arcana-devops-skill

name: arcana-devops-skill description: Unified CI/CD infrastructure skill — Jenkins multibranch pipeline templates for 15 languages (Java/Node/Python/Rust/Go/.NET/mobile/HarmonyOS/ESP32/STM32 and more) with JCasC, private Docker registry (arcana.boo), SonarQube + Architecture Qube quality gates, Nexus, and Prometheus/Grafana/Loki monitoring. Covers Docker-first builds, multi-environment deploy (Compose + SSH / K8s), Fastlane store submission, DR backup, and IEC 62304 compliance automation. skill_name: arcana-devops-skill skill_version: 1.1.0 created_date: 2026-02-11 skill_type: complex protocols: - COR - AFP - NTP allowed_tools: - Read - Write - Edit - Bash - Glob - Grep - AskUserQuestion dependencies: - app-requirements-skill - arcana-springboot-developer-skill - arcana-nodejs-developer-skill - arcana-python-developer-skill - arcana-ios-developer-skill - arcana-android-developer-skill - arcana-react-developer-skill - arcana-angular-developer-skill - arcana-windows-developer-skill

DevOps Skill

COR-AFP-NTP Compliant DevOps Automation Skill

Unified CI/CD infrastructure for multi-language tech stacks with Docker-first approach.

Purpose

Guides users from zero to a complete DevOps environment covering:

• Jenkins CI/CD — Docker-based pipeline automation
• Docker Build — Multi-stage optimized builds for all supported languages
• Multi-Environment Deploy — Docker Compose + SSH (primary) / K8s (optional) / Cloud / On-Premise
• App Store/Play Store — Automated submission via Fastlane
• SonarQube Quality Gate — Code quality enforcement
• IEC 62304 Compliance — Automated documentation output
• Monitoring — Prometheus + Grafana + AlertManager

Quick Start

User: /arcana-devops-skill
User: 幫我建立 CI/CD 環境
User: 設定 Docker 部署
User: 建立 Jenkins Pipeline

Activation Keywords

• devops, CI/CD, pipeline, Jenkins, Docker 部署
• K8s 部署, Kubernetes, 容器化, 容器部署
• 自動部署, 自動建構, 自動送審, Fastlane
• SonarQube, 品質門檻, Trivy, image scan
• Prometheus, Grafana, 監控, 可觀測性
• Docker Compose, docker-compose, Dockerfile
• /arcana-devops-skill, /devops

Quick Reference Card

Common Commands

Port Reference

Private Docker Registry (Bluesea)

• Domain: arcana.boo (DNS → 161.118.206.170)
• TLS: Let's Encrypt (auto-renew via certbot), nginx reverse proxy → registry:2 on localhost:5000
• Container: registry:2 with registry-data volume on /data (99GB)
• Namespace: arcana/ (e.g., arcana/go-app, arcana/react-app)
• API: curl https://arcana.boo/v2/_catalog

HTTPS registry 不需要 insecure-registries 設定。Rocky 9 需設定 SELinux: setsebool -P httpd_can_network_connect 1

Oracle Cloud Networking

Oracle Cloud 有兩層獨立防火牆，port 80/443 需在兩層都開放：

1. Security Group — add_port CLI 或 Console
2. Subnet Security List — OCI CLI 或 Console（容易遺漏）

Jenkins Agent Infrastructure

Mac Mini Agent 設定

Pipeline 選擇：iOS/macOS pipeline 使用 agent { label "macos" }，其餘使用 agent any（Built-in Node）

Docker Image Naming

{registry}/{namespace}/{service}:{version}
arcana.boo/arcana/api:1.2.3

Rules Priority

🔴 Critical (MUST Follow)

🟡 Important (SHOULD Follow)

🟢 Recommended (NICE to Have)

COR Process Flow

┌──────────────────────────────────────────────────────────────────────────┐
│                                                                          │
│  00-init → 01-infra → 02-pipeline → 03-build → 04-test                  │
│                                                       ↓                  │
│            08-verify ← 07-monitor ← 06-release ← 05-deploy              │
│                                                                          │
└──────────────────────────────────────────────────────────────────────────┘

Node Summary

Supported Language Matrix

Deployment Strategy Matrix

重要：正式環境預設使用 Docker Compose + SSH Remote Deploy，K8s 為選用方案

Production Deploy Flow (Docker Compose + SSH)

Jenkins Build → Docker Push to arcana.boo (version-pinned, HTTPS)
  → SSH to Target VM → Save rollback state
  → Pull new image from registry → docker compose up -d
  → Health Check (60s timeout) → Pass: Done / Fail: Auto-rollback

See: templates/jenkins/Jenkinsfile.cloud, templates/scripts/deploy.sh

AFP State Management

Workspace Location

{project-root}/.devops/current-process.json

State Schema

{
  "session_id": "uuid",
  "current_node": "00-init",
  "project_name": "",
  "project_type": [],
  "deploy_targets": [],
  "started_at": "ISO8601",
  "updated_at": "ISO8601",
  "completed_nodes": [],
  "node_outputs": {},
  "metadata": {
    "skill_version": "1.1.0",
    "protocol": "COR-AFP-NTP"
  }
}

NTP Gate Validation

Each node must pass exit validation before proceeding:

bash ~/.claude/skills/arcana-devops-skill/process/00-init/exit-validation.sh {project-root}

File Index

Core Files

Process Nodes

Templates

Production-Tested Status (15/15 pipelines SUCCESS)

All templates below are derived from production configs that ran successfully on Rocky VM (ARM64). See: references/production-validation.md for full validation records.

References

Checklists

Frameworks

Integration with Other Skills

Troubleshooting