Go 应用在 AWS 上的部署策略与自动化实践

import boto3
import paramiko
import os

# AWS 配置
AWS_REGION = 'us-east-1'
INSTANCE_ID = 'i-xxxxxxxxxxxxxxxxx' # 你的EC2实例ID
SSH_KEY_PATH = '/path/to/your-key.pem'
LOCAL_BINARY_PATH = './myapp'
REMOTE_PATH = '/opt/myapp/myapp'
REMOTE_DIR = os.path.dirname(REMOTE_PATH)
SSH_USER = 'ec2-user' # 根据AMI选择，如ubuntu, centos等

def deploy_go_app():
    ec2_client = boto3.client('ec2', region_name=AWS_REGION)

    # 获取实例的公有IP地址
    response = ec2_client.describe_instances(InstanceIds=[INSTANCE_ID])
    public_ip = response['Reservations'][0]['Instances'][0]['PublicIpAddress']

    print(f"Connecting to EC2 instance at {public_ip}...")

    try:
        # SSH 连接
        client = paramiko.SSHClient()
        client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        client.connect(hostname=public_ip, username=SSH_USER, key_filename=SSH_KEY_PATH)

        # 创建远程目录
        stdin, stdout, stderr = client.exec_command(f'sudo mkdir -p {REMOTE_DIR}')
        print(f"Create dir output: {stdout.read().decode().strip()} {stderr.read().decode().strip()}")

        # SFTP 上传二进制文件
        sftp = client.open_sftp()
        sftp.put(LOCAL_BINARY_PATH, REMOTE_PATH)
        sftp.close()
        print(f"Uploaded {LOCAL_BINARY_PATH} to {REMOTE_PATH}")

        # 授予执行权限并运行应用 (这里假设应用通过systemd管理，稍后会详细介绍)
        # 如果是简单运行，可以执行：
        # stdin, stdout, stderr = client.exec_command(f'chmod +x {REMOTE_PATH} && nohup {REMOTE_PATH} > /dev/null 2>&1 &')
        # print(f"Run app output: {stdout.read().decode().strip()} {stderr.read().decode().strip()}")

        # 如果使用systemd，重启服务
        stdin, stdout, stderr = client.exec_command(f'sudo systemctl restart myapp.service')
        print(f"Restart service output: {stdout.read().decode().strip()} {stderr.read().decode().strip()}")

        print("Deployment successful!")

    except Exception as e:
        print(f"Deployment failed: {e}")
    finally:
        if 'client' in locals() and client:
            client.close()

if __name__ == '__main__':
    # 确保Go应用已编译
    # os.system("GOOS=linux GOARCH=amd64 go build -o myapp ./cmd/myapp")
    deploy_go_app()

[Unit]
Description=My Go Application Service
After=network.target

[Service]
Type=simple
User=youruser             # 运行服务的用户
WorkingDirectory=/opt/myapp # 应用的工作目录
ExecStart=/opt/myapp/myapp # 你的Go应用二进制文件路径
Restart=always            # 崩溃后自动重启
RestartSec=3              # 重启前等待3秒
StandardOutput=syslog     # 将标准输出重定向到系统日志
StandardError=syslog      # 将标准错误重定向到系统日志
SyslogIdentifier=myapp    # 在日志中标识应用名称

[Install]
WantedBy=multi-user.target

{
  "variables": {
    "aws_access_key": "{{env `AWS_ACCESS_KEY_ID`}}",
    "aws_secret_key": "{{env `AWS_SECRET_ACCESS_KEY`}}"
  },
  "builders": [
    {
      "type": "amazon-ebs",
      "access_key": "{{user `aws_access_key`}}",
      "secret_key": "{{user `aws_secret_key`}}",
      "region": "us-east-1",
      "source_ami_filter": {
        "filters": {
          "virtualization-type": "hvm",
          "name": "*ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server*",
          "root-device-type": "ebs"
        },
        "owners": ["099720109477"],
        "most_recent": true
      },
      "instance_type": "t2.micro",
      "ssh_username": "ubuntu",
      "ami_name": "go-app-{{timestamp}}",
      "tags": {
        "Name": "Go-Application-AMI",
        "Version": "{{timestamp}}"
      }
    }
  ],
  "provisioners": [
    {
      "type": "shell",
      "inline": [
        "sudo apt-get update",
        "sudo apt-get install -y git golang-go", # 安装go环境用于编译，或直接上传编译好的二进制
        "sudo mkdir -p /opt/myapp",
        "git clone https://github.com/your/go-app.git /tmp/go-app", # 克隆你的Go应用代码
        "cd /tmp/go-app",
        "GOOS=linux GOARCH=amd64 go build -o myapp ./cmd/myapp", # 编译应用
        "sudo mv myapp /opt/myapp/",
        "sudo cp /tmp/go-app/myapp.service /etc/systemd/system/", # 拷贝systemd服务文件
        "sudo systemctl enable myapp.service" # 启用服务
      ]
    },
    {
      "type": "file",
      "source": "./myapp.service", # 假设myapp.service文件在Packer配置同级目录
      "destination": "/tmp/go-app/myapp.service"
    }
  ]
}