package main import ( "errors" "fmt" "os" "regexp" "strings" "github.com/authelia/authelia/internal/utils" log "github.com/sirupsen/logrus" "github.com/spf13/cobra" ) var arch string var supportedArch = []string{"amd64", "arm32v7", "arm64v8"} var defaultArch = "amd64" var buildkiteQEMU = os.Getenv("BUILDKITE_AGENT_META_DATA_QEMU") var ciBranch = os.Getenv("BUILDKITE_BRANCH") var ciPullRequest = os.Getenv("BUILDKITE_PULL_REQUEST") var ciTag = os.Getenv("BUILDKITE_TAG") var dockerTags = regexp.MustCompile(`v(?P(?P(?P\d+)\.\d+)\.\d+.*)`) var ignoredSuffixes = regexp.MustCompile("alpha|beta") var publicRepo = regexp.MustCompile(`.*\:.*`) var tags = dockerTags.FindStringSubmatch(ciTag) func init() { DockerBuildCmd.PersistentFlags().StringVar(&arch, "arch", defaultArch, "target architecture among: "+strings.Join(supportedArch, ", ")) DockerPushCmd.PersistentFlags().StringVar(&arch, "arch", defaultArch, "target architecture among: "+strings.Join(supportedArch, ", ")) } func checkArchIsSupported(arch string) { for _, a := range supportedArch { if arch == a { return } } log.Fatal("Architecture is not supported. Please select one of " + strings.Join(supportedArch, ", ") + ".") } func dockerBuildOfficialImage(arch string) error { docker := &Docker{} // Set default Architecture Dockerfile to amd64 dockerfile := "Dockerfile" // Set version of QEMU qemuversion := "v4.2.0-6" // If not the default value if arch != defaultArch { dockerfile = fmt.Sprintf("%s.%s", dockerfile, arch) } if arch == "arm32v7" { if buildkiteQEMU != "true" { err := utils.CommandWithStdout("docker", "run", "--rm", "--privileged", "multiarch/qemu-user-static", "--reset", "-p", "yes").Run() if err != nil { panic(err) } } err := utils.CommandWithStdout("bash", "-c", "wget https://github.com/multiarch/qemu-user-static/releases/download/"+qemuversion+"/qemu-arm-static -O ./qemu-arm-static && chmod +x ./qemu-arm-static").Run() if err != nil { panic(err) } } else if arch == "arm64v8" { if buildkiteQEMU != "true" { err := utils.CommandWithStdout("docker", "run", "--rm", "--privileged", "multiarch/qemu-user-static", "--reset", "-p", "yes").Run() if err != nil { panic(err) } } err := utils.CommandWithStdout("bash", "-c", "wget https://github.com/multiarch/qemu-user-static/releases/download/"+qemuversion+"/qemu-aarch64-static -O ./qemu-aarch64-static && chmod +x ./qemu-aarch64-static").Run() if err != nil { panic(err) } } gitTag := ciTag if gitTag == "" { // If commit is not tagged, mark the build has having master tag. gitTag = "master" } cmd := utils.Shell("git rev-parse HEAD") cmd.Stdout = nil cmd.Stderr = nil commitBytes, err := cmd.Output() if err != nil { log.Fatal(err) } commitHash := strings.Trim(string(commitBytes), "\n") return docker.Build(IntermediateDockerImageName, dockerfile, ".", gitTag, commitHash) } // DockerBuildCmd Command for building docker image of Authelia. var DockerBuildCmd = &cobra.Command{ Use: "build", Short: "Build the docker image of Authelia", Run: func(cmd *cobra.Command, args []string) { log.Infof("Building Docker image %s...", DockerImageName) checkArchIsSupported(arch) err := dockerBuildOfficialImage(arch) if err != nil { log.Fatal(err) } docker := &Docker{} err = docker.Tag(IntermediateDockerImageName, DockerImageName) if err != nil { panic(err) } }, } // DockerPushCmd Command for pushing Authelia docker image to Docker Hub var DockerPushCmd = &cobra.Command{ Use: "push-image", Short: "Publish Authelia docker image to Docker Hub", Run: func(cmd *cobra.Command, args []string) { log.Infof("Pushing Docker image %s to Docker Hub...", DockerImageName) checkArchIsSupported(arch) publishDockerImage(arch) }, } // DockerManifestCmd Command for pushing Authelia docker manifest to Docker Hub var DockerManifestCmd = &cobra.Command{ Use: "push-manifest", Short: "Publish Authelia docker manifest to Docker Hub", Run: func(cmd *cobra.Command, args []string) { log.Infof("Pushing Docker manifest of %s to Docker Hub...", DockerImageName) publishDockerManifest() }, } func login(docker *Docker) { username := os.Getenv("DOCKER_USERNAME") password := os.Getenv("DOCKER_PASSWORD") if username == "" { log.Fatal(errors.New("DOCKER_USERNAME is empty")) } if password == "" { log.Fatal(errors.New("DOCKER_PASSWORD is empty")) } log.Infof("Login to Docker Hub as %s", username) err := docker.Login(username, password) if err != nil { log.Fatal("Login to Docker Hub failed", err) } } func deploy(docker *Docker, tag string) { imageWithTag := DockerImageName + ":" + tag log.Infof("Docker image %s will be deployed on Docker Hub", imageWithTag) if err := docker.Tag(DockerImageName, imageWithTag); err != nil { log.Fatal(err) } if err := docker.Push(imageWithTag); err != nil { log.Fatal(err) } } func deployManifest(docker *Docker, tag string, amd64tag string, arm32v7tag string, arm64v8tag string) { dockerImagePrefix := DockerImageName + ":" log.Infof("Docker manifest %s%s will be deployed on Docker Hub", dockerImagePrefix, tag) err := docker.Manifest(dockerImagePrefix+tag, dockerImagePrefix+amd64tag, dockerImagePrefix+arm32v7tag, dockerImagePrefix+arm64v8tag) if err != nil { log.Fatal(err) } tags := []string{amd64tag, arm32v7tag, arm64v8tag} for _, t := range tags { log.Infof("Docker removing tag for %s%s on Docker Hub", dockerImagePrefix, t) if err := docker.CleanTag(t); err != nil { panic(err) } } } func publishDockerImage(arch string) { docker := &Docker{} if ciTag != "" { if len(tags) == 4 { log.Infof("Detected tags: '%s' | '%s' | '%s'", tags[1], tags[2], tags[3]) login(docker) deploy(docker, tags[1]+"-"+arch) if !ignoredSuffixes.MatchString(ciTag) { deploy(docker, tags[2]+"-"+arch) deploy(docker, tags[3]+"-"+arch) deploy(docker, "latest-"+arch) } } else { log.Fatal("Docker image will not be published, the specified tag does not conform to the standard") } } else if ciBranch != "master" && !publicRepo.MatchString(ciBranch) { login(docker) deploy(docker, ciBranch+"-"+arch) } else if ciBranch != "master" && publicRepo.MatchString(ciBranch) { login(docker) deploy(docker, "PR"+ciPullRequest+"-"+arch) } else if ciBranch == "master" && ciPullRequest == "false" { login(docker) deploy(docker, "master-"+arch) } else { log.Info("Docker image will not be published") } } func publishDockerManifest() { docker := &Docker{} if ciTag != "" { if len(tags) == 4 { log.Infof("Detected tags: '%s' | '%s' | '%s'", tags[1], tags[2], tags[3]) login(docker) deployManifest(docker, tags[1], tags[1]+"-amd64", tags[1]+"-arm32v7", tags[1]+"-arm64v8") publishDockerReadme(docker) if !ignoredSuffixes.MatchString(ciTag) { deployManifest(docker, tags[2], tags[2]+"-amd64", tags[2]+"-arm32v7", tags[2]+"-arm64v8") deployManifest(docker, tags[3], tags[3]+"-amd64", tags[3]+"-arm32v7", tags[3]+"-arm64v8") deployManifest(docker, "latest", "latest-amd64", "latest-arm32v7", "latest-arm64v8") publishDockerReadme(docker) updateMicroBadger(docker) } } else { log.Fatal("Docker manifest will not be published, the specified tag does not conform to the standard") } } else if ciBranch != "master" && !publicRepo.MatchString(ciBranch) { login(docker) deployManifest(docker, ciBranch, ciBranch+"-amd64", ciBranch+"-arm32v7", ciBranch+"-arm64v8") } else if ciBranch != "master" && publicRepo.MatchString(ciBranch) { login(docker) deployManifest(docker, "PR"+ciPullRequest, "PR"+ciPullRequest+"-amd64", "PR"+ciPullRequest+"-arm32v7", "PR"+ciPullRequest+"-arm64v8") } else if ciBranch == "master" && ciPullRequest == "false" { login(docker) deployManifest(docker, "master", "master-amd64", "master-arm32v7", "master-arm64v8") publishDockerReadme(docker) } else { log.Info("Docker manifest will not be published") } } func publishDockerReadme(docker *Docker) { log.Info("Docker pushing README.md to Docker Hub") if err := docker.PublishReadme(); err != nil { log.Fatal(err) } } func updateMicroBadger(docker *Docker) { log.Info("Updating MicroBadger metadata from Docker Hub") if err := docker.UpdateMicroBadger(); err != nil { log.Fatal(err) } }