docker: chown package dir before container run

[projects/cleanbuild.git] / cleanbuild-docker.sh

#!/bin/sh
set -e

package=$1

test -n "$package" || exit 1

dir=$(pwd)
image=registry.gitlab.com/pld-linux/cleanbuild
name=cleanbuild-$package
topdir=$dir/rpm
home=/home/services/builder
buildsize="4G"

# cleanup first
docker kill $name >/dev/null 2>&1 || :
docker rm $name >/dev/null 2>&1 || :

install -d $topdir/logs

# start the container
docker run --name=$name -d \
	-v $topdir:$home/rpm \
	-v $dir:$home/cleanbuild \
	-v $dir/cache/poldek:/var/cache/poldek \
	-v $dir/cache/ccache/$package:/home/services/builder/.ccache \
	--tmpfs $home/rpm/BUILD:rw,exec,nosuid,size=$buildsize \
	$image

# these paths need to be accessible for builder
docker exec --user=root $name chown builder:builder rpm rpm/logs rpm/BUILD .ccache

if [ ! -d $topdir/rpm-build-tools ]; then
	docker exec $name builder --init-rpm-dir
fi

# fetch sources and install deps
if [ -d $topdir/packages/$package ]; then
	# chown, as it might be different owner (root) modified outside container
	docker exec --user=root $name chown -R builder:builder rpm/packages/$package
fi
docker exec $name builder -g -R $package

# prevent network access like pld builders do
docker exec --user=root $name setfacl -m u:builder:--- /etc/resolv.conf

git_tag=$(GIT_DIR=$topdir/packages/$package/.git git describe --tags --always)
buildlog=rpm/logs/${git_tag#auto/*/}.log

# remove .la dependencies
docker exec --user=root $name cleanbuild/cleanup-la

while true; do
	docker exec $name cleanbuild/teeboth $buildlog builder -nn -bb -R $package --define 'clean exit 0' && rc=$? || rc=$?

	findbr=$package.findbr.log
	builddir=$(docker exec $name sh -c 'test ! -d rpm/BUILD/* || echo rpm/BUILD/*')
	if [ -z "$builddir" ]; then
		echo >&2 "No build dir. Build failed?"
		exit 6
	fi
	# need root to run poldek
	docker exec --user=root $name cleanbuild/findbr $builddir $buildlog > $findbr

	installed_something=false
	while read pkg msg; do
		./addbr rpm/packages/$package/$package.spec "$pkg" "$msg" || continue
		installed_something=true
	done < $findbr
	rm -f $findbr

	# go for another try
	$installed_something && continue

	if [ $rc -eq 0 ]; then
		# finished ok, cleanup
		docker kill $name >/dev/null && docker rm $name >/dev/null || :
	fi

	# propagate error
	exit $rc
done