[Feat] Docker Compose 기반 환경별 CI/CD 구축

.github/workflows/cd-dev.yml

@@ -0,0 +1,72 @@
+name: CD on Dev
+
+on:
+  push:
+    branches:
+      - develop
+    paths:
+      - 'src/**'
+      - 'build.gradle.kts'
+      - 'docker/**'
+      - 'cd.yml'
+
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Deploy environment'
+        required: true
+        type: choice
+        options:
+          - dev
+          - prod
+
+jobs:
+  # 1. 공통 빌드/테스트 워크플로우 호출 (ci.yml 재사용)
+  ci-and-build:
+    uses: ./.github/workflows/ci.yml
+    with:
+      environment: ${{ inputs.environment }}
+
+  # 2. Deploy Job
+  deploy:
+    needs: ci-and-build
+    runs-on: ubuntu-latest
+    # 빌드 단계에서 결정된 환경 사용
+    environment: ${{ needs.ci-and-build.outputs.environment }}
+
+    env:
+      ENVIRONMENT: ${{ needs.ci-and-build.outputs.environment }}
+      REPO_OWNER: ${{ needs.ci-and-build.outputs.repo_owner }}
+      IMAGE_TAG: ${{ needs.ci-and-build.outputs.image_tag }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: SSH 접속 및 스크립트 실행
+        uses: appleboy/ssh-action@v1
+        env:
+          APPLICATION_PROD: ${{ secrets.APPLICATION_PROD }}
+          APPLICATION_DEV: ${{ secrets.APPLICATION_DEV }}
+          APPLICATION_SECRET: ${{ secrets.APPLICATION_SECRET }}
+          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+        with:
+          host: ${{ secrets.SERVER_SSH_HOST }}
+          username: ${{ secrets.SERVER_SSH_USERNAME }}
+          key: ${{ secrets.SERVER_SSH_PRIVATE_KEY }}
+          port: ${{ secrets.SERVER_SSH_PORT }}
+          envs: APPLICATION_PROD,APPLICATION_DEV,APPLICATION_SECRET,ENVIRONMENT,IMAGE_TAG,REPO_OWNER,DOCKER_IMAGE_NAME,DOCKERHUB_TOKEN,DOCKERHUB_USERNAME
+          script_path: scripts/cd-dev.sh
+
+      - name: Deployment Summary
+        if: always()
+        run: |
+          echo "### Deployment Summary :rocket:" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "- **Environment:** ${{ env.ENVIRONMENT }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Branch:** ${{ github.ref_name }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Commit:** ${{ github.sha }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Image:** ${{ secrets.DOCKER_IMAGE_NAME }}:${{ env.ENVIRONMENT }}-latest" >> $GITHUB_STEP_SUMMARY
+          echo "- **Server:** ${{ secrets.SERVER_SSH_HOST }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Status:** ${{ job.status }}" >> $GITHUB_STEP_SUMMARY

.github/workflows/ci.yml

@@ -0,0 +1,175 @@
+name: Backend CI & Build
+
+on:
+  pull_request:
+    branches:
+      - develop
+      - main
+
+  workflow_call:
+    inputs:
+      environment:
+        description: 'Deploy environment (optional)'
+        required: false
+        type: string
+    outputs:
+      environment:
+        description: "Determined environment"
+        value: ${{ jobs.build-and-test.outputs.environment }}
+      repo_owner:
+        description: "Repository owner"
+        value: ${{ jobs.build-and-test.outputs.repo_owner }}
+      image_tag:
+        description: "Docker image tag"
+        value: ${{ jobs.build-and-test.outputs.image_tag }}
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true  # 이전 실행 취소
+
+jobs:
+  # Job 1: 빌드 및 테스트 (한 번만 실행)
+  build-and-test:
+    runs-on: self-hosted
+
+    permissions:
+      contents: read
+      checks: write
+      pull-requests: write
+
+    outputs:
+      environment: ${{ steps.set-env.outputs.environment }}
+      repo_owner: ${{ steps.set-env.outputs.repo_owner }}
+      image_tag: ${{ steps.set-env.outputs.image_tag }}
+
+    strategy:
+      matrix:
+        platform: [ linux/amd64, linux/arm64 ]
+        include:
+          - platform: linux/amd64
+            tag-suffix: amd64
+          - platform: linux/arm64
+            tag-suffix: arm64
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set deployment environment
+        id: set-env
+        run: |
+          INPUT_ENV="${{ inputs.environment }}"
+
+          # PR일 때는 'test' 환경으로 설정
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
+            echo "Running in PR mode - Setting test environment for build"
+            ENVIRONMENT="test"
+          elif [[ -n "$INPUT_ENV" ]]; then
+            ENVIRONMENT="$INPUT_ENV"
+          
+          # CD에서 호출한 경우 branch에 따라서 환경 결정
+          elif [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
+            ENVIRONMENT="prod"
+          elif [[ "${{ github.ref }}" == "refs/heads/develop" ]]; then
+            ENVIRONMENT="dev"
+          else
+            ENVIRONMENT="test"
+          fi
+
+          echo "environment=${ENVIRONMENT}" >> $GITHUB_OUTPUT
+
+          REPO_OWNER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
+          echo "repo_owner=${REPO_OWNER}" >> $GITHUB_OUTPUT
+
+          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
+          IMAGE_TAG="${ENVIRONMENT}-${SHORT_SHA}"
+          echo "image_tag=${IMAGE_TAG}" >> $GITHUB_OUTPUT
+
+      - name: Setup JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'corretto'
+          cache: gradle
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Compile Check
+        run: ./gradlew compileJava compileTestJava
+
+      - name: Run Tests
+        run: ./gradlew test
+
+      - name: Publish Test Results
+        uses: EnricoMi/publish-unit-test-result-action@v2
+        if: always()
+        with:
+          files: build/test-results/test/*.xml
+          check_name: "Backend Test Results"
+
+      - name: Build JAR
+        run: ./gradlew bootJar
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: docker/kyeoungwoon/dockerfile
+          push: true
+          tags: |
+            ${{ secrets.DOCKER_IMAGE_NAME }}:${{ steps.set-env.outputs.image_tag }}-${{ matrix.tag-suffix }}
+          platforms: ${{ matrix.platform }}
+          cache-from: type=gha,scope=${{ matrix.platform }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.platform }}
+
+  # Job 3: Multi-arch manifest 생성
+  create-manifest:
+    needs: [ build-and-test ]
+    runs-on: self-hosted
+    steps:
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Create and push manifest
+        run: |
+          IMAGE_TAG="${{ needs.build-and-test.outputs.image_tag }}"
+          ENVIRONMENT="${{ needs.build-and-test.outputs.environment }}"
+          
+          # 특정 커밋용 manifest 생성
+          docker buildx imagetools create -t ${{ secrets.DOCKER_IMAGE_NAME }}:${IMAGE_TAG} \
+            ${{ secrets.DOCKER_IMAGE_NAME }}:${IMAGE_TAG}-amd64 \
+            ${{ secrets.DOCKER_IMAGE_NAME }}:${IMAGE_TAG}-arm64
+          
+          # 환경별 latest manifest 생성
+          docker buildx imagetools create -t ${{ secrets.DOCKER_IMAGE_NAME }}:${ENVIRONMENT}-latest \
+            ${{ secrets.DOCKER_IMAGE_NAME }}:${IMAGE_TAG}-amd64 \
+            ${{ secrets.DOCKER_IMAGE_NAME }}:${IMAGE_TAG}-arm64
+          
+          echo "✅ Created manifests:"
+          echo "  - ${{ secrets.DOCKER_IMAGE_NAME }}:${IMAGE_TAG}"
+          echo "  - ${{ secrets.DOCKER_IMAGE_NAME }}:${ENVIRONMENT}-latest"
+
+      - name: Build Summary
+        if: always()
+        run: |
+          echo "### Build Summary :package:" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "- **Environment:** ${{ steps.set-env.outputs.environment }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Image Tag:** ${{ steps.set-env.outputs.image_tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "- **Platforms:** linux/amd64, linux/arm64" >> $GITHUB_STEP_SUMMARY

docker/kyeoungwoon/dockerfile

@@ -0,0 +1,40 @@
+# =================================
+# Run stage only
+# =================================
+FROM eclipse-temurin:21-jre-jammy
+WORKDIR /app
+
+LABEL maintainer="UMC PRODUCT TEAM SERVER TEAM"
+LABEL description="UMC PRODUCT Official SpringBoot Backend Server"
+
+# Create non-root user
+RUN groupadd -r spring && useradd -r -g spring spring
+
+# 이미 build된 jar 파일을 docker 안으로 복사
+COPY --chown=spring:spring build/libs/*.jar app.jar
+RUN chmod 444 app.jar
+
+# 로그 디렉토리 생성 및 권한 설정
+RUN mkdir -p /app/logs && chown -R spring:spring /app/logs
+
+# Switch to non-root user
+USER spring:spring
+
+# Expose application port
+EXPOSE 8080
+
+# JVM options
+ENV JAVA_OPTS="-XX:+UseContainerSupport \
+               -XX:MaxRAMPercentage=75.0 \
+               -XX:+UseG1GC \
+               -XX:+ExitOnOutOfMemoryError \
+               -XX:+HeapDumpOnOutOfMemoryError \
+               -XX:HeapDumpPath=/tmp/heapdump.hprof \
+               -Duser.timezone=Asia/Seoul \
+               -Djava.security.egd=file:/dev/./urandom"
+
+# Use exec form with sh -c so JAVA_OPTS is expanded and signals forwarded
+ENTRYPOINT ["sh", "-c", "exec java $JAVA_OPTS -jar app.jar"]
+
+# Optional healthcheck (uncomment if actuator/health endpoint exists)
+# HEALTHCHECK --interval=30s --timeout=5s CMD curl -f http://localhost:8080/actuator/health || exit 1

scripts/cd-dev.sh

@@ -0,0 +1,87 @@
+#!/bin/bash
+set -e
+
+# ------------------------------------------------------------------
+# 변수 할당 (GitHub Actions에서 envs로 넘어온 값들)
+# ------------------------------------------------------------------
+# 주의: YAML에서 envs로 넘겨준 변수 이름과 정확히 일치해야 합니다.
+# ------------------------------------------------------------------
+
+echo "=============================="
+echo "🚀 배포 시작: $ENVIRONMENT 환경"
+echo "=============================="
+
+# [1] Docker 설치 확인
+echo "[1] Docker 설치 확인"
+if which docker > /dev/null 2>&1; then
+  echo "✅ Docker 인식됨: $(which docker)"
+else
+  echo "⚠️  PATH에 /usr/local/bin 추가"
+  export PATH="$PATH:/usr/local/bin"
+  if which docker > /dev/null 2>&1; then
+    echo "✅ Docker 인식됨: $(which docker)"
+  else
+    echo "❌ Docker를 찾을 수 없습니다"
+    exit 1
+  fi
+fi
+
+# [2] 환경별 배포 디렉토리 설정
+# YAML의 ${{ secrets... }} 대신 환경변수 $APP_DIR_PRODUCTION 등을 사용
+if [[ "$ENVIRONMENT" == "prod" ]]; then
+  APP_DIR=$APP_DIR_PRODUCTION
+else
+  APP_DIR=$APP_DIR_DEVELOPMENT
+fi
+
+echo "📂 배포 경로: $APP_DIR"
+
+# [3] 설정 파일 생성
+mkdir -p $APP_DIR/config
+echo "$APPLICATION_PROD" > $APP_DIR/config/application-prod.yml
+echo "$APPLICATION_DEV" > $APP_DIR/config/application-dev.yml
+echo "$APPLICATION_SECRET" > $APP_DIR/config/application-secret.yml
+
+# 보안을 위해 권한 설정 (선택사항)
+chmod 600 $APP_DIR/config/application-*.yml
+echo "✅ 환경 설정 파일 생성 완료"
+
+# [4] Docker Hub 로그인
+echo ""
+echo "[2] Docker Hub 로그인"
+echo "$DOCKERHUB_TOKEN" | docker login -u "$DOCKERHUB_USERNAME" --password-stdin
+
+if [ $? -eq 0 ]; then
+  echo "✅ Docker Hub 로그인 성공"
+else
+  echo "❌ Docker Hub 로그인 실패"
+  exit 1
+fi
+
+# [5] Docker Compose 실행
+cd $APP_DIR
+
+# 롤백 및 버전 관리를 위해 태그 지정 (docker-compose.yml에서 ${TAG}를 쓴다고 가정)
+export TAG=$IMAGE_TAG
+export DOCKER_IMAGE_NAME=$DOCKER_IMAGE_NAME
+
+# 기존 컨테이너 중지 및 최신 이미지 Pull & 실행
+docker compose pull
+docker compose up -d
+
+if [ $? -eq 0 ]; then
+  echo "✅ 컨테이너 재시작 성공"
+else
+  echo "❌ 컨테이너 재시작 실패"
+  exit 1
+fi
+
+# 미사용 이미지 정리
+docker image prune -f
+
+echo ""
+echo "=============================="
+echo "🎉 배포 완료!"
+echo "=============================="
+echo "환경: $ENVIRONMENT"
+echo "이미지: $DOCKER_IMAGE_NAME:$ENVIRONMENT-latest"