49 lines
1.6 KiB
YAML
49 lines
1.6 KiB
YAML
# Gitea Actions 适配副本：由 .github/workflows 同名文件适配（本地路径/cache/artifact 差异），修改时请同步两边。差异说明见 setup.md「Gitea 部署附录」。
|
|
name: Fetch Encrypted Secrets
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
zip_url_json:
|
|
required: true
|
|
type: string
|
|
|
|
jobs:
|
|
download-zip:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Download with Retry
|
|
uses: nick-fields/retry@v3
|
|
with:
|
|
timeout_minutes: 5
|
|
max_attempts: 3
|
|
retry_wait_seconds: 15
|
|
shell: python
|
|
command: |
|
|
import json
|
|
import time
|
|
import urllib.request
|
|
|
|
input_data = json.loads('${{ inputs.zip_url_json }}')
|
|
url = f"{input_data['url']}/get_zip?filename={input_data['file']}"
|
|
|
|
for attempt in range(5):
|
|
try:
|
|
print(f"Downloading (Attempt {attempt + 1})...")
|
|
# 仅使用标准库（urllib），兼容未预装 requests 的自建 runner 容器
|
|
with urllib.request.urlopen(url, timeout=20) as r:
|
|
content = r.read()
|
|
with open('secrets.zip', 'wb') as f:
|
|
f.write(content)
|
|
break
|
|
except Exception as e:
|
|
if attempt < 4:
|
|
time.sleep(5 * (2 ** attempt))
|
|
else: raise e
|
|
|
|
- name: Upload Encrypted Artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: encrypted-secrets-zip
|
|
path: secrets.zip
|
|
retention-days: 1 |