[api] Jenkinsfile.pjt

- 삭제정책 추가
This commit is contained in:
2026-02-04 15:44:48 +09:00
parent 9c85d89f07
commit 0e8876e66f
+52 -36
View File
@@ -246,61 +246,77 @@ pipeline {
sshagent(['ssh-pjt']) { sshagent(['ssh-pjt']) {
sh ''' sh '''
set -e set -e
ssh -p ${SSH_PORT} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \ ssh -p ${SSH_PORT} -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \
${SSH_USER}@${SSH_HOST} \ ${SSH_USER}@${SSH_HOST} \
'set -e "REGISTRY_HOST='${REGISTRY_HOST}' IMAGE_REPO='${IMAGE_REPO}' DOCKER_USER='${DOCKER_USER}' DOCKER_PASS='${DOCKER_PASS}' bash -se" <<'EOF'
REGISTRY_URL="https://${REGISTRY_HOST}" set -e
REPO="${IMAGE_REPO}"
KEEP=5
AUTH="'${DOCKER_USER}':'${DOCKER_PASS}'"
command -v jq >/dev/null 2>&1 || (sudo apt-get update -y && sudo apt-get install -y jq) REGISTRY_URL="https://${REGISTRY_HOST}"
REPO="${IMAGE_REPO}"
KEEP=5
AUTH="${DOCKER_USER}:${DOCKER_PASS}"
echo "[1/5] Collect running tags to protect" command -v jq >/dev/null 2>&1 || (sudo apt-get update -y && sudo apt-get install -y jq)
RUNNING_TAGS=$(docker ps --format "{{.Image}}" | \
grep -E "^${REGISTRY_HOST}/${IMAGE_REPO}:" | \
awk -F: "{print \\$2}" | sort -u || true)
echo "[2/5] Fetch tags from registry" echo "[1/6] Debug URL"
TAGS=$(curl -fsS -u "$AUTH" "$REGISTRY_URL/v2/$REPO/tags/list" | jq -r ".tags[]?" || true) echo "REGISTRY_URL=${REGISTRY_URL}"
echo "TAGS_URL=${REGISTRY_URL}/v2/${REPO}/tags/list"
[ -z "$TAGS" ] && { echo "No tags found. Skip."; exit 0; } echo "[2/6] Collect running tags to protect"
RUNNING_TAGS=$(docker ps --format '{{.Image}}' | \
grep -E "^${REGISTRY_HOST}/${REPO}:" | \
awk -F: '{print $2}' | sort -u || true)
echo "[3/5] Sort tags desc" echo "[3/6] Fetch tags from registry"
SORTED=$(echo "$TAGS" | sort -r) TAGS=$(curl -fsS -u "${AUTH}" "${REGISTRY_URL}/v2/${REPO}/tags/list" | jq -r '.tags[]?' || true)
KEEP_TAGS=$(echo "$SORTED" | head -n $KEEP)
DEL_CANDIDATES=$(echo "$SORTED" | tail -n +$((KEEP+1)))
echo "Keep tags:" if [ -z "$TAGS" ]; then
echo "$KEEP_TAGS" | sed "s/^/ - /" echo "No tags found in registry. Skip."
exit 0
fi
echo "[4/5] Delete old tags except running tags" echo "[4/6] Sort tags desc"
for TAG in $DEL_CANDIDATES; do SORTED=$(echo "$TAGS" | sort -r)
if [ -n "$RUNNING_TAGS" ] && echo "$RUNNING_TAGS" | grep -qx "$TAG"; then KEEP_TAGS=$(echo "$SORTED" | head -n $KEEP)
echo "Skip running tag: $REPO:$TAG" DEL_CANDIDATES=$(echo "$SORTED" | tail -n +$((KEEP+1)))
continue
fi
DIGEST=$(curl -fsSI -u "$AUTH" \ echo "Keep tags:"
-H "Accept: application/vnd.docker.distribution.manifest.v2+json" \ echo "$KEEP_TAGS" | sed 's/^/ - /'
"$REGISTRY_URL/v2/$REPO/manifests/$TAG" \
| awk -F": " "/Docker-Content-Digest/ {print \\$2}" | tr -d "\\r")
[ -z "$DIGEST" ] && { echo "digest not found. skip $TAG"; continue; } echo "[5/6] Delete old tags except running tags"
for TAG in $DEL_CANDIDATES; do
if [ -n "$RUNNING_TAGS" ] && echo "$RUNNING_TAGS" | grep -qx "$TAG"; then
echo "Skip running tag: ${REPO}:${TAG}"
continue
fi
curl -fsS -u "$AUTH" -X DELETE "$REGISTRY_URL/v2/$REPO/manifests/$DIGEST" || true echo "Deleting ${REPO}:${TAG}"
done
echo "[5/5] Garbage collect" DIGEST=$(curl -fsSI -u "${AUTH}" \
docker exec registry registry garbage-collect /etc/docker/registry/config.yml -H "Accept: application/vnd.docker.distribution.manifest.v2+json" \
"${REGISTRY_URL}/v2/${REPO}/manifests/${TAG}" \
| awk -F': ' '/Docker-Content-Digest/ {print $2}' | tr -d '\r')
echo "Registry cleanup done." if [ -z "$DIGEST" ]; then
' echo " digest not found. skip ${TAG}"
continue
fi
curl -fsS -u "${AUTH}" -X DELETE "${REGISTRY_URL}/v2/${REPO}/manifests/${DIGEST}" || true
done
echo "[6/6] Garbage collect (reclaim disk)"
docker exec registry registry garbage-collect /etc/docker/registry/config.yml
echo "Registry cleanup done."
EOF
''' '''
} }
} }
} }
} }
} }
} }