-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Ryan Northey <[email protected]>
- Loading branch information
Showing
6 changed files
with
174 additions
and
7 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -34,6 +34,30 @@ create_excludes () { | |
| fi | ||
| } | ||
|
|
||
| generate_private_key () { | ||
| echo -e "$(underline $(bold "Import maintainers private key (apt): repository signing"))" | ||
| gpg --batch --pinentry-mode loopback --passphrase "" --gen-key <<EOF | ||
| %echo Generating a basic OpenPGP key | ||
| Key-Type: 1 | ||
| Key-Length: 4096 | ||
| Subkey-Type: 1 | ||
| Subkey-Length: 4096 | ||
| Name-Real: Envoy CI | ||
| Name-Email: [email protected] | ||
| Expire-Date: 0 | ||
| %commit | ||
| %echo done | ||
| EOF | ||
| } | ||
|
|
||
| if [[ -e /opt/build/cache/repository ]]; then | ||
| rm -rf /opt/build/cache/repository/v1.28.3 | ||
| ls /opt/build/cache/repository | (grep -E '^v[0-9]+\.[0-9]+\.[0-9]+' || echo '') | sort -u > debs/custom-excludes.txt | ||
| else | ||
| touch debs/custom-excludes.txt | ||
| fi | ||
|
|
||
| import_public_key | ||
| generate_private_key | ||
| create_excludes | ||
| bazel run --config=debs-ci //debs:publish | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -13,6 +13,9 @@ publish_root () { | |
| | jq -r '.FileSystemPublishEndpoints.public.rootDir' | ||
| } | ||
|
|
||
| REPOS=(focal jammy bullseye bookworm) | ||
| declare -A REPO_PACKAGES | ||
|
|
||
| create_dirs () { | ||
| PUBLIC_DIR="$(publish_root)" | ||
| mkdir -p "${PUBLIC_DIR}" | ||
|
|
@@ -23,17 +26,86 @@ unpack_debs () { | |
| tar xf "$DEBS" -C "$DEBS_ROOT" | ||
| } | ||
|
|
||
| create_repos () { | ||
| "$APTLY_BIN" -config=${PWD}/.aptly config show | ||
| existing_repos=$("${APTLY[@]}" repo list -json | jq -r '.[] | .Name') | ||
|
|
||
| for repo in "${REPOS[@]}"; do | ||
| if ! echo "$existing_repos" | tr ' ' '\n' | grep -q "^${repo}$"; then | ||
| echo "Create repo: ${repo}" | ||
| "${APTLY[@]}" repo create "$repo" | ||
| fi | ||
| done | ||
| } | ||
|
|
||
| IMPORTED=() | ||
|
|
||
| list_packages () { | ||
| for repo in "${REPOS[@]}"; do | ||
| # echo "Packages: ${repo}" | ||
| packages=$("${APTLY[@]}" repo search "$repo" || echo "" | tr '\n' ' ') | ||
| REPO_PACKAGES[$repo]=$packages | ||
| done | ||
|
|
||
| for key in "${!REPO_PACKAGES[@]}"; do | ||
| # Get the serialized string from the associative array | ||
| serialized_values="${REPO_PACKAGES[$key]}" | ||
|
|
||
| # Convert the serialized string back into an array | ||
| IFS=' ' read -r -a array <<< "$serialized_values" | ||
|
|
||
| # Print the key | ||
| # echo "Key: $key" | ||
|
|
||
| # Iterate over the elements of the array | ||
| for element in "${array[@]}"; do | ||
| filename="${element}.${key}.changes" | ||
| IMPORTED+=("$filename") | ||
| # echo "EXISTING: $filename" | ||
| done | ||
| done | ||
| IMPORTED=$(printf "%s\n" "${IMPORTED[@]}") | ||
| # echo $IMPORTED | ||
| } | ||
|
|
||
| FAILED=() | ||
| SUCCESS=() | ||
|
|
||
| include_debs () { | ||
| mapfile -t changes_files < <(find /opt/build/cache/repository -name "*.changes") | ||
| for file in "${changes_files[@]}"; do | ||
| filename=$(basename $file) | ||
| if echo $IMPORTED | tr ' ' '\n' | grep -q "^${filename}$"; then | ||
| # echo "SKIP: ${filename}" | ||
| continue | ||
| fi | ||
| "${APTLY[@]}" -no-remove-files repo include $file | ||
| done | ||
| } | ||
|
|
||
| publish_repository () { | ||
| PUBLIC_DIR="$(publish_root)" | ||
| KEY_URL="${DEPLOY_PRIME_URL}/envoy-maintainer-public.key" | ||
| cat "$MAINTAINER_KEY" > "${PUBLIC_DIR}/envoy-maintainer-public.key" | ||
| echo "<h1>COMING SOON: ${DEPLOY_PRIME_URL}</h1>" > "${PUBLIC_DIR}/index.html" | ||
| echo "<div>Signing key: <a href=\"${KEY_URL}\">${KEY_URL}</div>" >> "${PUBLIC_DIR}/index.html" | ||
| KEY_ID=$(gpg --list-secret-keys --keyid-format LONG "[email protected]" | grep 'sec' | awk '{print $2}' | cut -d'/' -f2) | ||
| echo "COMING SOON: ${DEPLOY_PRIME_URL}" > "${PUBLIC_DIR}/index.html" | ||
| for repo in "${REPOS[@]}"; do | ||
| "${APTLY[@]}" publish drop "${repo}" "filesystem:public:" | ||
| "${APTLY[@]}" publish repo -gpg-key="${KEY_ID}" -distribution "${repo}" "${repo}" "filesystem:public:" | ||
| done | ||
| } | ||
|
|
||
| publish () { | ||
| create_dirs | ||
| unpack_debs | ||
| create_repos | ||
| list_packages | ||
| rm -rf /opt/build/cache/repository/v1.28.3 | ||
| unpack_debs | ||
| include_debs | ||
| # list_packages | ||
| publish_repository | ||
| } | ||
|
|
||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,11 @@ | ||
| load("@rules_proto//proto:setup.bzl", "rules_proto_setup") | ||
| load("@rules_python//python:repositories.bzl", "py_repositories") | ||
| # load("@envoy//bazel:api_binding.bzl", "envoy_api_binding") | ||
| # load("@envoy//bazel:repositories.bzl", "envoy_build_config") | ||
|
|
||
|
|
||
| def setup(): | ||
| py_repositories() | ||
| rules_proto_setup() | ||
| # envoy_api_binding() | ||
| # envoy_build_config(name = "envoy_build_config") |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| load("@envoy_toolshed//tarball:macros.bzl", "unpacker") | ||
|
|
||
| licenses(["notice"]) # Apache 2 | ||
|
|
||
| unpacker( | ||
| name = "unpack", | ||
| ) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters