fix: cicd-调整2

.gitea/workflows/ci-deploy.yml

@@ -9,11 +9,30 @@ jobs:
   build-and-deploy:
     runs-on: xw-runner
     steps:
-      - name: Checkout code
-        uses: https://gitea.com/actions/checkout@v4
+      - name: Checkout code (git clone)
+        env:
+          CLONE_URL: ${{ gitea.repository.clone_url }}
+          SHA: ${{ gitea.sha }}
+          CLONE_TOKEN: ${{ secrets.CLONE_TOKEN }}
+        run: |
+          set -euo pipefail
+          rm -rf repo
+          mkdir -p repo
+          cd repo
+
+          if [ -n "${CLONE_TOKEN:-}" ]; then
+            AUTH_URL="$(printf '%s' "${CLONE_URL}" | sed -E "s#^https?://#https://${CLONE_TOKEN}@#")"
+            git clone --no-tags --depth 1 "${AUTH_URL}" .
+          else
+            git clone --no-tags --depth 1 "${CLONE_URL}" .
+          fi
+
+          git fetch --no-tags --depth 1 origin "${SHA}"
+          git checkout -q "${SHA}"
 
       - name: Determine image tag
         id: vars
+        working-directory: repo
         run: |
           REGISTRY_URL='${{ secrets.REGISTRY_URL }}'
           IMAGE_NAME='${{ secrets.IMAGE_NAME }}'
@@ -21,6 +40,7 @@ jobs:
           echo "IMAGE_TAG=${REGISTRY_URL}/${IMAGE_NAME}:${SHA}" >> "$GITHUB_OUTPUT"
 
       - name: Build Jar (in Maven container)
+        working-directory: repo
         run: |
           docker run --rm \
             -v "$PWD":/workspace \
@@ -29,20 +49,15 @@ jobs:
             mvn -B clean package -DskipTests
 
       - name: Build and push Docker image
+        working-directory: repo
         run: |
           docker build --pull -t "${{ steps.vars.outputs.IMAGE_TAG }}" .
           docker push "${{ steps.vars.outputs.IMAGE_TAG }}"
 
-      - name: Deploy to target host
-        uses: https://gitea.com/appleboy/ssh-action@v0.1.5
-        with:
-          host: ${{ secrets.DEPLOY_HOST }}
-          port: ${{ secrets.DEPLOY_PORT }}
-          username: ${{ secrets.DEPLOY_USER }}
-          key: ${{ secrets.DEPLOY_PRIVATE_KEY }}
-          script: |
-            docker pull ${{ steps.vars.outputs.IMAGE_TAG }}
-            docker stop jt808-server || true
-            docker rm jt808-server || true
-            docker run -d --name jt808-server -p 8080:8080 -p 20048:20048 ${{ steps.vars.outputs.IMAGE_TAG }}
+      - name: Deploy (same host)
+        run: |
+          docker pull "${{ steps.vars.outputs.IMAGE_TAG }}" || true
+          docker stop jt808-server || true
+          docker rm jt808-server || true
+          docker run -d --name jt808-server -p 8080:8080 -p 20048:20048 "${{ steps.vars.outputs.IMAGE_TAG }}"