aboutsummaryrefslogtreecommitdiff
path: root/contrib/cirrus/packer/libpod_images.yml
blob: 38f5a82505a501297e9d2273bb39c49c2494eaf0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
---

# All of these are required
variables:
    BUILT_IMAGE_SUFFIX: '{{env `BUILT_IMAGE_SUFFIX`}}'
    GOPATH: '{{env `GOPATH`}}'
    GOSRC: '{{env `GOSRC`}}'
    PACKER_BASE: '{{env `PACKER_BASE`}}'
    SCRIPT_BASE: '{{env `SCRIPT_BASE`}}'

    # Base-image names are required.  Using image family-names breaks parallelism
    UBUNTU_BASE_IMAGE: '{{env `UBUNTU_BASE_IMAGE`}}'
    PRIOR_UBUNTU_BASE_IMAGE: '{{env `PRIOR_UBUNTU_BASE_IMAGE`}}'
    FEDORA_BASE_IMAGE: '{{env `FEDORA_BASE_IMAGE`}}'
    PRIOR_FEDORA_BASE_IMAGE: '{{env `PRIOR_FEDORA_BASE_IMAGE`}}'

    # Protected credentials, decrypted by Cirrus at runtime
    GCE_SSH_USERNAME: '{{env `GCE_SSH_USERNAME`}}'
    GCP_PROJECT_ID: '{{env `GCP_PROJECT_ID`}}'
    SERVICE_ACCOUNT: '{{env `SERVICE_ACCOUNT`}}'
    GOOGLE_APPLICATION_CREDENTIALS: '{{env `GOOGLE_APPLICATION_CREDENTIALS`}}'

# Don't leak sensitive values in error messages / output
sensitive-variables:
    - 'GCE_SSH_USERNAME'
    - 'GCP_PROJECT_ID'
    - 'SERVICE_ACCOUNT'

# What images to produce in which cloud
builders:
    #  v----- is a YAML anchor, allows referencing this object by name (below)
    - &gce_hosted_image
      name: 'ubuntu-20'
      type: 'googlecompute'
      image_name: '{{build_name}}{{user `BUILT_IMAGE_SUFFIX`}}'
      image_family: '{{build_name}}-cache'
      source_image: '{{user `UBUNTU_BASE_IMAGE`}}'  # precedence over family
      source_image_family: 'ubuntu-base'  # for ref. only
      disk_size: 20  # REQUIRED: Runtime allocation > this value
      project_id: '{{user `GCP_PROJECT_ID`}}'
      service_account_email: '{{user `SERVICE_ACCOUNT`}}'
      communicator: 'ssh'
      ssh_username: '{{user `GCE_SSH_USERNAME`}}'
      ssh_pty: 'true'
      # The only supported zone in Cirrus-CI, as of addition of this comment
      zone: 'us-central1-a'

    #      v----- is a YAML alias, allows partial re-use of the anchor object
    - <<: *gce_hosted_image
      name: 'ubuntu-19'
      source_image: '{{user `PRIOR_UBUNTU_BASE_IMAGE`}}'
      source_image_family: 'prior-ubuntu-base'

    - <<: *gce_hosted_image
      name: 'fedora-32'
      source_image: '{{user `FEDORA_BASE_IMAGE`}}'
      source_image_family: 'fedora-base'

    - <<: *gce_hosted_image
      name: 'fedora-31'
      source_image: '{{user `PRIOR_FEDORA_BASE_IMAGE`}}'
      source_image_family: 'prior-fedora-base'

# The brains of the operation, making actual modifications to the base-image.
provisioners:
    - type: 'shell'
      inline:
        - 'set -ex'
        # The 'file' provisioner item (below) will create the final component
        - 'mkdir -vp $(dirname {{user `GOSRC`}})'

    - type: 'file'
      source: '{{user `GOSRC`}}'
      destination: '{{user `GOSRC`}}'

    - type: 'shell'
      script: '{{user `GOSRC`}}/{{user `PACKER_BASE`}}/{{split build_name "-" 0}}_setup.sh'
      environment_vars:
          - 'PACKER_BUILDER_NAME={{build_name}}'
          - 'GOPATH={{user `GOPATH`}}'
          - 'GOSRC={{user `GOSRC`}}'
          - 'PACKER_BASE={{user `PACKER_BASE`}}'
          - 'SCRIPT_BASE={{user `SCRIPT_BASE`}}'

post-processors:
    - type: 'manifest'  # writes packer-manifest.json