Add CD for PoC deployment

.gitlab-ci.yml

@@ -11,6 +11,7 @@ variables:
 stages:
   - check
   - build
+  - deploy
 
 format:
   stage: check
@@ -58,3 +59,18 @@ build:
     - podman build --format docker --manifest buildbtw-server --file Containerfile --manifest registry.archlinux.org/archlinux/buildbtw:poc-server-latest target/release
     - echo "$CI_JOB_TOKEN" | podman login $CI_REGISTRY -u $CI_REGISTRY_USER --password-stdin
     - podman push registry.archlinux.org/archlinux/buildbtw:poc-server-latest
+
+deploy:
+  stage: deploy
+  # For now, we're only deploying the proof-of-concept.
+  rules:
+    - if: $CI_COMMIT_BRANCH == "proof-of-concept"
+    - if: $CI_PIPELINE_SOURCE == "push"
+  script:
+    - pacman -Syu --needed --noconfirm openssh
+    - base64 --decode "$SSH_KNOWN_HOSTS" > ~/.ssh/known_hosts
+    - base64 --decode ${BUILDBTW_SSH_PRIVATE_KEY} > ~/.ssh/id_ed25519
+    - chmod 640 ~/.ssh/known_hosts
+    - chmod 600 ~/.ssh/id_ed25519
+    - chmod 700 ~/.ssh
+    - ssh buildbtw@${BUILDBTW_SERVER_IPV4} /srv/buildbtw/deploy.sh

notes/PoC Deployment.md

@@ -22,16 +22,7 @@ With the default `.env` file, the buildbtw client should be able to connect to t
 ## Deploying a new version
 
 ```sh
-sudo -u buildbtw -i podman pull registry.archlinux.org/archlinux/buildbtw:poc-server-latest
-sudo -u buildbtw -i \
-    podman run \
-        --env-file /srv/buildbtw/env \
-        --restart always \
-        --replace --name server \
-        --volume /srv/buildbtw/data:/app/data \
-        --publish 127.0.0.1:8080:8080 \
-        registry.archlinux.org/archlinux/buildbtw:poc-server-latest \
-        run
+sudo -u buildbtw -i /srv/buildbtw/deploy.sh
 ```
 
 ## Initial Setup
@@ -52,4 +43,27 @@ sudo -u buildbtw -i vim /srv/buildbtw/env
 sudo chmod go-rwx /srv/buildbtw/env
 ```
 
+Write following contents to `/srv/buildbtw/deploy.sh`:
+
+```sh
+#!/bin/bash
+
+set -euo pipefail
+
+echo "Pulling image..."
+podman pull registry.archlinux.org/archlinux/buildbtw:poc-server-latest
+echo "Starting container..."
+podman run \
+    --env-file /srv/buildbtw/env \
+    --restart always \
+    --detach \
+    --replace --name server \
+    --volume /srv/buildbtw/data:/app/data \
+    --publish 127.0.0.1:8080:8080 \
+    registry.archlinux.org/archlinux/buildbtw:poc-server-latest \
+    run
+```
+
+Afterwards, run `chmod +x /srv/buildbtw/deploy.sh`.
+
 Proceed to "Deploying a new version".