fix: stream deploy source snapshot

.gitea/scripts/deploy-nexus.sh

@@ -4,10 +4,8 @@ set -eu
 DEPLOY_PATH="${DEPLOY_PATH:-/home/projekte_bao/openclaw/data/openclaw/workspace/nexus}"
 ENV_TMPFILE_TEMPLATE="${ENV_TMPFILE:-/tmp/nexus-deploy-env}"
 COMPOSE_SCRIPT_TEMPLATE="${COMPOSE_SCRIPT:-/tmp/nexus-compose-deploy.sh}"
-SOURCE_ARCHIVE_TEMPLATE="${SOURCE_ARCHIVE:-/tmp/nexus-source.tar}"
 ENV_TMPFILE=""
 COMPOSE_SCRIPT=""
-SOURCE_ARCHIVE=""
 BASE_URL="${BASE_URL:-https://nexus.noveria.net}"
 
 cleanup() {
@@ -17,9 +15,6 @@ cleanup() {
   if [ -n "$COMPOSE_SCRIPT" ]; then
     rm -f "$COMPOSE_SCRIPT"
   fi
-  if [ -n "$SOURCE_ARCHIVE" ]; then
-    rm -f "$SOURCE_ARCHIVE"
-  fi
 }
 trap cleanup EXIT INT TERM
 
@@ -45,8 +40,7 @@ secure_tmpfile() {
 
 ENV_TMPFILE="$(secure_tmpfile "$ENV_TMPFILE_TEMPLATE")"
 COMPOSE_SCRIPT="$(secure_tmpfile "$COMPOSE_SCRIPT_TEMPLATE")"
-SOURCE_ARCHIVE="$(secure_tmpfile "$SOURCE_ARCHIVE_TEMPLATE")"
-chmod 600 "$ENV_TMPFILE" "$COMPOSE_SCRIPT" "$SOURCE_ARCHIVE"
+chmod 600 "$ENV_TMPFILE" "$COMPOSE_SCRIPT"
 
 if [ ! -f VERSION ]; then
   echo "VERSION file not found" >&2
@@ -62,8 +56,6 @@ fi
 GIT_REF="$(git rev-parse --short HEAD 2>/dev/null || echo unknown)"
 echo "Deploying Nexus v$VERSION from $GIT_REF"
 
-git archive --format=tar HEAD > "$SOURCE_ARCHIVE"
-
 umask 077
 cat > "$ENV_TMPFILE" <<EOF_ENV
 POSTGRES_DB=nexus
@@ -79,15 +71,14 @@ OPENCLAW_GATEWAY_PASSWORD=
 EOF_ENV
 
 echo "Syncing source to deploy path: $DEPLOY_PATH"
-docker run --rm \
-  -v "$SOURCE_ARCHIVE:/source.tar:ro" \
+git archive --format=tar HEAD | docker run --rm -i \
   -v "$DEPLOY_PATH:/dest" \
   alpine:3.20 \
   sh -c '
     set -eu
     dest_owner="$(stat -c "%u:%g" /dest)"
     mkdir -p /src-snapshot
-    tar -xf /source.tar -C /src-snapshot
+    tar -xf - -C /src-snapshot
 
     is_protected_path() {
       case "$1" in