RPJosh
/
authelia
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
authelia/.buildkite/hooks/pre-command

38 lines
1.3 KiB
Plaintext
Raw Normal View History

do not hardcode /bin/bash (#1122) Co-authored-by: Victor Büttner <victor@0x23.dk> Co-authored-by: Clément Michaud <clement.michaud34@gmail.com>
2020-06-18 07:49:13 +00:00
#!/usr/bin/env bash
Utilise Buildkite for Authelia CI/CD (#507) Publish steps are currently disabled.
2019-12-27 11:07:53 +00:00
set +u
feat: build and distribute .deb packages (#2114) * feat: build and distribute .deb packages Creates .deb packages for distribution via GitHub releases and Buildkite builds for the following architectures: * amd64 * armhf * arm64 * fix: pkgver reference in debpackages.sh * refactor: split deb packaging jobs and quote variables * fix: pipeline upload for debpackages * fix: depends_on key for debpackages * fix: add depends_on: ~ for debpackages step * fix: pre-artifact hook for debpackages * fix: add .deb suffix in pre-artifact hook * fix: variable reference in debhelper.sh * refactor: silence wget output in debhelper.sh * refactor: make build concurrency gate only depend_on docker builds * refactor: make build concurrency gate also depend_on coverage build * refactor: remove dependencies for build concurrency gate
2021-06-26 01:45:21 +00:00
if [[ "${BUILDKITE_LABEL}" == ":service_dog: Linting" ]]; then
refactor: replace yarn with pnpm (#2424) * Check for pnpm in authelia-scripts * Improve husky hooks to check for required apps * Use pnpm in coverage dockerfile * Use pnpm in dev workflow * Stop buildx log truncation * Ignore pnpm lockfile in yamllint * Update versions required for docker and docker-compose in contributing docs
2021-09-29 07:24:21 +00:00
cd web && pnpm install --shamefully-hoist && cd ../
fi
if [[ "${BUILDKITE_LABEL}" == ":docker: Build Image [coverage]" ]]; then
cp -R /buildkite/.pnpm-store .
fi
if [[ "${BUILDKITE_LABEL}" =~ ":debian: Build Package" ]]; then
buildkite-agent artifact download "authelia-linux-${ARCH}.tar.gz" .
[CI] Add linting option for frontend and enforce styling (#1565) We now extend the default Eslint configuration and enforce styling with prettier for all of our frontend code.
2021-01-02 10:58:24 +00:00
fi
feat: build and distribute .deb packages (#2114) * feat: build and distribute .deb packages Creates .deb packages for distribution via GitHub releases and Buildkite builds for the following architectures: * amd64 * armhf * arm64 * fix: pkgver reference in debpackages.sh * refactor: split deb packaging jobs and quote variables * fix: pipeline upload for debpackages * fix: depends_on key for debpackages * fix: add depends_on: ~ for debpackages step * fix: pre-artifact hook for debpackages * fix: add .deb suffix in pre-artifact hook * fix: variable reference in debhelper.sh * refactor: silence wget output in debhelper.sh * refactor: make build concurrency gate only depend_on docker builds * refactor: make build concurrency gate also depend_on coverage build * refactor: remove dependencies for build concurrency gate
2021-06-26 01:45:21 +00:00
if [[ "${BUILDKITE_LABEL}" =~ ":selenium:" ]]; then
[CI] Add Codecov support (#1065) * [CI] Add Codecov support * [CI] Capture backend coverage from integration tests * [CI] Remove unnecessary artifacts for coverage build * [CI] Only run coverage elements where necessary * [CI] Simplify post-command hook * Fix yarn dependencies and collect coverage * [CI] Include cmd/authelia/ path in coverage * [CI] Exclude internal/suites/ in coverage Closes #1061.
2020-06-05 00:43:19 +00:00
DEFAULT_ARCH=coverage
Build docker image upfront in CI and use it in integration tests. (#555) * Build docker image upfront in CI and use it in integration tests. Previously, the development workflow was broken because the container generated from Dockerfile.CI was used in dev environments but the binary was not pre-built as it is on buildkite. I propose to just remove that image and use the "to be published" image instead in integration tests. This will have several advantages: - Fix the dev workflow. - Remove CI arch from authelia-scripts build command - Optimize CI time in buildkite since we'll cache a way small artifact - We don't build authelia more than once for earch arch. * Fix suites and only build ARM images on master or tagged commits * Optimise pipeline dependencies and Kubernetes suite to utilise cache * Run unit tests and docker image build in parallel. * Fix suite trying to write on read only fs. Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-01-17 19:46:51 +00:00
echo "--- :docker: Extract, load and tag build container"
buildkite-agent artifact download "authelia-image-${DEFAULT_ARCH}*" .
feat: build and distribute .deb packages (#2114) * feat: build and distribute .deb packages Creates .deb packages for distribution via GitHub releases and Buildkite builds for the following architectures: * amd64 * armhf * arm64 * fix: pkgver reference in debpackages.sh * refactor: split deb packaging jobs and quote variables * fix: pipeline upload for debpackages * fix: depends_on key for debpackages * fix: add depends_on: ~ for debpackages step * fix: pre-artifact hook for debpackages * fix: add .deb suffix in pre-artifact hook * fix: variable reference in debhelper.sh * refactor: silence wget output in debhelper.sh * refactor: make build concurrency gate only depend_on docker builds * refactor: make build concurrency gate also depend_on coverage build * refactor: remove dependencies for build concurrency gate
2021-06-26 01:45:21 +00:00
zstdcat "authelia-image-${DEFAULT_ARCH}.tar.zst" | docker load
Build docker image upfront in CI and use it in integration tests. (#555) * Build docker image upfront in CI and use it in integration tests. Previously, the development workflow was broken because the container generated from Dockerfile.CI was used in dev environments but the binary was not pre-built as it is on buildkite. I propose to just remove that image and use the "to be published" image instead in integration tests. This will have several advantages: - Fix the dev workflow. - Remove CI arch from authelia-scripts build command - Optimize CI time in buildkite since we'll cache a way small artifact - We don't build authelia more than once for earch arch. * Fix suites and only build ARM images on master or tagged commits * Optimise pipeline dependencies and Kubernetes suite to utilise cache * Run unit tests and docker image build in parallel. * Fix suite trying to write on read only fs. Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2020-01-17 19:46:51 +00:00
docker tag authelia/authelia authelia:dist
Utilise Buildkite for Authelia CI/CD (#507) Publish steps are currently disabled.
2019-12-27 11:07:53 +00:00
fi
feat: builds with gox and buildx (#2381) * feat: builds with gox and buildx This change builds all of Authelia respective binaries in parallel within a single step and distributes as necessary to subsequent steps, we now also build and distribute for the following OS/Architecture: freebsd/amd64. Our CI/CD pipeline now also utilises docker buildx as a default for builds and pushes. * refactor: clean up docker helper * Remove `authelia-scripts docker push-image` command as all pushes will be performed with buildx and manifests * Rename the --arch flag to --container * Add Dockerfile.dev for users that want to build an Authelia container from source without utilising suites * Set Dockerfile.dev as default for `authelia-scripts docker build` command * refactor: variant -> container
2021-09-16 12:39:18 +00:00
if [[ "${BUILDKITE_LABEL}" == ":docker: Deploy Manifest" ]]; then
echo "--- :go: :react: :swagger: Extract pre-built binary"
feat: hardened authelia binaries (#2410) * feat: hardened authelia binaries This change ensures that all Authelia binaries which are compiled and distributed are hardened with the following standards: * RELRO * Stack canary * NX * PIE/ASLR * Stripped RPATH AND RUNPATH * Stripped Symbols * Fortify The musl variants currently [do not support Fortify](https://wiki.musl-libc.org/future-ideas.html#Fortify). * refactor: docker pull for authelia/crossbuild in background
2021-09-26 02:08:47 +00:00
buildkite-agent artifact download "authelia-linux-*-musl.tar.gz" .
for archive in authelia-linux-*-musl.tar.gz; do tar xzf ${archive} --wildcards "authelia-linux-*"; done
feat: builds with gox and buildx (#2381) * feat: builds with gox and buildx This change builds all of Authelia respective binaries in parallel within a single step and distributes as necessary to subsequent steps, we now also build and distribute for the following OS/Architecture: freebsd/amd64. Our CI/CD pipeline now also utilises docker buildx as a default for builds and pushes. * refactor: clean up docker helper * Remove `authelia-scripts docker push-image` command as all pushes will be performed with buildx and manifests * Rename the --arch flag to --container * Add Dockerfile.dev for users that want to build an Authelia container from source without utilising suites * Set Dockerfile.dev as default for `authelia-scripts docker build` command * refactor: variant -> container
2021-09-16 12:39:18 +00:00
fi
feat: build and distribute .deb packages (#2114) * feat: build and distribute .deb packages Creates .deb packages for distribution via GitHub releases and Buildkite builds for the following architectures: * amd64 * armhf * arm64 * fix: pkgver reference in debpackages.sh * refactor: split deb packaging jobs and quote variables * fix: pipeline upload for debpackages * fix: depends_on key for debpackages * fix: add depends_on: ~ for debpackages step * fix: pre-artifact hook for debpackages * fix: add .deb suffix in pre-artifact hook * fix: variable reference in debhelper.sh * refactor: silence wget output in debhelper.sh * refactor: make build concurrency gate only depend_on docker builds * refactor: make build concurrency gate also depend_on coverage build * refactor: remove dependencies for build concurrency gate
2021-06-26 01:45:21 +00:00
if [[ "${BUILDKITE_LABEL}" == ":github: Deploy Artifacts" ]]; then
[CI] Fix artifact download for publishing step (#954)
2020-05-02 02:12:18 +00:00
buildkite-agent artifact download "authelia-*.tar.gz*" .
feat: build and distribute .deb packages (#2114) * feat: build and distribute .deb packages Creates .deb packages for distribution via GitHub releases and Buildkite builds for the following architectures: * amd64 * armhf * arm64 * fix: pkgver reference in debpackages.sh * refactor: split deb packaging jobs and quote variables * fix: pipeline upload for debpackages * fix: depends_on key for debpackages * fix: add depends_on: ~ for debpackages step * fix: pre-artifact hook for debpackages * fix: add .deb suffix in pre-artifact hook * fix: variable reference in debhelper.sh * refactor: silence wget output in debhelper.sh * refactor: make build concurrency gate only depend_on docker builds * refactor: make build concurrency gate also depend_on coverage build * refactor: remove dependencies for build concurrency gate
2021-06-26 01:45:21 +00:00
buildkite-agent artifact download "authelia_*.deb*" .
feat: publish and deploy to apt.authelia.com (#2148) This automates the process of publishing our `*.deb` files for stable Authelia releases to apt.authelia.com.
2021-07-05 02:49:48 +00:00
fi
if [[ "${BUILDKITE_LABEL}" == ":debian: :fedora: :ubuntu: Deploy APT" ]]; then
buildkite-agent artifact download "authelia_*.deb" .
Utilise Buildkite for Authelia CI/CD (#507) Publish steps are currently disabled.
2019-12-27 11:07:53 +00:00
fi