chore(ci): add offline container deployment pipeline

deploy/scripts/package.sh

@@ -11,7 +11,7 @@
 #   bash package.sh latest linux/amd64,linux/arm64  # 暂不支持（save 不支持 multi-arch）
 #
 # 产物：
-#   geo-rankly-deploy-<date>-<arch>.tar.gz
+#   geo-rankly-deploy-<image-tag>-<date>-<arch>.tar.gz
 
 set -euo pipefail
 
@@ -19,14 +19,18 @@ REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
 DEPLOY_DIR="${REPO_ROOT}/deploy"
 IMAGE_TAG="${1:-latest}"
 PLATFORM="${2:-linux/amd64}"
-LOCAL_PREFIX="geo-rankly"
+LOCAL_PREFIX="${LOCAL_PREFIX:-geo-rankly}"
+OUTPUT_DIR="${PACKAGE_OUTPUT_DIR:-${REPO_ROOT}}"
 DATE_TAG="$(date +%Y%m%d)"
 # 将 linux/amd64 → amd64，用于包名
 ARCH_LABEL="${PLATFORM##*/}"
-PACKAGE_NAME="geo-rankly-deploy-${DATE_TAG}-${ARCH_LABEL}"
+SAFE_IMAGE_TAG="$(printf '%s' "${IMAGE_TAG}" | tr '/:@' '---' | tr -c 'A-Za-z0-9_.-' '-')"
+PACKAGE_NAME="geo-rankly-deploy-${SAFE_IMAGE_TAG}-${DATE_TAG}-${ARCH_LABEL}"
 WORK_DIR="/tmp/${PACKAGE_NAME}"
+PACKAGE_PATH="${OUTPUT_DIR}/${PACKAGE_NAME}.tar.gz"
 
 echo "==> 目标平台: ${PLATFORM}  |  镜像 tag: ${IMAGE_TAG}"
+echo "==> 输出目录: ${OUTPUT_DIR}"
 echo ""
 
 # ─── 确保 buildx builder 支持目标平台 ────────────────────────────────────────
@@ -147,6 +151,16 @@ cp "${DEPLOY_DIR}/prompts.yml"                 "${WORK_DIR}/"
 cp "${DEPLOY_DIR}/.env.example"                "${WORK_DIR}/"
 cp "${DEPLOY_DIR}/scripts/load-and-start.sh"   "${WORK_DIR}/deploy.sh"
 cp -R "${DEPLOY_DIR}/k3s"                      "${WORK_DIR}/k3s"
+if [[ -f "${DEPLOY_DIR}/OFFLINE_PACKAGE.md" ]]; then
+  cp "${DEPLOY_DIR}/OFFLINE_PACKAGE.md" "${WORK_DIR}/README.md"
+fi
+if [[ -f "${WORK_DIR}/k3s/kustomization.yaml" ]]; then
+  awk -v tag="${IMAGE_TAG}" '
+    $1 == "newTag:" && $2 == "latest" { print "    newTag: " tag; next }
+    { print }
+  ' "${WORK_DIR}/k3s/kustomization.yaml" > "${WORK_DIR}/k3s/kustomization.yaml.tmp"
+  mv "${WORK_DIR}/k3s/kustomization.yaml.tmp" "${WORK_DIR}/k3s/kustomization.yaml"
+fi
 chmod +x "${WORK_DIR}/deploy.sh"
 
 # 写入元数据，供 load 脚本读取
@@ -158,18 +172,43 @@ BUILT_AT=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
 BUILT_ON=$(uname -m)
 EOF
 
+cat > "${WORK_DIR}/MANIFEST.txt" <<EOF
+geo-rankly offline deployment package
+
+Image tag: ${IMAGE_TAG}
+Platform: ${PLATFORM}
+Local image prefix: ${LOCAL_PREFIX}
+Built at: $(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+Start:
+  bash deploy.sh
+
+Files:
+  images.tar
+  docker-compose.yaml
+  docker-compose.offline.yaml
+  .env.example
+  deploy.sh
+EOF
+
 # ─── 压缩 ──────────────────────────────────────────────────────────────────
 echo "==> [5/5] 压缩打包"
+mkdir -p "${OUTPUT_DIR}"
 cd /tmp
-tar -czf "${REPO_ROOT}/${PACKAGE_NAME}.tar.gz" "${PACKAGE_NAME}/"
+tar -czf "${PACKAGE_PATH}" "${PACKAGE_NAME}/"
+if command -v sha256sum >/dev/null 2>&1; then
+  sha256sum "${PACKAGE_PATH}" > "${PACKAGE_PATH}.sha256"
+else
+  shasum -a 256 "${PACKAGE_PATH}" > "${PACKAGE_PATH}.sha256"
+fi
 rm -rf "${WORK_DIR}"
 
 echo ""
-echo "✅ 打包完成: ${REPO_ROOT}/${PACKAGE_NAME}.tar.gz"
-echo "   平台: ${PLATFORM}  |  大小: $(du -sh "${REPO_ROOT}/${PACKAGE_NAME}.tar.gz" | cut -f1)"
+echo "✅ 打包完成: ${PACKAGE_PATH}"
+echo "   校验文件: ${PACKAGE_PATH}.sha256"
+echo "   平台: ${PLATFORM}  |  大小: $(du -sh "${PACKAGE_PATH}" | cut -f1)"
 echo ""
 echo "传输到目标服务器后执行："
 echo "  tar xzf ${PACKAGE_NAME}.tar.gz"
 echo "  cd ${PACKAGE_NAME}"
-echo "  cp .env.example .env && vi .env"
 echo "  bash deploy.sh"