1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
|
#!/bin/sh
set -eu
PROGRAM=${0##*/}
# defaults
: ${PACKAGE_NAME=''}
: ${NETWORKING=false}
: ${TRACING=false}
: ${WITH=}
: ${WITHOUT=}
: ${KEEP_CONTAINER=true}
: ${TMPFS="4G"}
: ${EXEC=false}
dir=$(pwd)
image=registry.gitlab.com/pld-linux/cleanbuild
topdir=$dir/rpm
home=/home/builder
notice() {
echo >&2 "[cleanbuild:notice]: $*"
}
die() {
local rc=${2:-1}
echo >&2 "[cleanbuild:error]: $1"
exit $rc
}
is_no() {
# Test syntax
if [ $# = 0 ]; then
return 2
fi
case "$1" in
no|No|NO|false|False|FALSE|off|Off|OFF|N|n|0)
# true returns zero
return 0
;;
*)
# false returns one
return 1
;;
esac
}
tmpfs() {
if is_no "${TMPFS:-true}" || [ "$TMPFS" = "0" ]; then
return
fi
echo "--tmpfs $home/rpm/BUILD:rw,exec,nosuid,size=$TMPFS"
}
have_container() {
local name="$1" id
id=$(docker ps -a -f "label=cleanbuild=$name" --format '{{.ID}}')
test -n "$id"
}
create_container() {
if ! $KEEP_CONTAINER; then
notice "Clean up old container: $name"
docker kill $name >/dev/null 2>&1 || :
docker rm $name >/dev/null 2>&1 || :
fi
install -d $topdir/logs
# start the container
if ! have_container "$PACKAGE_NAME"; then
TMPFS_SIZE=$TMPFS \
PACKAGE_NAME=$PACKAGE_NAME \
docker-compose run --rm -d \
--name=$name \
--workdir=$home/rpm/packages/$PACKAGE_NAME \
--label=cleanbuild=$PACKAGE_NAME \
cleanbuild
fi
notice "Setup the homedir"
docker exec --user=root -w / $name usermod -d $home builder
notice "Setup permissions"
docker exec --user=root -w / $name sh -c "cd $home && chown builder:builder . rpm rpm/logs rpm/BUILD rpm/RPMS .ccache"
if [ ! -d $topdir/rpm-build-tools ]; then
notice "Initialize rpm-build-tools"
docker exec -w / $name builder --init-rpm-dir
fi
}
enter_container() {
notice "Entering container for $PACKAGE_NAME"
docker exec --user=root -it $name bash
}
package_prepare() {
notice "Fetch sources and install dependencies"
if [ -d $topdir/packages/$PACKAGE_NAME ]; then
# chown, as it might be different owner (root) modified outside container
notice "Fix ownership of existing package directory"
docker exec --user=root -w / $name chown -R builder:builder $home/rpm/packages/$PACKAGE_NAME
fi
notice "Fetch package sources"
docker exec --user=root -w / $name setfacl -x u:builder /etc/resolv.conf
docker exec -w / $name builder -g $PACKAGE_NAME
if ! $NETWORKING; then
notice "Disable networking: Prevent network access for user builder like PLD Linux builders"
docker exec --user=root -w / $name setfacl -m u:builder:--- /etc/resolv.conf
fi
notice "Find latest tag on the branch"
git_tag=$(docker exec -w / -e GIT_DIR=$home/rpm/packages/$PACKAGE_NAME/.git $name git describe --tags --always)
buildlog=rpm/logs/${git_tag#auto/*/}.log
notice "Build log: $buildlog"
}
package_build() {
# create default args for builder
set -- -nn ${WITH:+--with "${WITH# }"} ${WITHOUT:+--without "${WITHOUT# }"} "$PACKAGE_NAME"
while true; do
notice "Install dependencies"
docker exec -w / -t $name builder -g -R "$@"
notice "Remove .la dependencies"
docker exec --user=root -w / $name $home/cleanbuild/bin/cleanup-la
notice "Reset findunusedbr state after deps install"
docker exec --user=root -w / $name $home/cleanbuild/bin/findunusedbr -c / $home/rpm/packages/$PACKAGE_NAME/$PACKAGE_NAME.spec
notice "Build package"
docker exec -w $home $name cleanbuild/bin/teeboth $buildlog builder -bb --define '__spec_clean_body %{nil}' "$@" && rc=$? || rc=$?
# Kill processes on Ctrl+C
if [ "$rc" = 255 ]; then
docker exec -w / $name pkill -e -u builder
die "Aborted" $rc
fi
findbr=$PACKAGE_NAME.findbr.log
builddir=$(docker exec -w $home $name sh -c 'test ! -d rpm/BUILD/* || echo rpm/BUILD/*')
if [ -z "$builddir" ]; then
die "No build dir. Build failed?" 6
fi
notice "Execute findbr"
docker exec --user=root -w / $name sh -c "cd $home && cleanbuild/bin/findbr $builddir $buildlog" > $findbr
installed_something=false
while read pkg msg; do
bin/addbr rpm/packages/$PACKAGE_NAME/$PACKAGE_NAME.spec "$pkg" "$msg" || continue
installed_something=true
done < $findbr
rm -f $findbr
# go for another try
$installed_something && continue
notice "Execute findunusedbr"
docker exec --user=root -w / $name $home/cleanbuild/bin/findunusedbr -c / $home/rpm/packages/$PACKAGE_NAME/$PACKAGE_NAME.spec
if [ $rc -eq 0 ] && ! $KEEP_CONTAINER; then
notice "Finished ok, cleanup container"
docker kill $name >/dev/null && docker rm $name >/dev/null || :
fi
# propagate error
exit $rc
done
}
parse_options() {
local t
t=$(getopt -o 'x' --long 'network,exec,no-tmpfs,notmpfs,tmpfs:,keep-container:,with:,without:' -n "$PROGRAM" -- "$@")
[ $? != 0 ] && exit $?
eval set -- "$t"
while :; do
case "$1" in
-x)
TRACING=true
;;
--network)
NETWORKING=true
;;
--exec)
EXEC=true
;;
--no-tmpfs|--notmpfs)
TMPFS=false
;;
--tmpfs)
shift
TMPFS="$1"
;;
--keep-container)
shift
[ "$1" = "true" -o "$1" = "false" ] || die "Invalid boolean value: $1"
KEEP_CONTAINER=$1
;;
--with)
shift
WITH="$WITH,$1"
;;
--without)
shift
WITHOUT="$WITHOUT,$1"
;;
--)
shift
break
;;
*)
die "Internal error: [$1] not recognized!"
;;
esac
shift
done
test "$#" -eq 1 || die "Package not specified or excess arguments"
PACKAGE_NAME="${1%.spec}"
}
main() {
parse_options "$@"
$TRACING && set -x
local name="cleanbuild-$PACKAGE_NAME"
create_container
if $EXEC; then
enter_container
return
fi
package_prepare
package_build
}
main "$@"
|