Gitee WebHooks 自动化部署

<?php

class webhook
{
    /**
     * @var self
     */
    protected static self $instance;

    // webhook上设置的secret
    protected static string $secret = '你的webhooks密码';
    protected string $localPath;
    protected string $gitRemote;
    protected string $logPath;
    protected string $branch;
    protected string $shell;

    /**
     * webhook constructor.
     */
    public function __construct()
    {
        try {
            set_time_limit(0);
            require 'vendor/autoload.php';
            $dotenv = Dotenv\Dotenv::createImmutable(__DIR__);
            $dotenv->load();

            $this->branch = 'xx_dev';
            $this->localPath = realpath(__DIR__);
            $this->gitRemote = '[email protected]:kilvn/fth.git';
            $this->logPath = $_ENV['LOG_ROOT'] . '/git-webhook.log';
            $this->shell = 'cd ' . $this->localPath . ' && git pull';

            $this->index();
        } catch (Exception $exception) {
            echo $exception->getMessage();
        }
    }

    protected function index()
    {
        $requestBody = file_get_contents('php://input');
        if (empty($requestBody)) {
            header("HTTP/1.1 404 Not Found");
            header("Status: 404 Not Found");
            die('send fail');
        }

        //解析Git服务器通知过来的JSON信息
        $content = json_decode($requestBody, true);
        if ($content['password'] != self::$secret) {
            header("HTTP/1.1 404 Not Found");
            header("Status: 404 Not Found");
            exit('deny');
        }

        $branch = str_replace('refs/heads/', '', $content['ref']);

        //若是目标分支且提交数大于0
        if ($branch == $this->branch && $content['total_commits_count'] > 0) {
            $res = PHP_EOL . 'pull start --------' . PHP_EOL;
            $do = self::doShell($this->shell);
            $do = json_encode($do);
            $res .= $do;
            $res_log = '-------------------------' . PHP_EOL;
            $res_log .= $content['user_name'] . ' 在' . date('Y-m-d H:i:s') . '向' . $content['repository']['name'] . '项目的' . $content['ref'] . '分支push了' . $content['total_commits_count'] . '个commit：';
            $res_log .= $res . PHP_EOL;
            $res_log .= 'pull end --------' . PHP_EOL;
            $this->logs($res_log);

            exit($do);
        }
    }

    /**
     * 执行shell命令
     *
     * @param $cmd
     * @param null $cwd
     * @return array|string
     */
    protected static function doShell($cmd, $cwd = null)
    {
        $descriptorspec = array(
            0 => array('pipe', 'r'), // stdin
            1 => array('pipe', 'w'), // stdout
            2 => array('pipe', 'w'), // stderr
        );

        $proc = proc_open($cmd, $descriptorspec, $pipes, $cwd, null);

        // $proc为false，表明命令执行失败
        if ($proc == false) {
            return '命令执行出错！';
        } else {
            $stdout = stream_get_contents($pipes[1]);
            fclose($pipes[1]);
            $stderr = stream_get_contents($pipes[2]);
            fclose($pipes[2]);
            $status = proc_close($proc); // 释放proc
        }

	// 更新成功后判断是否开启opcache,如果开启则清空缓存
	$opcache_config = opcache_get_configuration();
	$opcache_status = $opcache_config['directives']['opcache.enable'] ?? false;
	if ($opcache_status) {
		// 获取php-fpm进程号
		// ps -ef | grep php-fpm | grep 'master process' | sed -n 1p | awk '{print $2}'
		$php_pid = shell_exec("ps -ef | grep php-fpm | grep 'master process' | awk 'NR==1' | awk '{print $2}'");
		if ($php_pid) {
			shell_exec("kill -USR2 {$php_pid}");
		} else {
			opcache_reset();
		}
	}

        return array(
            'stdout' => $stdout, // 标准输出
            'stderr' => $stderr, // 错误输出
            'retval' => $status, // 返回值
        );
    }

    /**
     * 写入日志到log文件中
     *
     * @param $res
     */
    protected function logs($res)
    {
        file_put_contents($this->logPath, $res, FILE_APPEND);
    }
}

try {
    new webhook;
} catch (Exception $exception) {
    echo $exception->getMessage();
}

chown -R www-data:www-data /www/wwwroot/blog

mkdir /var/www/.ssh && cp -r ~/.ssh/* /var/www/.ssh/ && chown -R www-data:www-data /var/www/.ssh/