68 lines
2.5 KiB
Bash
Executable File
68 lines
2.5 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
BUILD_SCRIPT="$1"
|
|
shift
|
|
|
|
# this will be 0 if podman, or 1 if docker
|
|
PODMAN_NOT_DOCKER="$1"
|
|
shift
|
|
|
|
[ "" == "$BUILD_SCRIPT" ] && [ -f '.ci/build.sh' ] && BUILD_SCRIPT='.ci/build.sh'
|
|
|
|
if [ "" == "$PODMAN_NOT_DOCKER" ]
|
|
then
|
|
# if it's not set, we are going to prefer podman
|
|
which podman >/dev/null 2>/dev/null
|
|
PODMAN_NOT_DOCKER=$?
|
|
fi
|
|
|
|
set -euxo pipefail
|
|
|
|
# this assists in cleanup, ie if a job was terminated, to be run in a jenkins finally {} or similar
|
|
if [ "$BUILD_SCRIPT" == "docker-chown" ]
|
|
then
|
|
if [ $PODMAN_NOT_DOCKER -eq 0 ]
|
|
then
|
|
# we don't have to do anything here
|
|
exit 0
|
|
else
|
|
# chown everything in this directory to this uid/gid
|
|
docker run --rm -v "$(pwd)":/tmp alpine chown -R "$UID:$(id -g)" /tmp
|
|
exit $?
|
|
fi
|
|
fi
|
|
|
|
docker_build() {
|
|
export ARCH="$1"
|
|
shift
|
|
DOCKER_IMAGE="$1"
|
|
shift
|
|
|
|
if [ $PODMAN_NOT_DOCKER -eq 0 ]
|
|
then
|
|
# just run it and don't chown
|
|
podman run --rm -e ARCH -e BRANCH_NAME -v "$(pwd)":/tmp -w /tmp "$DOCKER_IMAGE" sh -c "umask a=rwx; \"\$@\"" -- "$@"
|
|
else
|
|
# run it, but after, chown anything left in /tmp to *this* uid/gid, otherwise we can't delete them later...
|
|
docker run --rm -e ARCH -e BRANCH_NAME -e BUILD_UID="$UID" -e BUILD_GID="$(id -g)" -v "$(pwd)":/tmp -w /tmp "$DOCKER_IMAGE" sh -c "umask a=rwx; \"\$@\"; exit=\$?; chown -R '$UID:$(id -g)' /tmp; exit \$exit" -- "$@"
|
|
fi
|
|
}
|
|
|
|
docker_build 'amd64' 'docker.io/alpine' "$BUILD_SCRIPT" "$@"
|
|
|
|
# before first multiarch image, must register binfmt handlers, for rootless podman we require sudo
|
|
if [ $PODMAN_NOT_DOCKER -eq 0 ]
|
|
then
|
|
# to securely enable this run `visudo` and add this where `jenkins` is your user:
|
|
# jenkins ALL=(ALL:ALL) NOPASSWD: /usr/bin/podman run --rm --privileged docker.io/multiarch/qemu-user-static\:register --reset
|
|
sudo podman run --rm --privileged docker.io/multiarch/qemu-user-static:register --reset
|
|
else
|
|
docker run --rm --privileged docker.io/multiarch/qemu-user-static:register --reset
|
|
fi
|
|
|
|
docker_build 'i386' 'docker.io/multiarch/alpine:i386-latest-stable' "$BUILD_SCRIPT" "$@"
|
|
docker_build 'aarch64' 'docker.io/multiarch/alpine:aarch64-latest-stable' "$BUILD_SCRIPT" "$@"
|
|
docker_build 'armv7' 'docker.io/multiarch/alpine:armv7-latest-stable' "$BUILD_SCRIPT" "$@"
|
|
docker_build 'armhf' 'docker.io/multiarch/alpine:armhf-latest-stable' "$BUILD_SCRIPT" "$@"
|
|
docker_build 'ppc64le' 'docker.io/multiarch/alpine:ppc64le-latest-stable' "$BUILD_SCRIPT" "$@"
|