fix(runner): preserve verified controlled cd lane
Some checks failed
Ansible / Reboot Recovery Contract / validate (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
Code Review / ai-code-review (push) Has been cancelled

This commit is contained in:
Your Name
2026-06-28 10:21:10 +08:00
parent 93434b1f6b
commit 913779a703
2 changed files with 10 additions and 1 deletions

View File

@@ -1 +1 @@
# 2026-06-28 retry controlled status cleanup deploy with persistent cd-lane
# 2026-06-28 retry controlled status cleanup deploy with rollback-safe cd-lane

View File

@@ -312,6 +312,15 @@ cd_lane_config_is_controlled() {
}
ensure_cd_lane_fail_closed() {
if { [ -e "$CD_LANE_ENABLE_SENTINEL" ] || [ -e "/run/awoooi-cd-lane-controlled-open" ] || [ "$START_CONTROLLED_CD_LANE" = "1" ]; } \
&& cd_lane_config_is_controlled \
&& file "$CD_LANE_BINARY" 2>/dev/null | grep -qi "ELF"; then
log "✅ controlled cd-lane verifier passed; keeping dedicated lane open"
install_controlled_cd_lane_unit
systemctl daemon-reload >/dev/null 2>&1 || true
systemctl enable --now "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
return 0
fi
systemctl kill --signal=SIGKILL "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
systemctl stop "$CD_LANE_SERVICE" >/dev/null 2>&1 || true
systemctl disable "$CD_LANE_SERVICE" >/dev/null 2>&1 || true