Laravel を ECS on Fargateにコマンドのみでデプロイ(cloudformation）

2023/09/05 14:48:47 [emerg] 1#1: mkdir() "/var/cache/nginx/client_temp" failed (30: Read-only file system)
nginx: [emerg] mkdir() "/var/cache/nginx/client_temp" failed (30: Read-only file system)

FROM php:8.2-fpm
COPY ./src /application
WORKDIR /application
COPY --from=composer /usr/local/bin/composer /usr/local/bin/composer
RUN apt-get update && apt-get install -y \
        git \
        zip \
        unzip \
+       libicu-dev

+ RUN docker-php-ext-configure pdo_mysql --with-pdo-mysql=mysqlnd
+ RUN docker-php-ext-configure intl
+ RUN docker-php-ext-install pdo_mysql

RUN composer install
RUN php artisan cache:clear \
    && php artisan config:clear \
    && php artisan route:clear \
    && php artisan view:clear
RUN chown -R www-data:www-data storage

version: '3.5'

services:
  nginx:
    image: ${REGISTRY_URL}/${PJPrefix}/nginx:latest
    platform: linux/x86_64
    container_name: ${PJPrefix}-nginx
    volumes:
      - ./docker/nginx/dev/conf.d/default.conf:/etc/nginx/conf.d/default.conf
    ports:
      - 8080:80
    expose:
      - 8080
    depends_on:
      - laravel
    networks:
+      - laravel

  laravel:
    image: ${REGISTRY_URL}/${PJPrefix}/laravel:latest
    platform: linux/x86_64
    container_name: ${PJPrefix}-laravel
+    depends_on:
+      - mysql
+    networks:
+      - laravel
    volumes:
      - ./src:/application
    env_file:
      - ./src/.env
+  mysql:
+    image: mysql:8.0
+    platform: linux/x86_64
+    container_name: ${PJPrefix}-mysql
+    environment:
+      MYSQL_ROOT_PASSWORD: secret
+      MYSQL_DATABASE: laravel
+    ports:
+      - "3306:3306"
+    volumes:
+      - ./storage/mysql-data:/var/lib/mysql:delegated
+    networks:
+      - laravel

+ networks:
+  laravel:
+    name: laravel

# nginxのステータスを確認
service nginx status

# ログ確認
nginx -t

aws ecs describe-services --cluster laravel-template-cluster --services laravel-template-service | grep enableExecuteCommand

brew install jq
bash <( curl -Ls https://raw.githubusercontent.com/aws-containers/amazon-ecs-exec-checker/main/check-ecs-exec.sh ) <YOUR_ECS_CLUSTER_NAME> <YOUR_ECS_TASK_ID>

bash <( curl -Ls https://raw.githubusercontent.com/aws-containers/amazon-ecs-exec-checker/main/check-ecs-exec.sh ) cluster task-arn

aws ecs execute-command \
    --cluster cluster \
    --task task-arn \
    --container nginx \
    --interactive \
    --command 'php artisan migrate --force'

  SQLSTATE[HY000] [2002] Connection timed out 

  DBSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupName: !Sub "${PJPrefix}-DBSecurityGroup"
      GroupDescription: !Sub "${PJPrefix}-DBSecurityGroup-Description"
      VpcId: !Ref VPC
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 3306
          ToPort: 3306
          SourceSecurityGroupId: !Ref SG // ECSのセキュリティーグループ
      Tags:
        - Key: Name
          Value: !Sub "${PJPrefix}-DBSecurityGroup"

  DBSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupName: !Sub "${PJPrefix}-DBSecurityGroup"
      GroupDescription: !Sub "${PJPrefix}-DBSecurityGroup-Description"
      VpcId: !Ref VPC
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 3306
          ToPort: 3306
          CidrIp: 10.0.0.0/16 // <- 同じVPCから接続できるように
      Tags:
        - Key: Name
          Value: !Sub "${PJPrefix}-DBSecurityGroup"