2022-04-06 16:52:31 +02:00
|
|
|
module build
|
2022-02-17 22:00:46 +01:00
|
|
|
|
|
|
|
import docker
|
2022-02-20 20:26:39 +01:00
|
|
|
import encoding.base64
|
2022-02-20 21:09:06 +01:00
|
|
|
import time
|
2022-04-07 14:40:49 +02:00
|
|
|
import os
|
2022-05-03 16:16:56 +02:00
|
|
|
import db
|
2022-05-07 16:10:27 +02:00
|
|
|
import client
|
2022-02-20 20:26:39 +01:00
|
|
|
|
|
|
|
const container_build_dir = '/build'
|
2022-02-25 21:54:16 +01:00
|
|
|
|
2022-02-25 20:52:30 +01:00
|
|
|
const build_image_repo = 'vieter-build'
|
2022-02-20 20:26:39 +01:00
|
|
|
|
2022-04-30 20:22:03 +02:00
|
|
|
// create_build_image creates a builder image given some base image which can
|
|
|
|
// then be used to build & package Arch images. It mostly just updates the
|
|
|
|
// system, install some necessary packages & creates a non-root user to run
|
|
|
|
// makepkg with. The base image should be some Linux distribution that uses
|
|
|
|
// Pacman as its package manager.
|
2022-04-30 17:56:35 +02:00
|
|
|
pub fn create_build_image(base_image string) ?string {
|
2022-02-25 20:52:30 +01:00
|
|
|
commands := [
|
2022-02-20 20:26:39 +01:00
|
|
|
// Update repos & install required packages
|
|
|
|
'pacman -Syu --needed --noconfirm base-devel git'
|
|
|
|
// Add a non-root user to run makepkg
|
2022-02-20 22:15:10 +01:00
|
|
|
'groupadd -g 1000 builder',
|
2022-02-20 20:26:39 +01:00
|
|
|
'useradd -mg builder builder'
|
|
|
|
// Make sure they can use sudo without a password
|
|
|
|
"echo 'builder ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers"
|
|
|
|
// Create the directory for the builds & make it writeable for the
|
|
|
|
// build user
|
2022-02-20 22:15:10 +01:00
|
|
|
'mkdir /build',
|
|
|
|
'chown -R builder:builder /build',
|
2022-02-20 20:26:39 +01:00
|
|
|
]
|
|
|
|
cmds_str := base64.encode_str(commands.join('\n'))
|
|
|
|
|
|
|
|
c := docker.NewContainer{
|
2022-04-08 13:22:29 +02:00
|
|
|
image: base_image
|
2022-02-25 20:52:30 +01:00
|
|
|
env: ['BUILD_SCRIPT=$cmds_str']
|
2022-02-20 20:26:39 +01:00
|
|
|
entrypoint: ['/bin/sh', '-c']
|
|
|
|
cmd: ['echo \$BUILD_SCRIPT | base64 -d | /bin/sh -e']
|
|
|
|
}
|
|
|
|
|
2022-04-08 13:22:29 +02:00
|
|
|
// This check is needed so the user can pass "archlinux" without passing a
|
|
|
|
// tag & make it still work
|
|
|
|
image_parts := base_image.split_nth(':', 2)
|
|
|
|
image_name := image_parts[0]
|
|
|
|
image_tag := if image_parts.len > 1 { image_parts[1] } else { 'latest' }
|
|
|
|
|
|
|
|
// We pull the provided image
|
|
|
|
docker.pull_image(image_name, image_tag) ?
|
2022-02-20 21:09:06 +01:00
|
|
|
|
|
|
|
id := docker.create_container(c) ?
|
|
|
|
docker.start_container(id) ?
|
|
|
|
|
|
|
|
// This loop waits until the container has stopped, so we can remove it after
|
|
|
|
for {
|
|
|
|
data := docker.inspect_container(id) ?
|
|
|
|
|
|
|
|
if !data.state.running {
|
|
|
|
break
|
|
|
|
}
|
|
|
|
|
2022-04-30 17:56:35 +02:00
|
|
|
time.sleep(1 * time.second)
|
2022-02-20 21:09:06 +01:00
|
|
|
}
|
|
|
|
|
2022-02-25 20:52:30 +01:00
|
|
|
// Finally, we create the image from the container
|
|
|
|
// As the tag, we use the epoch value
|
2022-04-30 17:56:35 +02:00
|
|
|
// TODO also add the base image's name into the image name to prevent
|
|
|
|
// conflicts.
|
2022-02-25 20:52:30 +01:00
|
|
|
tag := time.sys_mono_now().str()
|
|
|
|
image := docker.create_image_from_container(id, 'vieter-build', tag) ?
|
2022-02-20 21:09:06 +01:00
|
|
|
docker.remove_container(id) ?
|
2022-02-25 20:52:30 +01:00
|
|
|
|
|
|
|
return image.id
|
|
|
|
}
|
|
|
|
|
2022-05-08 15:07:54 +02:00
|
|
|
pub struct BuildResult {
|
|
|
|
pub:
|
2022-05-08 13:17:54 +02:00
|
|
|
start_time time.Time
|
2022-05-08 14:53:35 +02:00
|
|
|
end_time time.Time
|
|
|
|
exit_code int
|
|
|
|
logs string
|
2022-05-08 13:17:54 +02:00
|
|
|
}
|
|
|
|
|
2022-04-30 20:22:03 +02:00
|
|
|
// build_repo builds, packages & publishes a given Arch package based on the
|
|
|
|
// provided GitRepo. The base image ID should be of an image previously created
|
2022-05-08 13:17:54 +02:00
|
|
|
// by create_build_image. It returns the logs of the container.
|
|
|
|
pub fn build_repo(address string, api_key string, base_image_id string, repo &db.GitRepo) ?BuildResult {
|
2022-04-30 17:56:35 +02:00
|
|
|
build_arch := os.uname().machine
|
|
|
|
|
|
|
|
// TODO what to do with PKGBUILDs that build multiple packages?
|
|
|
|
commands := [
|
|
|
|
'git clone --single-branch --depth 1 --branch $repo.branch $repo.url repo',
|
|
|
|
'cd repo',
|
|
|
|
'makepkg --nobuild --nodeps',
|
|
|
|
'source PKGBUILD',
|
|
|
|
// The build container checks whether the package is already
|
|
|
|
// present on the server
|
2022-05-08 14:53:35 +02:00
|
|
|
'curl -s --head --fail $address/$repo.repo/$build_arch/\$pkgname-\$pkgver-\$pkgrel && exit 0',
|
2022-04-30 17:56:35 +02:00
|
|
|
'MAKEFLAGS="-j\$(nproc)" makepkg -s --noconfirm --needed && for pkg in \$(ls -1 *.pkg*); do curl -XPOST -T "\$pkg" -H "X-API-KEY: \$API_KEY" $address/$repo.repo/publish; done',
|
|
|
|
]
|
|
|
|
|
|
|
|
// We convert the list of commands into a base64 string, which then gets
|
|
|
|
// passed to the container as an env var
|
|
|
|
cmds_str := base64.encode_str(commands.join('\n'))
|
|
|
|
|
|
|
|
c := docker.NewContainer{
|
|
|
|
image: '$base_image_id'
|
|
|
|
env: ['BUILD_SCRIPT=$cmds_str', 'API_KEY=$api_key']
|
|
|
|
entrypoint: ['/bin/sh', '-c']
|
|
|
|
cmd: ['echo \$BUILD_SCRIPT | base64 -d | /bin/bash -e']
|
|
|
|
work_dir: '/build'
|
|
|
|
user: 'builder:builder'
|
|
|
|
}
|
|
|
|
|
|
|
|
id := docker.create_container(c) ?
|
|
|
|
docker.start_container(id) ?
|
|
|
|
|
2022-05-08 13:17:54 +02:00
|
|
|
mut data := docker.inspect_container(id) ?
|
|
|
|
|
2022-04-30 17:56:35 +02:00
|
|
|
// This loop waits until the container has stopped, so we can remove it after
|
2022-05-09 15:05:53 +02:00
|
|
|
for data.state.running {
|
2022-04-30 17:56:35 +02:00
|
|
|
time.sleep(1 * time.second)
|
2022-05-08 13:17:54 +02:00
|
|
|
|
|
|
|
data = docker.inspect_container(id) ?
|
2022-04-30 17:56:35 +02:00
|
|
|
}
|
|
|
|
|
2022-05-08 13:17:54 +02:00
|
|
|
logs := docker.get_container_logs(id) ?
|
|
|
|
|
2022-04-30 17:56:35 +02:00
|
|
|
docker.remove_container(id) ?
|
2022-05-08 13:17:54 +02:00
|
|
|
|
|
|
|
return BuildResult{
|
|
|
|
start_time: data.state.start_time
|
|
|
|
end_time: data.state.end_time
|
|
|
|
exit_code: data.state.exit_code
|
|
|
|
logs: logs
|
|
|
|
}
|
2022-04-30 17:56:35 +02:00
|
|
|
}
|
|
|
|
|
2022-04-30 20:22:03 +02:00
|
|
|
// build builds every Git repo in the server's list.
|
2022-05-08 13:17:54 +02:00
|
|
|
fn build(conf Config, repo_id int) ? {
|
|
|
|
c := client.new(conf.address, conf.api_key)
|
|
|
|
repo := c.get_git_repo(repo_id) ?
|
2022-02-25 20:52:30 +01:00
|
|
|
|
2022-05-08 13:17:54 +02:00
|
|
|
build_arch := os.uname().machine
|
2022-02-25 20:52:30 +01:00
|
|
|
|
2022-05-08 13:17:54 +02:00
|
|
|
println('Creating base image...')
|
2022-04-08 13:22:29 +02:00
|
|
|
image_id := create_build_image(conf.base_image) ?
|
2022-02-25 20:52:30 +01:00
|
|
|
|
2022-05-08 13:17:54 +02:00
|
|
|
println('Running build...')
|
|
|
|
res := build_repo(conf.address, conf.api_key, image_id, repo) ?
|
2022-02-25 20:52:30 +01:00
|
|
|
|
2022-05-08 13:17:54 +02:00
|
|
|
println('Removing build image...')
|
2022-02-25 20:52:30 +01:00
|
|
|
docker.remove_image(image_id) ?
|
2022-05-08 13:17:54 +02:00
|
|
|
|
|
|
|
println('Uploading logs to Vieter...')
|
2022-05-08 14:53:35 +02:00
|
|
|
c.add_build_log(repo.id, res.start_time, res.end_time, build_arch, res.exit_code,
|
|
|
|
res.logs) ?
|
2022-02-17 22:00:46 +01:00
|
|
|
}
|