Skip to content

devops.md

Latest commit

 

History

History
87 lines (61 loc) · 2.61 KB

devops.md

File metadata and controls

87 lines (61 loc) · 2.61 KB
Raw

PaperTrade DevOps

PaperTrade production runs on Project Babbage private Kubernetes infrastructure and uses a private local registry for image pushes and cluster pulls.

These notes document the live Project Babbage production shape. Public self-hosters can use the manifests and scripts as references, but the GitHub Actions workflow and registry defaults assume private infrastructure and production secrets.

Image Strategy

The runtime image is split into two layers of ownership:

  • p2ppsr/papertrade-runtime-base:<tag> contains Node.js plus the heavy document conversion stack: Poppler, LibreOffice Writer, and Calibre.
  • p2ppsr/papertrade:<short-sha>-production-<date> contains the application build, production node modules, migrations, and static frontend assets.

The runtime base image should change only when the OS, Node major version, or document conversion tooling changes. Normal PaperTrade source deployments should build only the app image.

For a local Docker build outside Project Babbage infrastructure:

docker build -f Dockerfile.runtime-base -t papertrade-runtime-base:local .
docker build -t papertrade:local .

Production builds pass RUNTIME_BASE_IMAGE explicitly, so the public Dockerfile default remains usable for local builders without changing the cluster workflow.

Build Cache

scripts/k8s/build-local-image.sh runs Kaniko in the cluster and enables a registry-backed cache:

KANIKO_CACHE_REPO=10.152.183.28:5000/p2ppsr/papertrade-build-cache
KANIKO_CACHE_TTL=720h

This keeps npm install layers and build layers close to the cluster. Rebuilds after TypeScript or CSS changes should reuse dependency layers instead of downloading packages again over Starlink.

Common Commands

Build only the normal app image:

scripts/k8s/build-local-image.sh

Rebuild the heavy runtime base image deliberately:

BUILD_TARGET=runtime-base scripts/k8s/build-local-image.sh

Seed both the runtime base and app image in one run:

BUILD_TARGET=all scripts/k8s/build-local-image.sh

Deploy a previously built app image tag:

IMAGE_TAG=<tag> SQL_DATABASE_USER=<user> SQL_DATABASE_PASSWORD=<password> scripts/k8s/deploy-local.sh

GitHub Actions

.github/workflows/deploy-production-local.yml runs on private self-hosted runner labels:

  • linux-amd64
  • docker
  • kubectl
  • local-registry

The workflow accepts an optional source_sha and a build_runtime_base switch. Keep build_runtime_base=false for normal deploys. Set it to true only after reviewing changes to Dockerfile.runtime-base, Node major versions, or document conversion dependencies.