## 新增功能 ### 1. 屏幕阅读器兼容性增强(a11y) - 无障碍工具库:src/shared/lib/a11y.ts - aria-live Hook:src/shared/hooks/use-aria-live.ts - a11y 组件:skip-link/visually-hidden/focus-trap/aria-status - 增强 UI:table.tsx 系统性 ARIA role,dialog.tsx aria-modal - 审计文档:docs/accessibility/a11y-audit.md(WCAG 2.1 AA 清单) ### 2. 视觉回归测试 - 测试套件:tests/visual/(homepage + 3 个 dashboard) - 3 视口(desktop/tablet/mobile)× 2 主题(light/dark) - 动态元素遮罩,避免误报 - playwright.config.ts 新增 visual-chromium 项目 - 文档:docs/testing/visual-regression.md ### 3. 短信/微信推送渠道集成 - 新模块:src/modules/notifications/ - 4 个渠道:SMS(阿里云/腾讯云)、WeChat(公众号)、Email(SMTP)、In-App - 分发器按用户偏好并行多渠道发送 - 外部 SDK 动态 import,Mock 模式开发可用 - 文档:docs/notifications/channels.md ### 4. 漏洞扫描 CI 集成 - CI security-scan job:npm audit + Snyk + Trivy FS + OWASP ZAP - 独立工作流 security.yml:每周一深度扫描 + 容器镜像扫描 - 配置:suppressions.json + .trivyignore - 本地脚本:security-scan.sh/ps1 - 文档:docs/security/scanning.md(SLA 分级) ### 5. 灾备方案 - 脚本:backup-verify/backup-offsite-sync/dr-drill/failover/health-check - CI 增强:备份后校验+异地同步,每周灾备演练 - 独立工作流 dr-drill.yml:每周一凌晨 4 点自动演练 - 文档:docs/dr/dr-plan.md(RTO 4h/RPO 24h)+ dr-runbook.md(6 故障场景) ## 验证 - npx tsc --noEmit:0 错误 - npm run lint:0 错误 0 警告
254 lines
8.5 KiB
Bash
254 lines
8.5 KiB
Bash
#!/bin/bash
|
|
# 健康检查脚本
|
|
# 用法: ./health-check.sh
|
|
# 检查应用、数据库、磁盘空间、备份新鲜度,输出 JSON 报告
|
|
|
|
set -u
|
|
|
|
show_help() {
|
|
cat <<EOF
|
|
用法: $0 [选项]
|
|
系统健康检查脚本,输出 JSON 格式报告
|
|
|
|
选项:
|
|
--app-url URL 应用健康检查 URL(默认 http://localhost:8015)
|
|
--no-app 跳过应用健康检查
|
|
--no-db 跳过数据库检查
|
|
--no-disk 跳过磁盘空间检查
|
|
--no-backup 跳过备份新鲜度检查
|
|
--disk-threshold PCT 磁盘空间阈值百分比(默认 90)
|
|
--backup-max-age HRS 备份最大年龄(小时,默认 24)
|
|
--help, -h 显示帮助信息
|
|
|
|
环境变量:
|
|
DATABASE_URL 数据库连接 URL
|
|
HEALTH_CHECK_URL 应用健康检查 URL(默认 http://localhost:8015)
|
|
BACKUP_DIR 备份目录(默认 ./backups)
|
|
HEALTH_CHECK_DISK_THRESHOLD 磁盘阈值(默认 90)
|
|
HEALTH_CHECK_BACKUP_MAX_AGE 备份最大年龄(小时,默认 24)
|
|
|
|
退出码:
|
|
0 健康
|
|
1 异常
|
|
EOF
|
|
}
|
|
|
|
# 解析参数
|
|
CHECK_APP=1
|
|
CHECK_DB=1
|
|
CHECK_DISK=1
|
|
CHECK_BACKUP=1
|
|
APP_URL=""
|
|
DISK_THRESHOLD=""
|
|
BACKUP_MAX_AGE=""
|
|
|
|
while [ $# -gt 0 ]; do
|
|
case "$1" in
|
|
--help|-h)
|
|
show_help
|
|
exit 0
|
|
;;
|
|
--app-url)
|
|
if [ $# -lt 2 ]; then
|
|
echo "ERROR: --app-url requires an argument" >&2
|
|
exit 1
|
|
fi
|
|
APP_URL="$2"
|
|
shift 2
|
|
;;
|
|
--no-app) CHECK_APP=0; shift ;;
|
|
--no-db) CHECK_DB=0; shift ;;
|
|
--no-disk) CHECK_DISK=0; shift ;;
|
|
--no-backup) CHECK_BACKUP=0; shift ;;
|
|
--disk-threshold)
|
|
if [ $# -lt 2 ]; then
|
|
echo "ERROR: --disk-threshold requires an argument" >&2
|
|
exit 1
|
|
fi
|
|
DISK_THRESHOLD="$2"
|
|
shift 2
|
|
;;
|
|
--backup-max-age)
|
|
if [ $# -lt 2 ]; then
|
|
echo "ERROR: --backup-max-age requires an argument" >&2
|
|
exit 1
|
|
fi
|
|
BACKUP_MAX_AGE="$2"
|
|
shift 2
|
|
;;
|
|
*)
|
|
echo "ERROR: Unknown argument: $1" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
# 配置
|
|
APP_URL="${APP_URL:-${HEALTH_CHECK_URL:-http://localhost:8015}}"
|
|
BACKUP_DIR="${BACKUP_DIR:-./backups}"
|
|
DISK_THRESHOLD="${DISK_THRESHOLD:-${HEALTH_CHECK_DISK_THRESHOLD:-90}}"
|
|
BACKUP_MAX_AGE="${BACKUP_MAX_AGE:-${HEALTH_CHECK_BACKUP_MAX_AGE:-24}}"
|
|
DATABASE_URL="${DATABASE_URL:-}"
|
|
|
|
# JSON 输出辅助函数
|
|
json_escape() {
|
|
echo "$1" | sed -e 's/\\/\\\\/g' -e 's/"/\\"/g' -e 's/\t/\\t/g'
|
|
}
|
|
|
|
# 检查结果数组
|
|
RESULTS=""
|
|
OVERALL_STATUS="healthy"
|
|
CHECKS_PASSED=0
|
|
CHECKS_FAILED=0
|
|
CHECKS_WARNED=0
|
|
|
|
add_result() {
|
|
local name="$1"
|
|
local status="$2"
|
|
local message="$3"
|
|
local detail="${4:-}"
|
|
|
|
local escaped_message escaped_detail
|
|
escaped_message=$(json_escape "$message")
|
|
escaped_detail=$(json_escape "$detail")
|
|
|
|
local result_entry
|
|
result_entry=" {\"name\": \"$name\", \"status\": \"$status\", \"message\": \"$escaped_message\""
|
|
if [ -n "$detail" ]; then
|
|
result_entry="$result_entry, \"detail\": \"$escaped_detail\""
|
|
fi
|
|
result_entry="$result_entry }"
|
|
|
|
if [ -z "$RESULTS" ]; then
|
|
RESULTS="$result_entry"
|
|
else
|
|
RESULTS="$RESULTS,
|
|
$result_entry"
|
|
fi
|
|
|
|
case "$status" in
|
|
pass) CHECKS_PASSED=$((CHECKS_PASSED + 1)) ;;
|
|
fail) CHECKS_FAILED=$((CHECKS_FAILED + 1)); OVERALL_STATUS="unhealthy" ;;
|
|
warn) CHECKS_WARNED=$((CHECKS_WARNED + 1)); [ "$OVERALL_STATUS" = "healthy" ] && OVERALL_STATUS="degraded" ;;
|
|
esac
|
|
}
|
|
|
|
# 1. 应用健康检查
|
|
if [ "$CHECK_APP" -eq 1 ]; then
|
|
if command -v curl >/dev/null 2>&1; then
|
|
HTTP_CODE=$(curl -sf -o /dev/null -w "%{http_code}" -m 10 "$APP_URL" 2>/dev/null || echo "000")
|
|
if [ "$HTTP_CODE" = "200" ] || [ "$HTTP_CODE" = "302" ]; then
|
|
add_result "app" "pass" "Application is healthy" "HTTP $HTTP_CODE from $APP_URL"
|
|
elif [ "$HTTP_CODE" = "000" ]; then
|
|
add_result "app" "fail" "Application is not reachable" "Cannot connect to $APP_URL"
|
|
else
|
|
add_result "app" "fail" "Application returned error" "HTTP $HTTP_CODE from $APP_URL"
|
|
fi
|
|
else
|
|
add_result "app" "warn" "curl not available, skipping app check" ""
|
|
fi
|
|
fi
|
|
|
|
# 2. 数据库连接检查
|
|
if [ "$CHECK_DB" -eq 1 ]; then
|
|
if [ -z "$DATABASE_URL" ]; then
|
|
add_result "database" "warn" "DATABASE_URL not set, skipping DB check" ""
|
|
else
|
|
# 解析 DATABASE_URL
|
|
DB_USER=$(echo "$DATABASE_URL" | sed -n 's/.*:\/\/\([^:]*\):.*/\1/p')
|
|
DB_PASS=$(echo "$DATABASE_URL" | sed -n 's/.*:\/\/[^:]*:\([^@]*\)@.*/\1/p')
|
|
DB_HOST=$(echo "$DATABASE_URL" | sed -n 's/.*@\([^:]*\):.*/\1/p')
|
|
DB_PORT=$(echo "$DATABASE_URL" | sed -n 's/.*:\([0-9]*\)\/.*/\1/p')
|
|
DB_NAME=$(echo "$DATABASE_URL" | sed -n 's/.*\/\([^?]*\).*/\1/p')
|
|
|
|
if command -v mysql >/dev/null 2>&1; then
|
|
if mysql -h "$DB_HOST" -P "$DB_PORT" -u "$DB_USER" -p"$DB_PASS" \
|
|
-e "SELECT 1;" 2>/dev/null; then
|
|
# 获取连接信息
|
|
DB_VERSION=$(mysql -h "$DB_HOST" -P "$DB_PORT" -u "$DB_USER" -p"$DB_PASS" \
|
|
-e "SELECT VERSION();" -s -N 2>/dev/null || echo "unknown")
|
|
add_result "database" "pass" "Database connection successful" "Host: $DB_HOST:$DB_PORT, DB: $DB_NAME, Version: $DB_VERSION"
|
|
else
|
|
add_result "database" "fail" "Database connection failed" "Cannot connect to $DB_HOST:$DB_PORT/$DB_NAME"
|
|
fi
|
|
else
|
|
add_result "database" "warn" "mysql client not available, skipping DB check" ""
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
# 3. 磁盘空间检查
|
|
if [ "$CHECK_DISK" -eq 1 ]; then
|
|
# 获取根分区或当前目录所在分区的使用率
|
|
DISK_INFO=$(df -h . 2>/dev/null | tail -1)
|
|
if [ -n "$DISK_INFO" ]; then
|
|
DISK_USE_PCT=$(echo "$DISK_INFO" | awk '{print $5}' | sed 's/%//')
|
|
DISK_USE_HUMAN=$(echo "$DISK_INFO" | awk '{print $3}')
|
|
DISK_TOTAL_HUMAN=$(echo "$DISK_INFO" | awk '{print $2}')
|
|
DISK_AVAIL_HUMAN=$(echo "$DISK_INFO" | awk '{print $4}')
|
|
DISK_MOUNT=$(echo "$DISK_INFO" | awk '{print $6}')
|
|
|
|
if [ "$DISK_USE_PCT" -ge "$DISK_THRESHOLD" ]; then
|
|
add_result "disk" "fail" "Disk space critical" "Usage: ${DISK_USE_PCT}% (threshold: ${DISK_THRESHOLD}%), Used: ${DISK_USE_HUMAN}/${DISK_TOTAL_HUMAN}, Available: ${DISK_AVAIL_HUMAN}, Mount: ${DISK_MOUNT}"
|
|
elif [ "$DISK_USE_PCT" -ge $((DISK_THRESHOLD - 10)) ]; then
|
|
add_result "disk" "warn" "Disk space warning" "Usage: ${DISK_USE_PCT}% (threshold: ${DISK_THRESHOLD}%), Used: ${DISK_USE_HUMAN}/${DISK_TOTAL_HUMAN}, Available: ${DISK_AVAIL_HUMAN}, Mount: ${DISK_MOUNT}"
|
|
else
|
|
add_result "disk" "pass" "Disk space OK" "Usage: ${DISK_USE_PCT}%, Used: ${DISK_USE_HUMAN}/${DISK_TOTAL_HUMAN}, Available: ${DISK_AVAIL_HUMAN}, Mount: ${DISK_MOUNT}"
|
|
fi
|
|
else
|
|
add_result "disk" "warn" "Could not determine disk usage" ""
|
|
fi
|
|
fi
|
|
|
|
# 4. 备份新鲜度检查
|
|
if [ "$CHECK_BACKUP" -eq 1 ]; then
|
|
if [ -d "$BACKUP_DIR" ]; then
|
|
LATEST_BACKUP=$(ls -t "$BACKUP_DIR"/db_backup_*.sql.gz 2>/dev/null | head -1)
|
|
if [ -n "$LATEST_BACKUP" ]; then
|
|
# 获取备份文件修改时间(秒)
|
|
BACKUP_MTIME=$(stat -c%Y "$LATEST_BACKUP" 2>/dev/null || stat -f%m "$LATEST_BACKUP" 2>/dev/null)
|
|
CURRENT_TIME=$(date +%s)
|
|
BACKUP_AGE_HOURS=$(( (CURRENT_TIME - BACKUP_MTIME) / 3600 ))
|
|
|
|
BACKUP_SIZE=$(stat -c%s "$LATEST_BACKUP" 2>/dev/null || stat -f%z "$LATEST_BACKUP" 2>/dev/null)
|
|
BACKUP_SIZE_HUMAN=$(echo "$BACKUP_SIZE" | awk '{split("B KB MB GB TB",v);i=1;while($1>=1024&&i<5){$1/=1024;i++};printf "%.1f%s",$1,v[i]}')
|
|
|
|
if [ "$BACKUP_AGE_HOURS" -gt "$BACKUP_MAX_AGE" ]; then
|
|
add_result "backup" "fail" "Backup is stale" "Latest backup is ${BACKUP_AGE_HOURS}h old (max: ${BACKUP_MAX_AGE}h), File: $(basename "$LATEST_BACKUP"), Size: $BACKUP_SIZE_HUMAN"
|
|
elif [ "$BACKUP_AGE_HOURS" -gt $((BACKUP_MAX_AGE / 2)) ]; then
|
|
add_result "backup" "warn" "Backup getting old" "Latest backup is ${BACKUP_AGE_HOURS}h old (max: ${BACKUP_MAX_AGE}h), File: $(basename "$LATEST_BACKUP"), Size: $BACKUP_SIZE_HUMAN"
|
|
else
|
|
add_result "backup" "pass" "Backup is fresh" "Latest backup is ${BACKUP_AGE_HOURS}h old, File: $(basename "$LATEST_BACKUP"), Size: $BACKUP_SIZE_HUMAN"
|
|
fi
|
|
else
|
|
add_result "backup" "fail" "No backup files found" "No db_backup_*.sql.gz files in $BACKUP_DIR"
|
|
fi
|
|
else
|
|
add_result "backup" "warn" "Backup directory does not exist" "$BACKUP_DIR"
|
|
fi
|
|
fi
|
|
|
|
# 输出 JSON 报告
|
|
TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
|
|
|
|
cat <<EOF
|
|
{
|
|
"timestamp": "$TIMESTAMP",
|
|
"status": "$OVERALL_STATUS",
|
|
"summary": {
|
|
"total": $((CHECKS_PASSED + CHECKS_FAILED + CHECKS_WARNED)),
|
|
"passed": $CHECKS_PASSED,
|
|
"failed": $CHECKS_FAILED,
|
|
"warned": $CHECKS_WARNED
|
|
},
|
|
"checks": [
|
|
$RESULTS
|
|
]
|
|
}
|
|
EOF
|
|
|
|
if [ "$OVERALL_STATUS" = "unhealthy" ]; then
|
|
exit 1
|
|
fi
|
|
exit 0
|