基于 WEB-UI-Development-Guide 标准的整体升级,并更名 LokiDeploy → opsx-loki。 前端(Gin+React+shadcn/ui): - 按 02/07 章重构:页面域化拆分(无超 400 行文件)、PageContainer/ListQuery、 反馈分级(成功静默/失败 toast/危险确认)、401 单飞刷新+队列重放 - 暗色模式(next-themes)+ 语义 Token(--primary 品牌色/success/warning/info) - 部署向导(状态推导四步:环境→存储→Loki→采集,内嵌表单闭环) - 日志查询页:LogQL 标签构建器/拖拽直方图/日志上下文/Live Tail/查询历史 - 按用户+标签策略的查询授权(服务端强制合并策略) 后端(Go+Gin+JSON DB): - 简单用户管理(仅 admin,无 RBAC)+ TokenVersion 会话吊销 + 登录 IP 限流 - LDAP 接入:配置(AES 加密存储/hasPassword 脱敏)/测试连接/批量导入/登录 - 存储配置测试连接(SigV4 零依赖)+ 桶不存在自动创建 - Loki 三模式部署修复:SSH 密钥认证、3.x 配置模板、ruler 对象存储嵌套块、 凭证解密、孤儿 deploying 状态恢复、Grafana 部署(可选默认关)+面板导入 - DaemonSet 采集纯 YAML(去 helm 依赖)+ DNS 自愈回退 ClusterIP + 集群名标签 - 日志查询代理:cluster-svc 经 kube-apiserver proxy/url 直连 + cursor 翻页 - 统一 log 命名空间;部署就绪探活;Grafana 访问地址自动记录 修复:run.sh 增量编译检测、Sanitized 脱敏补全、LokiDeployment Update 白名单、 健康检查 CreatedAt 零值等 10+ 存量 bug。 数据兼容:DB 沿用旧 lokideploy.json(新名优先);localStorage 一次性迁移; HKDF 加密前缀保留(已加密凭证不受影响)。
344 lines
10 KiB
Bash
Executable File
344 lines
10 KiB
Bash
Executable File
#!/bin/bash
|
|
# opsx-loki 启动脚本
|
|
# 一键启动前后端服务,支持日志轮转
|
|
# 用法: ./run.sh [start|stop|restart|status|frontend|backend|help]
|
|
|
|
set -e
|
|
|
|
# ============================================================
|
|
# 配置区
|
|
# ============================================================
|
|
PROJECT_NAME="opsx-loki"
|
|
BACKEND_PORT=8080
|
|
FRONTEND_PORT=3000
|
|
BACKEND_DIR="backend"
|
|
FRONTEND_DIR="frontend"
|
|
BACKEND_BIN="bin/opsxloki"
|
|
|
|
# 日志配置
|
|
MAX_LOG_FILES=3
|
|
MAX_LOG_SIZE=$((50 * 1024 * 1024)) # 50MB
|
|
|
|
# ============================================================
|
|
# 通用函数
|
|
# ============================================================
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
BLUE='\033[0;34m'
|
|
NC='\033[0m'
|
|
|
|
info() { echo -e "${BLUE}[INFO]${NC} $1"; }
|
|
success() { echo -e "${GREEN}[SUCCESS]${NC} $1"; }
|
|
warning() { echo -e "${YELLOW}[WARNING]${NC} $1"; }
|
|
error() { echo -e "${RED}[ERROR]${NC} $1"; }
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
cd "$SCRIPT_DIR"
|
|
|
|
# PID 文件
|
|
BACKEND_PID_FILE="$SCRIPT_DIR/$BACKEND_DIR/.backend.pid"
|
|
FRONTEND_PID_FILE="$SCRIPT_DIR/$FRONTEND_DIR/.frontend.pid"
|
|
|
|
# 检查端口是否被占用
|
|
check_port() {
|
|
lsof -ti:$1 2>/dev/null | head -1
|
|
}
|
|
|
|
# 释放端口
|
|
kill_port() {
|
|
local pids=$(lsof -ti:$1 2>/dev/null || echo "")
|
|
if [ -n "$pids" ]; then
|
|
info "释放端口 $1..."
|
|
echo "$pids" | xargs kill -9 2>/dev/null || true
|
|
sleep 1
|
|
fi
|
|
}
|
|
|
|
# 日志轮转(仅启动时调用)
|
|
rotate_log() {
|
|
local log_file=$1
|
|
[ ! -f "$log_file" ] && return 0
|
|
|
|
local file_size=$(stat -f%z "$log_file" 2>/dev/null || stat -c%s "$log_file" 2>/dev/null || echo "0")
|
|
if [ "$file_size" -gt "$MAX_LOG_SIZE" ]; then
|
|
[ -f "${log_file}.${MAX_LOG_FILES}" ] && rm -f "${log_file}.${MAX_LOG_FILES}"
|
|
for i in $(seq $((MAX_LOG_FILES - 1)) -1 1); do
|
|
[ -f "${log_file}.${i}" ] && mv "${log_file}.${i}" "${log_file}.$((i + 1))"
|
|
done
|
|
mv "$log_file" "${log_file}.1"
|
|
info "日志已轮转: $log_file"
|
|
fi
|
|
}
|
|
|
|
# 检测 Go
|
|
detect_go() {
|
|
if command -v go &> /dev/null; then
|
|
echo "go"
|
|
elif [ -f "$HOME/go/bin/go" ]; then
|
|
echo "$HOME/go/bin/go"
|
|
else
|
|
echo ""
|
|
fi
|
|
}
|
|
|
|
cleanup() {
|
|
:
|
|
}
|
|
|
|
# ============================================================
|
|
# 后端服务 (Go + Gin)
|
|
# ============================================================
|
|
start_backend() {
|
|
info "正在启动后端服务..."
|
|
cd "$SCRIPT_DIR/$BACKEND_DIR"
|
|
mkdir -p logs
|
|
rotate_log "logs/backend.log"
|
|
|
|
kill_port $BACKEND_PORT
|
|
|
|
local GO_CMD=$(detect_go)
|
|
if [ -z "$GO_CMD" ]; then
|
|
error "Go 未安装,请先安装 Go 1.23+"
|
|
return 1
|
|
fi
|
|
|
|
# 编译二进制(若不存在或源码更新)
|
|
local NEED_BUILD=0
|
|
if [ ! -f "$BACKEND_BIN" ]; then
|
|
NEED_BUILD=1
|
|
elif [ -n "$(find . -name '*.go' -newer "$BACKEND_BIN" -not -path './bin/*' 2>/dev/null | head -1)" ]; then
|
|
NEED_BUILD=1
|
|
fi
|
|
if [ "$NEED_BUILD" = "1" ]; then
|
|
warning "编译后端二进制..."
|
|
CGO_ENABLED=0 GOPROXY=https://goproxy.cn,direct $GO_CMD build -ldflags="-s -w" -o "$BACKEND_BIN" . || {
|
|
error "后端编译失败"
|
|
return 1
|
|
}
|
|
fi
|
|
|
|
# 启动(后台)
|
|
export SERVER_PORT=$BACKEND_PORT
|
|
export DATA_DIR="$SCRIPT_DIR/data"
|
|
export JWT_SECRET="${JWT_SECRET:-opsxloki-secret-key-change-in-production}"
|
|
# v2 安全模型:AES 加密需要独立密钥(用于主机密码/私钥/kubeconfig 等敏感字段)。
|
|
# config.go 在 ENCRYPTION_KEY 缺失或 <32 字符时会 log.Fatal 拒绝启动,故此处提供开发默认值。
|
|
if [ -z "${ENCRYPTION_KEY:-}" ]; then
|
|
warning "未设置 ENCRYPTION_KEY,使用开发默认值。生产环境请通过 .env 或环境变量提供独立随机密钥!"
|
|
export ENCRYPTION_KEY="opsxloki-dev-encryption-key-change-me!!"
|
|
fi
|
|
nohup "./$BACKEND_BIN" >> logs/backend.log 2>&1 &
|
|
echo $! > "$BACKEND_PID_FILE"
|
|
|
|
# 等待服务启动
|
|
local retries=0
|
|
while [ -z "$(check_port $BACKEND_PORT)" ]; do
|
|
retries=$((retries + 1))
|
|
if [ $retries -ge 30 ]; then
|
|
error "后端服务启动超时,请检查日志: $BACKEND_DIR/logs/backend.log"
|
|
return 1
|
|
fi
|
|
sleep 1
|
|
done
|
|
|
|
success "后端服务已启动 (PID: $(cat "$BACKEND_PID_FILE"), 端口: $BACKEND_PORT)"
|
|
info "API: http://localhost:$BACKEND_PORT/api/v1"
|
|
info "默认登录: admin / admin123"
|
|
return 0
|
|
}
|
|
|
|
# 等待进程退出:先 SIGTERM 优雅关停,超时再 SIGKILL
|
|
graceful_kill() {
|
|
local pid=$1
|
|
local name=$2
|
|
local grace=${3:-8}
|
|
if [ -z "$pid" ] || ! kill -0 "$pid" 2>/dev/null; then
|
|
return 0
|
|
fi
|
|
info "正在优雅停止 $name (PID: $pid)..."
|
|
kill -TERM "$pid" 2>/dev/null || true
|
|
local i=0
|
|
while kill -0 "$pid" 2>/dev/null && [ $i -lt $((grace * 2)) ]; do
|
|
sleep 0.5
|
|
i=$((i + 1))
|
|
done
|
|
if kill -0 "$pid" 2>/dev/null; then
|
|
warning "$name 未在 ${grace}s 内退出,强制终止..."
|
|
kill -KILL "$pid" 2>/dev/null || true
|
|
fi
|
|
success "$name 已停止"
|
|
}
|
|
|
|
stop_backend() {
|
|
if [ -f "$BACKEND_PID_FILE" ]; then
|
|
local pid=$(cat "$BACKEND_PID_FILE" 2>/dev/null || echo "")
|
|
graceful_kill "$pid" "后端服务" 8
|
|
rm -f "$BACKEND_PID_FILE"
|
|
fi
|
|
# 兜底:清理仍占用端口的残留进程(非 PID 文件管理的)
|
|
kill_port $BACKEND_PORT
|
|
}
|
|
|
|
# ============================================================
|
|
# 前端服务 (Vite Dev Server)
|
|
# ============================================================
|
|
start_frontend() {
|
|
info "正在启动前端服务..."
|
|
cd "$SCRIPT_DIR/$FRONTEND_DIR"
|
|
mkdir -p logs
|
|
rotate_log "logs/dev.log"
|
|
|
|
kill_port $FRONTEND_PORT
|
|
|
|
if [ ! -d "node_modules" ]; then
|
|
warning "node_modules 不存在,正在安装依赖..."
|
|
npm install || { error "依赖安装失败"; return 1; }
|
|
fi
|
|
|
|
nohup npm run dev >> logs/dev.log 2>&1 &
|
|
echo $! > "$FRONTEND_PID_FILE"
|
|
|
|
# 等待服务启动
|
|
local retries=0
|
|
while [ -z "$(check_port $FRONTEND_PORT)" ]; do
|
|
retries=$((retries + 1))
|
|
if [ $retries -ge 30 ]; then
|
|
error "前端服务启动超时,请检查日志: $FRONTEND_DIR/logs/dev.log"
|
|
return 1
|
|
fi
|
|
sleep 1
|
|
done
|
|
|
|
success "前端服务已启动 (PID: $(cat "$FRONTEND_PID_FILE"), 端口: $FRONTEND_PORT)"
|
|
info "前端地址: http://localhost:$FRONTEND_PORT"
|
|
return 0
|
|
}
|
|
|
|
stop_frontend() {
|
|
if [ -f "$FRONTEND_PID_FILE" ]; then
|
|
local pid=$(cat "$FRONTEND_PID_FILE" 2>/dev/null || echo "")
|
|
graceful_kill "$pid" "前端服务" 5
|
|
rm -f "$FRONTEND_PID_FILE"
|
|
fi
|
|
kill_port $FRONTEND_PORT
|
|
}
|
|
|
|
# ============================================================
|
|
# 命令
|
|
# ============================================================
|
|
stop() {
|
|
info "正在停止服务..."
|
|
stop_backend
|
|
stop_frontend
|
|
info "所有服务已停止"
|
|
}
|
|
|
|
show_status() {
|
|
info "服务状态:"
|
|
if [ -n "$(check_port $BACKEND_PORT)" ]; then
|
|
success "后端服务: 运行中 (PID: $(check_port $BACKEND_PORT), 端口: $BACKEND_PORT)"
|
|
else
|
|
warning "后端服务: 未运行"
|
|
fi
|
|
|
|
if [ -n "$(check_port $FRONTEND_PORT)" ]; then
|
|
success "前端服务: 运行中 (PID: $(check_port $FRONTEND_PORT), 端口: $FRONTEND_PORT)"
|
|
else
|
|
warning "前端服务: 未运行"
|
|
fi
|
|
}
|
|
|
|
show_help() {
|
|
echo "$PROJECT_NAME 启动脚本"
|
|
echo ""
|
|
echo "用法: ./run.sh [命令]"
|
|
echo ""
|
|
echo "命令:"
|
|
echo " start 启动前后端服务 (默认)"
|
|
echo " stop 停止前后端服务"
|
|
echo " restart 重启前后端服务"
|
|
echo " backend 仅启动后端服务"
|
|
echo " frontend 仅启动前端服务"
|
|
echo " status 查看服务状态"
|
|
echo " help 显示帮助信息"
|
|
echo ""
|
|
echo "端口:"
|
|
echo " 后端 API: http://localhost:$BACKEND_PORT/api/v1"
|
|
echo " 前端页面: http://localhost:$FRONTEND_PORT"
|
|
echo ""
|
|
echo "示例:"
|
|
echo " ./run.sh # 启动所有服务"
|
|
echo " ./run.sh stop # 停止服务"
|
|
echo " ./run.sh backend # 仅启动后端"
|
|
}
|
|
|
|
# ============================================================
|
|
# 主入口
|
|
# ============================================================
|
|
trap cleanup EXIT INT TERM
|
|
|
|
main() {
|
|
local command=${1:-start}
|
|
|
|
case "$command" in
|
|
start)
|
|
info "========== $PROJECT_NAME 启动脚本 =========="
|
|
|
|
if [ -z "$(detect_go)" ]; then
|
|
error "Go 未安装,请先安装 Go 1.23+"
|
|
exit 1
|
|
fi
|
|
if ! command -v npm &> /dev/null; then
|
|
error "npm 未安装,请先安装 Node.js"
|
|
exit 1
|
|
fi
|
|
|
|
if start_backend && start_frontend; then
|
|
echo ""
|
|
success "========== 所有服务已启动 =========="
|
|
info "前端地址: http://localhost:$FRONTEND_PORT"
|
|
info "后端 API: http://localhost:$BACKEND_PORT/api/v1"
|
|
info "默认登录: admin / admin123"
|
|
echo ""
|
|
info "使用 './run.sh stop' 停止服务"
|
|
info "使用 './run.sh status' 查看状态"
|
|
else
|
|
error "服务启动失败"
|
|
exit 1
|
|
fi
|
|
;;
|
|
stop)
|
|
stop
|
|
;;
|
|
restart)
|
|
stop
|
|
sleep 2
|
|
main start
|
|
;;
|
|
backend)
|
|
info "========== $PROJECT_NAME (仅后端) =========="
|
|
start_backend
|
|
show_status
|
|
;;
|
|
frontend)
|
|
info "========== $PROJECT_NAME (仅前端) =========="
|
|
start_frontend
|
|
show_status
|
|
;;
|
|
status)
|
|
show_status
|
|
;;
|
|
help|--help|-h)
|
|
show_help
|
|
;;
|
|
*)
|
|
error "未知命令: $command"
|
|
show_help
|
|
exit 1
|
|
;;
|
|
esac
|
|
}
|
|
|
|
main "$@"
|