mirror of
https://pagure.io/fm-orchestrator.git
synced 2026-05-12 02:46:57 +08:00
9c3d9bb441
This change introduces a set of Jenkins pipelines for building MBS images and running integration tests against Koji using those images. These pipelines are directly based on the WaiverDB pipeline work: https://pagure.io/waiverdb/blob/master/f/openshift The results of those tests are used to provide feedback to Pagure PRs and to promote images through a series of environments, which may be used to implement a continuous deployment process. The current test cases, written in Groovy, are: - module-build-init: initate a module build and check that tags and targets in Koji are created correctly - module-build-cgimport: build an empty module and ensure that results are imported correctly into Koji, using the CGImport interface
79 lines
3.2 KiB
Docker
79 lines
3.2 KiB
Docker
# Based on the rad-jenkins image, which is in turn based on:
|
|
# https://github.com/jenkinsci/docker-jnlp-slave/blob/master/Dockerfile
|
|
# https://github.com/jenkinsci/docker-slave/blob/master/Dockerfile
|
|
|
|
FROM fedora:29
|
|
LABEL \
|
|
org.opencontainers.image.title="Jenkins slave for Module Build Service (MBS) pipelines" \
|
|
org.opencontainers.image.description="The MBS coordinates module builds. This image is to serve as the slave for executing build and test pipelines." \
|
|
org.opencontainers.image.vendor="The Factory 2.0 Team" \
|
|
org.opencontainers.image.authors="The Factory 2.0 Team <pnt-factory2-devel@redhat.com>" \
|
|
org.opencontainers.image.licenses="GPLv2+" \
|
|
org.opencontainers.image.url="https://pagure.io/fm-orchestrator" \
|
|
org.opencontainers.image.documentation="https://pagure.io/fm-orchestrator" \
|
|
distribution-scope="private"
|
|
|
|
ARG USER=jenkins
|
|
ARG UID=10000
|
|
ARG HOME_DIR=/var/lib/jenkins
|
|
ARG SLAVE_VERSION=3.29
|
|
ARG TINI_VERSION=0.18.0
|
|
ARG DNF_CMD="dnf -y --setopt=deltarpm=0 --setopt=install_weak_deps=false --setopt=tsflags=nodocs"
|
|
ARG CA_URLS=""
|
|
|
|
# Provide a default HOME location and set some default git user details
|
|
# Set LANG to UTF-8 to support it in stdout/stderr
|
|
ENV HOME=${HOME_DIR} \
|
|
GIT_COMMITTER_NAME="The Factory 2.0 Team" \
|
|
GIT_COMMITTER_EMAIL=pnt-factory2-devel@redhat.com \
|
|
LANG=en_US.UTF-8
|
|
|
|
USER root
|
|
|
|
RUN ${DNF_CMD} install -y \
|
|
java-1.8.0-openjdk nss_wrapper gettext git \
|
|
tar gzip skopeo wget make bind-utils \
|
|
origin-clients \
|
|
# Jenkins pipeline 'sh' steps seem to require ps
|
|
procps-ng \
|
|
# Tools to interface with our test instances
|
|
koji && \
|
|
${DNF_CMD} clean all
|
|
|
|
# CA Certs
|
|
WORKDIR /etc/pki/ca-trust/source/anchors/
|
|
RUN for ca_url in ${CA_URLS}; do curl -skO ${ca_url}; done && \
|
|
update-ca-trust
|
|
|
|
# Setup the user for non-arbitrary UIDs with OpenShift
|
|
# https://docs.openshift.org/latest/creating_images/guidelines.html#openshift-origin-specific-guidelines
|
|
RUN useradd -d ${HOME_DIR} -u ${UID} -g 0 -m -s /bin/bash ${USER} && \
|
|
chmod -R g+rwx ${HOME_DIR}
|
|
|
|
# Make /etc/passwd writable for root group
|
|
# so we can add dynamic user to the system in entrypoint script
|
|
RUN chmod g+rw /etc/passwd
|
|
|
|
# Retrieve jenkins slave client
|
|
RUN curl --create-dirs -sSLo /usr/share/jenkins/slave.jar \
|
|
https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/${SLAVE_VERSION}/remoting-${SLAVE_VERSION}.jar && \
|
|
chmod 755 /usr/share/jenkins && \
|
|
chmod 644 /usr/share/jenkins/slave.jar
|
|
|
|
# Entry point script to run jenkins slave client
|
|
COPY jenkins-slave /usr/local/bin/jenkins-slave
|
|
RUN chmod 755 /usr/local/bin/jenkins-slave
|
|
|
|
# install tini, a tiny but valid init for containers
|
|
# install wait-for-it.sh, to allow containers to wait for other services to come up
|
|
RUN curl -L -o /usr/local/bin/tini "https://github.com/krallin/tini/releases/download/v${TINI_VERSION}/tini" \
|
|
&& chmod +rx /usr/local/bin/tini \
|
|
&& curl -L -o /usr/local/bin/wait-for-it "https://raw.githubusercontent.com/vishnubob/wait-for-it/master/wait-for-it.sh" \
|
|
&& chmod +rx /usr/local/bin/tini /usr/local/bin/wait-for-it \
|
|
&& ${DNF_CMD} clean all
|
|
|
|
# For OpenShift we MUST use the UID of the user and not the name.
|
|
USER ${UID}
|
|
WORKDIR ${HOME_DIR}
|
|
ENTRYPOINT ["/usr/local/bin/tini", "--", "jenkins-slave"]
|