mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-09-20 16:27:52 +00:00
packaging: merge packaging repository
git-subtree-dir: tools/packaging git-subtree-mainline:f818b46a41git-subtree-split:1f22d72d5dSigned-off-by: Peng Tao <bergwolf@hyper.sh>
This commit is contained in:
Peng Tao
17
tools/packaging/scripts/README.md
Normal file
17
tools/packaging/scripts/README.md
Normal file
@@ -0,0 +1,17 @@
|
||||
# Packaging scripts
|
||||
|
||||
This directory contains useful packaging scripts.
|
||||
|
||||
## `configure-hypervisor.sh`
|
||||
|
||||
This script generates the official set of QEMU-based hypervisor build
|
||||
configuration options. All repositories that need to build a hypervisor
|
||||
from source **MUST** use this script to ensure the hypervisor is built
|
||||
in a known way since using a different set of options can impact many
|
||||
areas including performance, memory footprint and security.
|
||||
|
||||
Example usage:
|
||||
|
||||
```
|
||||
$ configure-hypervisor.sh qemu
|
||||
```
|
||||
573
tools/packaging/scripts/configure-hypervisor.sh
Executable file
573
tools/packaging/scripts/configure-hypervisor.sh
Executable file
@@ -0,0 +1,573 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# Copyright (c) 2018 Intel Corporation
|
||||
#
|
||||
# SPDX-License-Identifier: Apache-2.0
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# Description: This script is the *ONLY* place where "qemu*" build options
|
||||
# should be defined.
|
||||
#
|
||||
# Note to maintainers:
|
||||
#
|
||||
# XXX: Every option group *MUST* be documented explaining why it has
|
||||
# been specified.
|
||||
#---------------------------------------------------------------------
|
||||
|
||||
script_name=${0##*/}
|
||||
|
||||
arch="${3:-$(uname -m)}"
|
||||
|
||||
|
||||
# Array of configure options.
|
||||
#
|
||||
# Each element is comprised of two parts in the form:
|
||||
#
|
||||
# tags:option
|
||||
#
|
||||
# Where,
|
||||
#
|
||||
# - 'tags' is a comma-separated list of values which denote why
|
||||
# the option is being specified.
|
||||
#
|
||||
# - 'option' is the hypervisor configuration option.
|
||||
typeset -a qemu_options
|
||||
|
||||
typeset -A recognised_tags
|
||||
|
||||
# Prefix were kata will be installed
|
||||
prefix=${PREFIX:-/usr}
|
||||
|
||||
recognised_tags=(
|
||||
[arch]="architecture-specific"
|
||||
[functionality]="required functionality"
|
||||
[minimal]="specified to avoid building unnecessary elements"
|
||||
[misc]="miscellaneous"
|
||||
[security]="specified for security reasons"
|
||||
[size]="minimise binary size"
|
||||
[speed]="maximise startup speed"
|
||||
)
|
||||
|
||||
# Display message to stderr and exit indicating script failed.
|
||||
die() {
|
||||
local msg="$*"
|
||||
echo >&2 "$script_name: ERROR: $msg"
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Display usage to stdout.
|
||||
usage() {
|
||||
cat <<EOT
|
||||
Overview:
|
||||
|
||||
Display configure options required to build the specified
|
||||
hypervisor.
|
||||
|
||||
Usage:
|
||||
|
||||
$script_name [options] <hypervisor-name>
|
||||
|
||||
Options:
|
||||
|
||||
-d : Dump all options along with the tags explaining why each option
|
||||
is specified.
|
||||
-h : Display this help.
|
||||
-m : Display options one per line (includes continuation characters).
|
||||
-s : Generate options to build static
|
||||
|
||||
Example:
|
||||
|
||||
$ $script_name qemu
|
||||
|
||||
EOT
|
||||
}
|
||||
|
||||
show_tags_header() {
|
||||
local keys
|
||||
local key
|
||||
local value
|
||||
|
||||
cat <<EOT
|
||||
# Recognised option tags:
|
||||
#
|
||||
EOT
|
||||
|
||||
# sort the tags
|
||||
keys=${!recognised_tags[@]}
|
||||
keys=$(echo "$keys" | tr ' ' '\n' | sort -u)
|
||||
|
||||
for key in $keys; do
|
||||
value="${recognised_tags[$key]}"
|
||||
printf "# %s\t%s.\n" "$key" "$value"
|
||||
done
|
||||
|
||||
printf "#\n\n"
|
||||
}
|
||||
|
||||
check_tag() {
|
||||
local tag="$1"
|
||||
local entry="$2"
|
||||
|
||||
[ -z "$tag" ] && die "no tag for entry '$entry'"
|
||||
[ -z "$entry" ] && die "no entry for tag '$tag'"
|
||||
|
||||
value="${recognised_tags[$tag]}"
|
||||
|
||||
# each tag MUST have a description
|
||||
[ -n "$value" ] && return
|
||||
|
||||
die "invalid tag '$tag' found for entry '$entry'"
|
||||
}
|
||||
|
||||
check_tags() {
|
||||
local tags="$1"
|
||||
local entry="$2"
|
||||
|
||||
[ -z "$tags" ] && die "entry '$entry' doesn't have any tags"
|
||||
[ -z "$entry" ] && die "no entry for tags '$tags'"
|
||||
|
||||
tags=$(echo "$tags" | tr ',' '\n')
|
||||
|
||||
for tag in $tags; do
|
||||
check_tag "$tag" "$entry"
|
||||
done
|
||||
}
|
||||
|
||||
# Display an array to stdout.
|
||||
#
|
||||
# If 2 arguments are specified, split array across multiple lines,
|
||||
# one per element with a backslash at the end of all lines except
|
||||
# the last.
|
||||
#
|
||||
# Arguments:
|
||||
#
|
||||
# $1: *Name* of array variable (no leading '$'!!)
|
||||
# $2: (optional) "multi" - show values across multiple lines,
|
||||
# "dump" - show full hash values. Any other value results in the
|
||||
# options being displayed on a single line.
|
||||
show_array() {
|
||||
local action="$1"
|
||||
local _array=("$@")
|
||||
_array=("${_array[@]:1}")
|
||||
|
||||
local -i size="${#_array[*]}"
|
||||
local -i i=1
|
||||
local entry
|
||||
local tags
|
||||
local elem
|
||||
local suffix
|
||||
local one_line="no"
|
||||
|
||||
[ "$action" = "dump" ] && show_tags_header
|
||||
|
||||
for entry in "${_array[@]}"; do
|
||||
[ -z "$entry" ] && die "found empty entry"
|
||||
|
||||
tags=$(echo "$entry" | cut -s -d: -f1)
|
||||
elem=$(echo "$entry" | cut -s -d: -f2-)
|
||||
|
||||
[ -z "$elem" ] && die "no option for entry '$entry'"
|
||||
|
||||
check_tags "$tags" "$entry"
|
||||
|
||||
if [ "$action" = "dump" ]; then
|
||||
printf "%s\t\t%s\n" "$tags" "$elem"
|
||||
elif [ "$action" = "multi" ]; then
|
||||
if [ $i -eq $size ]; then
|
||||
suffix=""
|
||||
else
|
||||
suffix=' \'
|
||||
fi
|
||||
|
||||
printf '%s%s\n' "$elem" "$suffix"
|
||||
else
|
||||
one_line="yes"
|
||||
echo -n "$elem "
|
||||
fi
|
||||
|
||||
i+=1
|
||||
done
|
||||
|
||||
[ "$one_line" = yes ] && echo
|
||||
}
|
||||
|
||||
generate_qemu_options() {
|
||||
#---------------------------------------------------------------------
|
||||
#check if cross-compile is needed
|
||||
host=$(uname -m)
|
||||
if [ $arch != $host ];then
|
||||
case $arch in
|
||||
aarch64) qemu_options+=(size:--cross-prefix=aarch64-linux-gnu-);;
|
||||
ppc64le) qemu_options+=(size:--cross-prefix=powerpc64le-linux-gnu-);;
|
||||
s390x) exit;;
|
||||
x86_64);;
|
||||
*) exit;;
|
||||
esac
|
||||
fi
|
||||
|
||||
# Disabled options
|
||||
|
||||
if [ "${qemu_version_major}" -ge 5 ]; then
|
||||
# Disable sheepdog block driver support
|
||||
qemu_options+=(size:--disable-sheepdog)
|
||||
|
||||
# Disable block migration in the main migration stream
|
||||
qemu_options+=(size:--disable-live-block-migration)
|
||||
else
|
||||
# Starting from QEMU 5.0, the bluetooth code has been removed without replacement.
|
||||
# bluetooth support not required
|
||||
qemu_options+=(size:--disable-bluez)
|
||||
fi
|
||||
|
||||
# braille support not required
|
||||
qemu_options+=(size:--disable-brlapi)
|
||||
|
||||
# Don't build documentation
|
||||
qemu_options+=(minimal:--disable-docs)
|
||||
|
||||
# Disable GUI (graphics)
|
||||
qemu_options+=(size:--disable-curses)
|
||||
qemu_options+=(size:--disable-gtk)
|
||||
qemu_options+=(size:--disable-opengl)
|
||||
qemu_options+=(size:--disable-sdl)
|
||||
qemu_options+=(size:--disable-spice)
|
||||
qemu_options+=(size:--disable-vte)
|
||||
|
||||
# Disable graphical network access
|
||||
qemu_options+=(size:--disable-vnc)
|
||||
qemu_options+=(size:--disable-vnc-jpeg)
|
||||
qemu_options+=(size:--disable-vnc-png)
|
||||
qemu_options+=(size:--disable-vnc-sasl)
|
||||
|
||||
# Disable PAM authentication: it's a feature used together with VNC access
|
||||
# that's not used. See QEMU commit 8953caf for more details
|
||||
[ "${qemu_version_major}" -ge 4 ] && qemu_options+=(size:--disable-auth-pam)
|
||||
|
||||
# Disable unused filesystem support
|
||||
[ "$arch" == x86_64 ] && qemu_options+=(size:--disable-fdt)
|
||||
qemu_options+=(size:--disable-glusterfs)
|
||||
qemu_options+=(size:--disable-libiscsi)
|
||||
qemu_options+=(size:--disable-libnfs)
|
||||
|
||||
# Starting from QEMU 4.1, libssh replaces to libssh2
|
||||
if [ "$(echo "${qemu_version_major}.${qemu_version_minor} >= 4.1" | bc)" == "1" ]; then
|
||||
qemu_options+=(size:--disable-libssh)
|
||||
else
|
||||
qemu_options+=(size:--disable-libssh2)
|
||||
fi
|
||||
|
||||
# Disable unused compression support
|
||||
qemu_options+=(size:--disable-bzip2)
|
||||
qemu_options+=(size:--disable-lzo)
|
||||
qemu_options+=(size:--disable-snappy)
|
||||
|
||||
# Disable unused security options
|
||||
qemu_options+=(security:--disable-seccomp)
|
||||
qemu_options+=(security:--disable-tpm)
|
||||
|
||||
# Disable userspace network access ("-net user")
|
||||
qemu_options+=(size:--disable-slirp)
|
||||
|
||||
# Disable USB
|
||||
qemu_options+=(size:--disable-libusb)
|
||||
qemu_options+=(size:--disable-usb-redir)
|
||||
|
||||
# Disable TCG support
|
||||
case "$arch" in
|
||||
aarch64)
|
||||
echo $hypervisor | grep -q nemu && qemu_options+=(size:--disable-tcg)
|
||||
;;
|
||||
x86_64) qemu_options+=(size:--disable-tcg) ;;
|
||||
ppc64le) ;;
|
||||
s390x) qemu_options+=(size:--disable-tcg) ;;
|
||||
esac
|
||||
|
||||
# SECURITY: Don't build a static binary (lowers security)
|
||||
# needed if qemu version is less than 2.7
|
||||
if [ "${qemu_version_major}" -eq 2 ] && [ "${qemu_version_minor}" -lt 7 ]; then
|
||||
qemu_options+=(security:--disable-static)
|
||||
fi
|
||||
|
||||
if [ "${static}" == "true" ]; then
|
||||
qemu_options+=(misc:--static)
|
||||
fi
|
||||
|
||||
# Disable debug is always passed to the qemu binary so not required.
|
||||
case "$arch" in
|
||||
aarch64)
|
||||
;;
|
||||
x86_64)
|
||||
qemu_options+=(size:--disable-debug-tcg)
|
||||
qemu_options+=(size:--disable-tcg-interpreter)
|
||||
;;
|
||||
ppc64le)
|
||||
qemu_options+=(size:--disable-debug-tcg)
|
||||
qemu_options+=(size:--disable-tcg-interpreter)
|
||||
;;
|
||||
s390x)
|
||||
qemu_options+=(size:--disable-debug-tcg)
|
||||
qemu_options+=(size:--disable-tcg-interpreter)
|
||||
;;
|
||||
esac
|
||||
qemu_options+=(size:--disable-qom-cast-debug)
|
||||
qemu_options+=(size:--disable-tcmalloc)
|
||||
|
||||
# Disallow network downloads
|
||||
qemu_options+=(security:--disable-curl)
|
||||
|
||||
# Disable Remote Direct Memory Access (Live Migration)
|
||||
# https://wiki.qemu.org/index.php/Features/RDMALiveMigration
|
||||
qemu_options+=(size:--disable-rdma)
|
||||
|
||||
# Don't build the qemu-io, qemu-nbd and qemu-image tools
|
||||
qemu_options+=(size:--disable-tools)
|
||||
|
||||
# Don't build linux-user bsd-user
|
||||
qemu_options+=(size:--disable-bsd-user)
|
||||
qemu_options+=(size:--disable-linux-user)
|
||||
|
||||
# Don't build sparse check tool
|
||||
qemu_options+=(size:--disable-sparse)
|
||||
|
||||
# Don't build VDE networking backend
|
||||
qemu_options+=(size:--disable-vde)
|
||||
|
||||
# Don't build other options which can't be depent on build server.
|
||||
qemu_options+=(size:--disable-xfsctl)
|
||||
qemu_options+=(size:--disable-libxml2)
|
||||
qemu_options+=(size:--disable-nettle)
|
||||
|
||||
# Disable XEN driver
|
||||
qemu_options+=(size:--disable-xen)
|
||||
|
||||
# FIXME: why is this disabled?
|
||||
# (for reference, it's explicitly enabled in Ubuntu 17.10 and
|
||||
# implicitly enabled in Fedora 27).
|
||||
qemu_options+=(size:--disable-linux-aio)
|
||||
|
||||
# Disable Capstone
|
||||
qemu_options+=(size:--disable-capstone)
|
||||
|
||||
if [[ "${qemu_version_major}" -ge 3 ]]; then
|
||||
# Disable graphics
|
||||
qemu_options+=(size:--disable-virglrenderer)
|
||||
|
||||
# Due to qemu commit 3ebb9c4f52, we can't disable replication in v3.0
|
||||
if [[ "${qemu_version_major}" -ge 4 || ( "${qemu_version_major}" -eq 3 && "${qemu_version_minor}" -ge 1 ) ]]; then
|
||||
# Disable block replication
|
||||
qemu_options+=(size:--disable-replication)
|
||||
fi
|
||||
|
||||
# Disable USB smart card reader
|
||||
qemu_options+=(size:--disable-smartcard)
|
||||
|
||||
# Disable guest agent
|
||||
qemu_options+=(size:--disable-guest-agent)
|
||||
qemu_options+=(size:--disable-guest-agent-msi)
|
||||
|
||||
# unused image formats
|
||||
qemu_options+=(size:--disable-vvfat)
|
||||
qemu_options+=(size:--disable-vdi)
|
||||
qemu_options+=(size:--disable-qed)
|
||||
qemu_options+=(size:--disable-qcow1)
|
||||
qemu_options+=(size:--disable-bochs)
|
||||
qemu_options+=(size:--disable-cloop)
|
||||
qemu_options+=(size:--disable-dmg)
|
||||
qemu_options+=(size:--disable-parallels)
|
||||
qemu_options+=(size:--disable-vxhs)
|
||||
fi
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# Enabled options
|
||||
|
||||
# Enable kernel Virtual Machine support.
|
||||
# This is the default, but be explicit to avoid any future surprises
|
||||
qemu_options+=(speed:--enable-kvm)
|
||||
|
||||
# Required for fast network access
|
||||
qemu_options+=(speed:--enable-vhost-net)
|
||||
|
||||
# Always strip binaries
|
||||
# needed if qemu version is less than 2.7
|
||||
if [ "${qemu_version_major}" -eq 2 ] && [ "${qemu_version_minor}" -lt 7 ]; then
|
||||
qemu_options+=(size:--enable-strip)
|
||||
fi
|
||||
|
||||
# Support Ceph RADOS Block Device (RBD)
|
||||
[ -z "${static}" ] && qemu_options+=(functionality:--enable-rbd)
|
||||
|
||||
# In "passthrough" security mode
|
||||
# (-fsdev "...,security_model=passthrough,..."), qemu uses a helper
|
||||
# application called virtfs-proxy-helper(1) to make certain 9p
|
||||
# operations safer.
|
||||
qemu_options+=(functionality:--enable-virtfs)
|
||||
qemu_options+=(functionality:--enable-attr)
|
||||
qemu_options+=(functionality:--enable-cap-ng)
|
||||
|
||||
if [[ "${qemu_version_major}" -ge 4 || ( "${qemu_version_major}" -eq 3 && "${qemu_version_minor}" -ge 1 ) ]]; then
|
||||
# AVX2 is enabled by default by x86_64, make sure it's enabled only
|
||||
# for that architecture
|
||||
if [ "$arch" == x86_64 ]; then
|
||||
qemu_options+=(speed:--enable-avx2)
|
||||
if [ "${qemu_version_major}" -ge 5 ]; then
|
||||
qemu_options+=(speed:--enable-avx512f)
|
||||
fi
|
||||
# According to QEMU's nvdimm documentation: When 'pmem' is 'on' and QEMU is
|
||||
# built with libpmem support, QEMU will take necessary operations to guarantee
|
||||
# the persistence of its own writes to the vNVDIMM backend.
|
||||
qemu_options+=(functionality:--enable-libpmem)
|
||||
else
|
||||
qemu_options+=(speed:--disable-avx2)
|
||||
qemu_options+=(functionality:--disable-libpmem)
|
||||
fi
|
||||
# Enable libc malloc_trim() for memory optimization.
|
||||
qemu_options+=(speed:--enable-malloc-trim)
|
||||
fi
|
||||
|
||||
#---------------------------------------------------------------------
|
||||
# Other options
|
||||
|
||||
# 64-bit only
|
||||
if [ "${arch}" = "ppc64le" ]; then
|
||||
qemu_options+=(arch:"--target-list=ppc64-softmmu")
|
||||
else
|
||||
qemu_options+=(arch:"--target-list=${arch}-softmmu")
|
||||
fi
|
||||
|
||||
# aarch64 need to explictly set --enable-pie
|
||||
if [ -z "${static}" ] && [ "${arch}" = "aarch64" ]; then
|
||||
qemu_options+=(arch:"--enable-pie")
|
||||
fi
|
||||
|
||||
_qemu_cflags=""
|
||||
|
||||
# compile with high level of optimisation
|
||||
_qemu_cflags+=" -O3"
|
||||
|
||||
# Improve code quality by assuming identical semantics for interposed
|
||||
# synmbols.
|
||||
# Only enable if gcc is 5.3 or newer
|
||||
if [ "${gcc_version_major}" -ge 5 ] && [ "${gcc_version_minor}" -ge 3 ]; then
|
||||
_qemu_cflags+=" -fno-semantic-interposition"
|
||||
fi
|
||||
|
||||
# Performance optimisation
|
||||
_qemu_cflags+=" -falign-functions=32"
|
||||
|
||||
# SECURITY: make the compiler check for common security issues
|
||||
# (such as argument and buffer overflows checks).
|
||||
_qemu_cflags+=" -D_FORTIFY_SOURCE=2"
|
||||
|
||||
# SECURITY: Create binary as a Position Independant Executable,
|
||||
# and take advantage of ASLR, making ROP attacks much harder to perform.
|
||||
# (https://wiki.debian.org/Hardening)
|
||||
case "$arch" in
|
||||
aarch64) _qemu_cflags+=" -fPIE" ;;
|
||||
x86_64) _qemu_cflags+=" -fPIE" ;;
|
||||
ppc64le) _qemu_cflags+=" -fPIE" ;;
|
||||
s390x) _qemu_cflags+=" -fPIE" ;;
|
||||
esac
|
||||
|
||||
# Set compile options
|
||||
qemu_options+=(functionality,security,speed,size:"--extra-cflags=\"${_qemu_cflags}\"")
|
||||
|
||||
unset _qemu_cflags
|
||||
|
||||
_qemu_ldflags=""
|
||||
|
||||
# SECURITY: Link binary as a Position Independant Executable,
|
||||
# and take advantage of ASLR, making ROP attacks much harder to perform.
|
||||
# (https://wiki.debian.org/Hardening)
|
||||
case "$arch" in
|
||||
aarch64) [ -z "${static}" ] && _qemu_ldflags+=" -pie" ;;
|
||||
x86_64) [ -z "${static}" ] && _qemu_ldflags+=" -pie" ;;
|
||||
ppc64le) [ -z "${static}" ] && _qemu_ldflags+=" -pie" ;;
|
||||
s390x) [ -z "${static}" ] && _qemu_ldflags+=" -pie" ;;
|
||||
esac
|
||||
|
||||
# SECURITY: Disallow executing code on the stack.
|
||||
_qemu_ldflags+=" -z noexecstack"
|
||||
|
||||
# SECURITY: Make the linker set some program sections to read-only
|
||||
# before the program is run to stop certain attacks.
|
||||
_qemu_ldflags+=" -z relro"
|
||||
|
||||
# SECURITY: Make the linker resolve all symbols immediately on program
|
||||
# load.
|
||||
_qemu_ldflags+=" -z now"
|
||||
|
||||
qemu_options+=(security:"--extra-ldflags=\"${_qemu_ldflags}\"")
|
||||
|
||||
unset _qemu_ldflags
|
||||
|
||||
# Where to install qemu helper binaries
|
||||
qemu_options+=(misc:--prefix=${prefix})
|
||||
|
||||
# Where to install qemu libraries
|
||||
qemu_options+=(arch:--libdir=${prefix}/lib/${hypervisor})
|
||||
|
||||
# Where to install qemu helper binaries
|
||||
qemu_options+=(misc:--libexecdir=${prefix}/libexec/${hypervisor})
|
||||
|
||||
# Where to install data files
|
||||
qemu_options+=(misc:--datadir=${prefix}/share/${hypervisor})
|
||||
|
||||
}
|
||||
|
||||
# Entry point
|
||||
main() {
|
||||
action=""
|
||||
|
||||
while getopts "dhms" opt; do
|
||||
case "$opt" in
|
||||
d)
|
||||
action="dump"
|
||||
;;
|
||||
|
||||
h)
|
||||
usage
|
||||
exit 0
|
||||
;;
|
||||
|
||||
m)
|
||||
action="multi"
|
||||
;;
|
||||
s)
|
||||
static="true"
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
shift $((OPTIND - 1))
|
||||
|
||||
[ -z "$1" ] && die "need hypervisor name"
|
||||
hypervisor="$1"
|
||||
|
||||
local qemu_version_file="VERSION"
|
||||
[ -f ${qemu_version_file} ] || die "QEMU version file '$qemu_version_file' not found"
|
||||
|
||||
local qemu_version_major=$(cut -d. -f1 "${qemu_version_file}")
|
||||
local qemu_version_minor=$(cut -d. -f2 "${qemu_version_file}")
|
||||
|
||||
[ -n "${qemu_version_major}" ] ||
|
||||
die "cannot determine qemu major version from file $qemu_version_file"
|
||||
[ -n "${qemu_version_minor}" ] ||
|
||||
die "cannot determine qemu minor version from file $qemu_version_file"
|
||||
|
||||
local gcc_version_major=$(gcc -dumpversion | cut -f1 -d.)
|
||||
local gcc_version_minor=$(gcc -dumpversion | cut -f2 -d.)
|
||||
|
||||
[ -n "${gcc_version_major}" ] ||
|
||||
die "cannot determine gcc major version, please ensure it is installed"
|
||||
[ -n "${gcc_version_minor}" ] ||
|
||||
die "cannot determine gcc minor version, please ensure it is installed"
|
||||
|
||||
# Generate qemu options
|
||||
generate_qemu_options
|
||||
|
||||
show_array "$action" "${qemu_options[@]}"
|
||||
|
||||
exit 0
|
||||
}
|
||||
|
||||
main $@
|
||||
117
tools/packaging/scripts/lib.sh
Normal file
117
tools/packaging/scripts/lib.sh
Normal file
@@ -0,0 +1,117 @@
|
||||
#!/usr/bin/env bash
|
||||
#
|
||||
# Copyright (c) 2018-2020 Intel Corporation
|
||||
#
|
||||
# SPDX-License-Identifier: Apache-2.0
|
||||
#
|
||||
|
||||
export GOPATH=${GOPATH:-${HOME}/go}
|
||||
export tests_repo="${tests_repo:-github.com/kata-containers/tests}"
|
||||
export tests_repo_dir="$GOPATH/src/$tests_repo"
|
||||
|
||||
hub_bin="hub-bin"
|
||||
|
||||
clone_tests_repo() {
|
||||
# KATA_CI_NO_NETWORK is (has to be) ignored if there is
|
||||
# no existing clone.
|
||||
if [ -d "${tests_repo_dir}" ] && [ -n "${KATA_CI_NO_NETWORK:-}" ]; then
|
||||
return
|
||||
fi
|
||||
|
||||
go get -d -u "$tests_repo" || true
|
||||
}
|
||||
|
||||
install_yq() {
|
||||
clone_tests_repo
|
||||
pushd "$tests_repo_dir"
|
||||
.ci/install_yq.sh
|
||||
popd
|
||||
}
|
||||
|
||||
get_from_kata_deps() {
|
||||
local dependency="$1"
|
||||
BRANCH=${BRANCH:-master}
|
||||
local branch="${2:-${BRANCH}}"
|
||||
local runtime_repo="github.com/kata-containers/runtime"
|
||||
GOPATH=${GOPATH:-${HOME}/go}
|
||||
local runtime_repo_dir="${GOPATH}/src/${runtime_repo}"
|
||||
# For our CI, we will query the local versions.yaml file both for kernel and
|
||||
# all other subsystems. eg: a new version of NEMU would be good to test
|
||||
# through CI. For the kernel, .ci/install_kata_kernel.sh file in tests
|
||||
# repository will pass the kernel version as an override to this function to
|
||||
# allow testing of kernels before they land in tree.
|
||||
if [ "${CI:-}" = "true" ] && [ -d "${runtime_repo_dir}" ]; then
|
||||
versions_file="${runtime_repo_dir}/versions.yaml"
|
||||
else
|
||||
versions_file="versions-${branch}.yaml"
|
||||
fi
|
||||
|
||||
#make sure yq is installed
|
||||
install_yq >&2
|
||||
|
||||
if [ ! -e "${versions_file}" ]; then
|
||||
yaml_url="https://raw.githubusercontent.com/kata-containers/runtime/${branch}/versions.yaml"
|
||||
echo "versions file (${versions_file}) does not exist" >&2
|
||||
echo "Download from ${yaml_url}" >&2
|
||||
curl --silent -o "${versions_file}" "$yaml_url"
|
||||
fi
|
||||
result=$("${GOPATH}/bin/yq" read -X "$versions_file" "$dependency")
|
||||
[ "$result" = "null" ] && result=""
|
||||
echo "$result"
|
||||
}
|
||||
|
||||
die() {
|
||||
echo >&2 "ERROR: $*"
|
||||
exit 1
|
||||
}
|
||||
|
||||
info() {
|
||||
echo >&2 "INFO: $*"
|
||||
}
|
||||
|
||||
get_repo_hash() {
|
||||
local repo_dir=${1:-}
|
||||
[ -d "${repo_dir}" ] || die "${repo_dir} is not a directory"
|
||||
pushd "${repo_dir}" >>/dev/null
|
||||
git rev-parse --verify HEAD
|
||||
popd >>/dev/null
|
||||
}
|
||||
|
||||
build_hub() {
|
||||
info "Get hub"
|
||||
|
||||
if cmd=$(command -v hub); then
|
||||
hub_bin="${cmd}"
|
||||
return
|
||||
else
|
||||
hub_bin="${tmp_dir:-/tmp}/hub-bin"
|
||||
fi
|
||||
|
||||
local hub_repo="github.com/github/hub"
|
||||
local hub_repo_dir="${GOPATH}/src/${hub_repo}"
|
||||
[ -d "${hub_repo_dir}" ] || git clone --quiet --depth 1 "https://${hub_repo}.git" "${hub_repo_dir}"
|
||||
pushd "${hub_repo_dir}" >>/dev/null
|
||||
git checkout master
|
||||
git pull
|
||||
./script/build -o "${hub_bin}"
|
||||
popd >>/dev/null
|
||||
}
|
||||
|
||||
arch_to_golang()
|
||||
{
|
||||
local -r arch="$1"
|
||||
|
||||
case "$arch" in
|
||||
aarch64) echo "arm64";;
|
||||
ppc64le) echo "$arch";;
|
||||
x86_64) echo "amd64";;
|
||||
s390x) echo "s390x";;
|
||||
*) die "unsupported architecture: $arch";;
|
||||
esac
|
||||
}
|
||||
|
||||
get_kata_hash() {
|
||||
repo=$1
|
||||
ref=$2
|
||||
git ls-remote --heads --tags "https://github.com/${project}/${repo}.git" | grep "${ref}" | awk '{print $1}'
|
||||
}
|
||||
Reference in New Issue
Block a user