Parallel deployment to haskell.org hosting

Also deploy the site to haskell.org hosting, as a preliminary step towards migration.

Author: david-christiansen

.github/workflows/deploy2.yml

@@ -0,0 +1,61 @@
+on:
+  push:
+    branches:
+      - main
+      - test-deploy # This is to be deleted once it works
+
+permissions:
+  contents: write
+
+jobs:
+
+  build-and-test:
+    name: Build site
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Install GHC 9.2.5
+      run: ghcup install ghc 9.2.5
+
+    - name: Select GHC 9.2.5
+      run: ghcup set ghc 9.2.5
+
+    - name: Check out repo
+      uses: actions/checkout@v3
+      
+    - name: Read the Cabal cache
+      uses: actions/cache@v3
+      with:
+        path: |
+          ~/.cabal/store
+          message-index/dist-newstyle
+        key: cabal-cache-0-${{ hashFiles('message-index/message-index.cabal') }}
+        restore-keys: |
+          cabal-cache-0
+
+    - name: Update the Cabal index
+      run: cabal update
+
+    - name: Check if site.hs is formatted using ormolu
+      uses: mrkkrp/ormolu-action@v6
+      with:
+        pattern: |
+          **/site.hs
+
+    - name: Build with Hakyll
+      working-directory: message-index
+      run: cabal run site build
+
+    - name: Deploy
+      shell: bash
+      env:
+        # Create the secret with:
+        #
+        # Settings -> Secrets -> New Repository Secret ->
+        #
+        #   Name: ERRORS_HASKELL_ORG_SSH_KEY
+        #   Value: The text of the ssh private key
+        ERRORS_HASKELL_ORG_SSH_KEY: ${{ secrets.ERRORS_HASKELL_ORG_SSH_KEY }}
+      run: |
+        sudo apt-get install -y lftp
+        ./deploy.sh --DEPLOY-IT-LIVE

deploy.sh

@@ -0,0 +1,26 @@
+#!/bin/sh
+
+# TODO: make this with tempfile
+KEYFILE=$(mktemp keyXXXXXXXX)
+
+echo "${ERRORS_HASKELL_ORG_SSH_KEY}" > "$KEYFILE"
+chmod 600 "$KEYFILE"
+
+if [ "$1" = --DEPLOY-IT-LIVE ]; then
+    DESTINATION=errors
+else
+    DESTINATION=errors-test
+fi
+
+# This can go away once we're hosted entirely on haskell.org infra by
+# renaming the file.  GH pages wants it to be called 404.html, while
+# h.o wants it to be called 404-page.html.
+cp ./message-index/_site/404.html ./message-index/_site/404-page.html
+
+# WARNING: --delete is dangerous.  Be absolutely sure you are
+# deploying to the correct directory.  Existing contents of the
+# destination directory will be removed.
+#
+# Permissions: We have to recursively set write permissions because
+# lftp isn't able to remove a file if its directory is not writeable.
+lftp --norc -c "set net:max-retries 1; set sftp:connect-program \"ssh -o StrictHostKeyChecking=no -a -x -i $KEYFILE\"; open -u error-index, sftp://webhost.haskell.org; chmod --recursive u+w $DESTINATION; mirror  --verbose --reverse --transfer-all ./message-index/_site $DESTINATION"