Breadway/breadsearch
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ci: use a unique temp dir for the bread-ecosystem clone in dev/beta CI
All checks were successful
dev release / build (push) Successful in 2m30s
Details

Browse source 
The fixed /tmp/bread-ecosystem-ci path races when multiple repos' dev/beta
workflows run close together on the same self-hosted runner — one job's
rm -rf/clone can stomp another's in-progress checkout, causing the
regenerate-index step to fail intermittently. Switch to mktemp -d.
This commit is contained in:
Breadway 2026-07-22 10:24:44 +08:00
parent bf711f8047
commit 1e3872124b
2 changed files with 15 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.forgejo/workflows/beta-release.yml
View file

@ -53,8 +53,10 @@ jobs:
echo "::error::BAKERY_MINISIGN_SEC_KEY_PATH secret not set — refusing to regenerate beta index.json unsigned (would leave a stale signature mismatched against fresh content and break bakery for everyone on the beta track)" echo "::error::BAKERY_MINISIGN_SEC_KEY_PATH secret not set — refusing to regenerate beta index.json unsigned (would leave a stale signature mismatched against fresh content and break bakery for everyone on the beta track)"
exit 1 exit 1
fi fi
rm -rf /tmp/bread-ecosystem-ci rm -rf /tmp/bread-ecosystem-ci-* 2>/dev/null || true
# --branch dev: the TRACK-aware gen-index.sh isn't merged to # mktemp: a fixed clone path races when multiple repos' dev/beta
# bread-ecosystem's main yet. # workflows run close together on the same self-hosted runner.
git clone --branch dev https://git.breadway.dev/Breadway/bread-ecosystem.git /tmp/bread-ecosystem-ci ECOSYSTEM_CI_DIR="$(mktemp -d /tmp/bread-ecosystem-ci-XXXXXX)"
TRACK=beta bash /tmp/bread-ecosystem-ci/scripts/gen-index.sh git clone --branch dev https://git.breadway.dev/Breadway/bread-ecosystem.git "${ECOSYSTEM_CI_DIR}"
TRACK=beta bash "${ECOSYSTEM_CI_DIR}/scripts/gen-index.sh"
rm -rf "${ECOSYSTEM_CI_DIR}"

14
.forgejo/workflows/dev-release.yml
View file

@ -29,7 +29,7 @@ jobs:
run: | run: |
set -euo pipefail set -euo pipefail
cd src cd src
CUR="$(grep -m1 '^version' Cargo.toml | sed -E 's/.*"(.*)".*/\1/')" CUR="$(grep -m1 '^version' breadsearch/Cargo.toml | sed -E 's/.*"(.*)".*/\1/')"
IFS='.' read -r MA MI PA <<< "${CUR}" IFS='.' read -r MA MI PA <<< "${CUR}"
SHA="$(git rev-parse --short HEAD)" SHA="$(git rev-parse --short HEAD)"
TS="$(date -u +%Y%m%d%H%M%S)" TS="$(date -u +%Y%m%d%H%M%S)"
@ -62,8 +62,10 @@ jobs:
echo "::error::BAKERY_MINISIGN_SEC_KEY_PATH secret not set — refusing to regenerate dev index.json unsigned (would leave a stale signature mismatched against fresh content and break bakery for everyone on the dev track)" echo "::error::BAKERY_MINISIGN_SEC_KEY_PATH secret not set — refusing to regenerate dev index.json unsigned (would leave a stale signature mismatched against fresh content and break bakery for everyone on the dev track)"
exit 1 exit 1
fi fi
rm -rf /tmp/bread-ecosystem-ci rm -rf /tmp/bread-ecosystem-ci-* 2>/dev/null || true
# --branch dev: the TRACK-aware gen-index.sh isn't merged to # mktemp: a fixed clone path races when multiple repos' dev/beta
# bread-ecosystem's main yet. # workflows run close together on the same self-hosted runner.
git clone --branch dev https://git.breadway.dev/Breadway/bread-ecosystem.git /tmp/bread-ecosystem-ci ECOSYSTEM_CI_DIR="$(mktemp -d /tmp/bread-ecosystem-ci-XXXXXX)"
TRACK=dev bash /tmp/bread-ecosystem-ci/scripts/gen-index.sh git clone --branch dev https://git.breadway.dev/Breadway/bread-ecosystem.git "${ECOSYSTEM_CI_DIR}"
TRACK=dev bash "${ECOSYSTEM_CI_DIR}/scripts/gen-index.sh"
rm -rf "${ECOSYSTEM_CI_DIR}"