nhyatt/build-containers
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

.

Browse Source
This commit is contained in:
Hyatt 2020-07-17 15:58:56 -05:00
parent 2eebf5d18f
commit eaac90cca7
Signed by: nhyatt
GPG Key ID: C50D0BBB5BC40BEA
1 changed files with 31 additions and 54 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

85
build-doh-server.jenkins
View File

@ -1,66 +1,26 @@
def label = "${UUID.randomUUID().toString()}" def nodeLabel = "${UUID.randomUUID().toString()}"
def kanikoImage = "registry.test-chamber-13.lan:5000/nhyatt/kaniko:latest" def repository = "registry.test-chamber-13.lan:8443"
def kanikoImage = "${repository}/nhyatt/kaniko:latest"
def repositoryCreds = "quay-repository-creds" def repositoryCreds = "quay-repository-creds"
def app_name = "dohserver"
def dockerfile = """
FROM golang:alpine AS BUILDER
RUN apk --no-cache add git upx && \\
go get github.com/m13253/dns-over-https/doh-server && \\
go get -d -v /go/src/github.com/m13253/dns-over-https/doh-server/... && \\
go install -v /go/src/github.com/m13253/dns-over-https/doh-server/... && \\
go build -ldflags="-s -w" -o /go/${app_name} /go/src/github.com/m13253/dns-over-https/doh-server/ && \\
upx --brute /go/${app_name}
FROM alpine:latest
RUN apk add --no-cache ca-certificates && \\
addgroup -S -g 1000 app && \\
adduser -S app -G app -h /app -u 1000 && \\
printf '%s\\n' \\
"-----BEGIN CERTIFICATE-----" \\
"MIICLTCCAbOgAwIBAgIDAYagMAoGCCqGSM49BAMEME0xCzAJBgNVBAYTAlVTMScw" \\
"JQYDVQQKDB5UZXN0IENoYW1iZXIgMTMgVHJ1c3QgU2VydmljZXMxFTATBgNVBAMM" \\
"DFRDMTMgUm9vdCBSMTAgFw0xOTAxMDEwMDAwMDBaGA8yMDUwMDEwMTAwMDAwMFow" \\
"TTELMAkGA1UEBhMCVVMxJzAlBgNVBAoMHlRlc3QgQ2hhbWJlciAxMyBUcnVzdCBT" \\
"ZXJ2aWNlczEVMBMGA1UEAwwMVEMxMyBSb290IFIxMHYwEAYHKoZIzj0CAQYFK4EE" \\
"ACIDYgAE8+/J1ECc0VHxTtGXFLnHJ3NGZ2SW38pp9wI58L5EQbHRLiezYuvkUbI/" \\
"XGJjLnFdpgjo7W1FFlyhx5ITlCstUX5Sn9bLZiA0+mE0n6b8VwhXwkHlnIeRo7od" \\
"Zu/OfSFjo2MwYTAdBgNVHQ4EFgQUrGqUJhyRp93wXF645VNtYatRk/AwHwYDVR0j" \\
"BBgwFoAUrGqUJhyRp93wXF645VNtYatRk/AwDwYDVR0TAQH/BAUwAwEB/zAOBgNV" \\
"HQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwQDaAAwZQIxAJdgskimDJkf/MGVRrKotmNC" \\
"xdH/UVQfQppjIR9FAiGeFDr47thclYrzIL6yCkV7nwIwYjf3MbOm/yWblzqe3Uyw" \\
"UOemMEg3PjcKNsN65W2WVon5HIZx2XVfGRPjf5ZTVWzZ" \\
"-----END CERTIFICATE-----" > /usr/local/share/ca-certificates/test-chamber-13.lan.crt && \\
update-ca-certificates
USER app
WORKDIR /app
COPY --from=BUILDER /go/${app_name} /app/
ENTRYPOINT ./${app_name}
"""
podTemplate( podTemplate(
label: label, name: "pipelineContainer",
name: "pipeline-runner", label: nodeLabel,
yaml: """--- yaml: """---
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata:
name: kaniko
spec: spec:
containers: containers:
- name: kaniko - name: kaniko
imagePullPolicy: Always
image: ${kanikoImage} image: ${kanikoImage}
imagePullPolicy: Always
tty: true tty: true
command: command:
- /busybox/cat - /busybox/cat
""", """) {
) { node (nodeLabel) {
node (label) {
def workspace = pwd()
stage ("Prepare Kaniko") { stage ("Prepare Kaniko") {
container ("kaniko") { container ("kaniko") {
withCredentials([usernameColonPassword( withCredentials([usernameColonPassword(
@ -69,7 +29,7 @@ spec:
)]) { )]) {
def dockerJSON = """{ def dockerJSON = """{
"auths": { "auths": {
"registry.test-chamber-13.lan:5000": { "${repository}": {
"auth": "${dcreds.bytes.encodeBase64().toString()}" "auth": "${dcreds.bytes.encodeBase64().toString()}"
} }
} }
@ -77,7 +37,6 @@ spec:
sh """ sh """
set +x set +x
echo '${dockerJSON}' > /kaniko/.docker/config.json echo '${dockerJSON}' > /kaniko/.docker/config.json
set -x
""" """
} }
} }
@ -85,9 +44,27 @@ spec:
stage('Build Container') { stage('Build Container') {
container('kaniko') { container('kaniko') {
def dockerfile = """FROM golang:alpine AS BUILDER
RUN apk --no-cache add git upx && \\
go get github.com/m13253/dns-over-https/doh-server && \\
go get -d -v /go/src/github.com/m13253/dns-over-https/doh-server/... && \\
go install -v /go/src/github.com/m13253/dns-over-https/doh-server/... && \\
go build -ldflags="-s -w" -o /go/dohserver /go/src/github.com/m13253/dns-over-https/doh-server/ && \\
upx --brute /go/dohserver
FROM ${repository}/nhyatt/alpine:latest
RUN apk add --no-cache && \\
addgroup -S -g 1000 app && \\
adduser -S app -G app -h /app -u 1000
USER app
WORKDIR /app
COPY --from=BUILDER /go/${app_name} /app/
ENTRYPOINT ./${app_name}
"""
writeFile file: workspace + '/Dockerfile', text: dockerfile writeFile file: workspace + '/Dockerfile', text: dockerfile
sh "/kaniko/executor --context \"${workspace}\" -f \"${workspace}/Dockerfile\" --destination \"registry.test-chamber-13.lan:5000/nhyatt/${app_name}:latest\"" sh "/kaniko/executor --context \"${workspace}\" -f \"${workspace}/Dockerfile\" --destination \"${repository}/nhyatt/dohserver:latest\""
} }
} }
} }
} }