ea8652d15c990afb4d1ca94e62344f2025a7587d1
2. Обновить образы:
@@ -25,7 +25,7 @@ tar --exclude=backend/.env `
-czf "vm1-backend-$Release.tar.gz" `
-C C:/Users/MI/Documents/Assistent/HAN_chat_specification/VM1_app/codebase backend
Get-FileHash "vm1-backend-$Release.tar.gz" -Algorithm SHA256
scp "vm1-backend-$Release.tar.gz" devVM1Deploy:/var/lib/han-deploy/incoming/
scp "vm1-backend-$Release.tar.gz" prodVM1Deploy:/var/lib/han-deploy/incoming/
```
RELEASE='1.0.1'
@@ -91,14 +91,14 @@ sudo apt purge -y dos2unix
scp `
C:/Users/MI/.ssh/devDeploy.pub `
C:/Users/MI/.ssh/devAdmin.pub `
devVM1Deploy:/var/lib/han-deploy/incoming/
C:/Users/MI/.ssh/prodDeploy.pub `
C:/Users/MI/.ssh/prodAdmin.pub `
prodVM1Deploy:/var/lib/han-deploy/incoming/
install -m 0600 -o root -g root /var/lib/han-deploy/incoming/devDeploy.pub /root/bootstrap/deploy.pub
install -m 0600 -o root -g root /var/lib/han-deploy/incoming/devAdmin.pub /root/bootstrap/admin.pub
install -m 0600 -o root -g root /var/lib/han-deploy/incoming/prodDeploy.pub /root/bootstrap/deploy.pub
install -m 0600 -o root -g root /var/lib/han-deploy/incoming/prodAdmin.pub /root/bootstrap/admin.pub
rm -f /var/lib/han-deploy/incoming/devDeploy.pub /var/lib/han-deploy/incoming/devAdmin.pub
rm -f /var/lib/han-deploy/incoming/prodDeploy.pub /var/lib/han-deploy/incoming/prodAdmin.pub
cd /opt/han-chat/current/backend
@@ -109,6 +109,12 @@ ADMIN_AUTHORIZED_KEY_FILE=/root/bootstrap/admin.pub \
HARDEN_SSH=true SKIP_APT_UPGRADE=true \
/opt/han-chat/current/backend/deployment/scripts/setup-vm.sh
export OTEL_REMOTE_ENDPOINT="$(awk -F= '$1=="OTEL_REMOTE_ENDPOINT"{print substr($0,index($0,"=")+1)}' /etc/han/vm1.env)"
export OTEL_REMOTE_TLS_INSECURE="$(awk -F= '$1=="OTEL_REMOTE_TLS_INSECURE"{print substr($0,index($0,"=")+1)}' /etc/han/vm1.env)"
export HOST_NAME="$(awk -F= '$1=="HOST_NAME"{print substr($0,index($0,"=")+1)}' /etc/han/vm1.env)"
export APP_ENV="$(awk -F= '$1=="APP_ENV"{print substr($0,index($0,"=")+1)}' /etc/han/vm1.env)"
export RELEASE_VERSION="$(awk -F= '$1=="RELEASE_VERSION"{print substr($0,index($0,"=")+1)}' /etc/han/vm1.env)"
printf '%s\n' "$OTEL_REMOTE_ENDPOINT"
/usr/local/bin/otelcol-contrib validate \
--config=/opt/han-chat/current/backend/deployment/observability/otel-host-collector.yaml
@@ -116,12 +122,16 @@ chmod 0755 /opt/han-chat/current/backend/scripts/validate-env
/opt/han-chat/current/backend/deployment/preflight.sh
systemctl restart han-stack@production.service
если ошибка systemctl status han-stack@production.service
если ошибка
journalctl -u han-stack@production.service --no-pager -n 80 --output=cat
### !!! (образы могут устареть в будущем)
docker pull cr.selcloud.ru/han-images/nginx@sha256:2cd7d32967b400c15bb6aaa18e97e99d429b2b6f2bfd54b965fc7d42a91a228e
docker pull cr.selcloud.ru/han-images/sms-service@sha256:404685c45b7391a78f95c014ce8fdff64a84ccd7ae5b280e7a65b524c109d898
systemctl start han-host-otel-collector@production.service
rm -f /root/bootstrap/deploy.pub /root/bootstrap/admin.pub
Canary test: CONFIG_FILE=/etc/han/vm1.env ./deployment/scripts/verify-observability.sh
Canary test:
chmod 0755 /opt/han-chat/current/backend/deployment/scripts/verify-observability.sh
CONFIG_FILE=/etc/han/vm1.env ./deployment/scripts/verify-observability.sh
rm -f /root/bootstrap/deploy.pub /root/bootstrap/admin.pub