Jenkinsfile 34 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756
  1. pipeline {
  2. agent {
  3. label 'X86-64-MULTI'
  4. }
  5. options {
  6. buildDiscarder(logRotator(numToKeepStr: '10', daysToKeepStr: '60'))
  7. parallelsAlwaysFailFast()
  8. }
  9. // Input to determine if this is a package check
  10. parameters {
  11. string(defaultValue: 'false', description: 'package check run', name: 'PACKAGE_CHECK')
  12. }
  13. // Configuration for the variables used for this specific repo
  14. environment {
  15. BUILDS_DISCORD=credentials('build_webhook_url')
  16. GITHUB_TOKEN=credentials('498b4638-2d02-4ce5-832d-8a57d01d97ab')
  17. GITLAB_TOKEN=credentials('b6f0f1dd-6952-4cf6-95d1-9c06380283f0')
  18. GITLAB_NAMESPACE=credentials('gitlab-namespace-id')
  19. EXT_GIT_BRANCH = 'master'
  20. EXT_USER = 'tvheadend'
  21. EXT_REPO = 'tvheadend'
  22. BUILD_VERSION_ARG = 'TVHEADEND_COMMIT'
  23. LS_USER = 'linuxserver'
  24. LS_REPO = 'docker-tvheadend'
  25. CONTAINER_NAME = 'tvheadend'
  26. DOCKERHUB_IMAGE = 'linuxserver/tvheadend'
  27. DEV_DOCKERHUB_IMAGE = 'lsiodev/tvheadend'
  28. PR_DOCKERHUB_IMAGE = 'lspipepr/tvheadend'
  29. DIST_IMAGE = 'ubuntu'
  30. MULTIARCH='false'
  31. CI='true'
  32. CI_WEB='true'
  33. CI_PORT='9981'
  34. CI_SSL='false'
  35. CI_DELAY='120'
  36. CI_DOCKERENV='TZ=US/Pacific'
  37. CI_AUTH='user:password'
  38. CI_WEBPATH=''
  39. }
  40. stages {
  41. // Setup all the basic environment variables needed for the build
  42. stage("Set ENV Variables base"){
  43. steps{
  44. script{
  45. env.EXIT_STATUS = ''
  46. env.LS_RELEASE = sh(
  47. script: '''docker run --rm alexeiled/skopeo sh -c 'skopeo inspect docker://docker.io/'${DOCKERHUB_IMAGE}':j0nny 2>/dev/null' | jq -r '.Labels.build_version' | awk '{print $3}' | grep '\\-ls' || : ''',
  48. returnStdout: true).trim()
  49. env.LS_RELEASE_NOTES = sh(
  50. script: '''cat readme-vars.yml | awk -F \\" '/date: "[0-9][0-9].[0-9][0-9].[0-9][0-9]:/ {print $4;exit;}' | sed -E ':a;N;$!ba;s/\\r{0,1}\\n/\\\\n/g' ''',
  51. returnStdout: true).trim()
  52. env.GITHUB_DATE = sh(
  53. script: '''date '+%Y-%m-%dT%H:%M:%S%:z' ''',
  54. returnStdout: true).trim()
  55. env.COMMIT_SHA = sh(
  56. script: '''git rev-parse HEAD''',
  57. returnStdout: true).trim()
  58. env.CODE_URL = 'https://github.com/' + env.LS_USER + '/' + env.LS_REPO + '/commit/' + env.GIT_COMMIT
  59. env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DOCKERHUB_IMAGE + '/tags/'
  60. env.PULL_REQUEST = env.CHANGE_ID
  61. env.TEMPLATED_FILES = 'Jenkinsfile README.md LICENSE ./.github/FUNDING.yml ./.github/ISSUE_TEMPLATE.md ./.github/PULL_REQUEST_TEMPLATE.md ./.github/workflows/greetings.yml ./.github/workflows/stale.yml'
  62. }
  63. script{
  64. env.LS_RELEASE_NUMBER = sh(
  65. script: '''echo ${LS_RELEASE} |sed 's/^.*-ls//g' ''',
  66. returnStdout: true).trim()
  67. }
  68. script{
  69. env.LS_TAG_NUMBER = sh(
  70. script: '''#! /bin/bash
  71. tagsha=$(git rev-list -n 1 ${LS_RELEASE} 2>/dev/null)
  72. if [ "${tagsha}" == "${COMMIT_SHA}" ]; then
  73. echo ${LS_RELEASE_NUMBER}
  74. elif [ -z "${GIT_COMMIT}" ]; then
  75. echo ${LS_RELEASE_NUMBER}
  76. else
  77. echo $((${LS_RELEASE_NUMBER} + 1))
  78. fi''',
  79. returnStdout: true).trim()
  80. }
  81. }
  82. }
  83. /* #######################
  84. Package Version Tagging
  85. ####################### */
  86. // Grab the current package versions in Git to determine package tag
  87. stage("Set Package tag"){
  88. steps{
  89. script{
  90. env.PACKAGE_TAG = sh(
  91. script: '''#!/bin/bash
  92. if [ -e package_versions.txt ] ; then
  93. cat package_versions.txt | md5sum | cut -c1-8
  94. else
  95. echo none
  96. fi''',
  97. returnStdout: true).trim()
  98. }
  99. }
  100. }
  101. /* ########################
  102. External Release Tagging
  103. ######################## */
  104. // If this is a github commit trigger determine the current commit at head
  105. stage("Set ENV github_commit"){
  106. steps{
  107. script{
  108. env.EXT_RELEASE = sh(
  109. script: '''curl -s https://api.github.com/repos/${EXT_USER}/${EXT_REPO}/commits/${EXT_GIT_BRANCH} | jq -r '. | .sha' | cut -c1-8 ''',
  110. returnStdout: true).trim()
  111. }
  112. }
  113. }
  114. // If this is a github commit trigger Set the external release link
  115. stage("Set ENV commit_link"){
  116. steps{
  117. script{
  118. env.RELEASE_LINK = 'https://github.com/' + env.EXT_USER + '/' + env.EXT_REPO + '/commit/' + env.EXT_RELEASE
  119. }
  120. }
  121. }
  122. // Sanitize the release tag and strip illegal docker or github characters
  123. stage("Sanitize tag"){
  124. steps{
  125. script{
  126. env.EXT_RELEASE_CLEAN = sh(
  127. script: '''echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g' ''',
  128. returnStdout: true).trim()
  129. }
  130. }
  131. }
  132. // If this is a j0nny build use live docker endpoints
  133. stage("Set ENV live build"){
  134. when {
  135. branch "j0nny"
  136. environment name: 'CHANGE_ID', value: ''
  137. }
  138. steps {
  139. script{
  140. env.IMAGE = env.DOCKERHUB_IMAGE
  141. env.GITHUBIMAGE = 'docker.pkg.github.com/' + env.LS_USER + '/' + env.LS_REPO + '/' + env.CONTAINER_NAME
  142. env.GITLABIMAGE = 'registry.gitlab.com/linuxserver.io/' + env.LS_REPO + '/' + env.CONTAINER_NAME
  143. if (env.MULTIARCH == 'true') {
  144. env.CI_TAGS = 'amd64-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER + '|arm32v7-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER + '|arm64v8-' + env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER
  145. } else {
  146. env.CI_TAGS = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER
  147. }
  148. env.META_TAG = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER
  149. }
  150. }
  151. }
  152. // If this is a dev build use dev docker endpoints
  153. stage("Set ENV dev build"){
  154. when {
  155. not {branch "j0nny"}
  156. environment name: 'CHANGE_ID', value: ''
  157. }
  158. steps {
  159. script{
  160. env.IMAGE = env.DEV_DOCKERHUB_IMAGE
  161. env.GITHUBIMAGE = 'docker.pkg.github.com/' + env.LS_USER + '/' + env.LS_REPO + '/lsiodev-' + env.CONTAINER_NAME
  162. env.GITLABIMAGE = 'registry.gitlab.com/linuxserver.io/' + env.LS_REPO + '/lsiodev-' + env.CONTAINER_NAME
  163. if (env.MULTIARCH == 'true') {
  164. env.CI_TAGS = 'amd64-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '|arm32v7-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA + '|arm64v8-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA
  165. } else {
  166. env.CI_TAGS = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA
  167. }
  168. env.META_TAG = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA
  169. env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DEV_DOCKERHUB_IMAGE + '/tags/'
  170. }
  171. }
  172. }
  173. // If this is a pull request build use dev docker endpoints
  174. stage("Set ENV PR build"){
  175. when {
  176. not {environment name: 'CHANGE_ID', value: ''}
  177. }
  178. steps {
  179. script{
  180. env.IMAGE = env.PR_DOCKERHUB_IMAGE
  181. env.GITHUBIMAGE = 'docker.pkg.github.com/' + env.LS_USER + '/' + env.LS_REPO + '/lspipepr-' + env.CONTAINER_NAME
  182. env.GITLABIMAGE = 'registry.gitlab.com/linuxserver.io/' + env.LS_REPO + '/lspipepr-' + env.CONTAINER_NAME
  183. if (env.MULTIARCH == 'true') {
  184. env.CI_TAGS = 'amd64-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-pr-' + env.PULL_REQUEST + '|arm32v7-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-pr-' + env.PULL_REQUEST + '|arm64v8-' + env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-pr-' + env.PULL_REQUEST
  185. } else {
  186. env.CI_TAGS = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-pr-' + env.PULL_REQUEST
  187. }
  188. env.META_TAG = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-pr-' + env.PULL_REQUEST
  189. env.CODE_URL = 'https://github.com/' + env.LS_USER + '/' + env.LS_REPO + '/pull/' + env.PULL_REQUEST
  190. env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.PR_DOCKERHUB_IMAGE + '/tags/'
  191. }
  192. }
  193. }
  194. // Run ShellCheck
  195. stage('ShellCheck') {
  196. when {
  197. environment name: 'CI', value: 'true'
  198. }
  199. steps {
  200. withCredentials([
  201. string(credentialsId: 'spaces-key', variable: 'DO_KEY'),
  202. string(credentialsId: 'spaces-secret', variable: 'DO_SECRET')
  203. ]) {
  204. script{
  205. env.SHELLCHECK_URL = 'https://lsio-ci.ams3.digitaloceanspaces.com/' + env.IMAGE + '/' + env.META_TAG + '/shellcheck-result.xml'
  206. }
  207. sh '''curl -sL https://raw.githubusercontent.com/linuxserver/docker-shellcheck/master/checkrun.sh | /bin/bash'''
  208. sh '''#! /bin/bash
  209. set -e
  210. docker pull lsiodev/spaces-file-upload:latest
  211. docker run --rm \
  212. -e DESTINATION=\"${IMAGE}/${META_TAG}/shellcheck-result.xml\" \
  213. -e FILE_NAME="shellcheck-result.xml" \
  214. -e MIMETYPE="text/xml" \
  215. -v ${WORKSPACE}:/mnt \
  216. -e SECRET_KEY=\"${DO_SECRET}\" \
  217. -e ACCESS_KEY=\"${DO_KEY}\" \
  218. -t lsiodev/spaces-file-upload:latest \
  219. python /upload.py'''
  220. }
  221. }
  222. }
  223. // Use helper containers to render templated files
  224. stage('Update-Templates') {
  225. when {
  226. branch "j0nny"
  227. environment name: 'CHANGE_ID', value: ''
  228. expression {
  229. env.CONTAINER_NAME != null
  230. }
  231. }
  232. steps {
  233. sh '''#! /bin/bash
  234. set -e
  235. TEMPDIR=$(mktemp -d)
  236. docker pull linuxserver/jenkins-builder:latest
  237. docker run --rm -e CONTAINER_NAME=${CONTAINER_NAME} -e GITHUB_BRANCH=j0nny -v ${TEMPDIR}:/ansible/jenkins linuxserver/jenkins-builder:latest
  238. CURRENTHASH=$(grep -hs ^ ${TEMPLATED_FILES} | md5sum | cut -c1-8)
  239. cd ${TEMPDIR}/docker-${CONTAINER_NAME}
  240. NEWHASH=$(grep -hs ^ ${TEMPLATED_FILES} | md5sum | cut -c1-8)
  241. if [[ "${CURRENTHASH}" != "${NEWHASH}" ]]; then
  242. mkdir -p ${TEMPDIR}/repo
  243. git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/repo/${LS_REPO}
  244. cd ${TEMPDIR}/repo/${LS_REPO}
  245. git checkout -f j0nny
  246. cd ${TEMPDIR}/docker-${CONTAINER_NAME}
  247. mkdir -p ${TEMPDIR}/repo/${LS_REPO}/.github/workflows
  248. cp --parents ${TEMPLATED_FILES} ${TEMPDIR}/repo/${LS_REPO}/
  249. cd ${TEMPDIR}/repo/${LS_REPO}/
  250. git add ${TEMPLATED_FILES}
  251. git commit -m 'Bot Updating Templated Files'
  252. git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git --all
  253. echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER}
  254. else
  255. echo "false" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER}
  256. fi
  257. mkdir -p ${TEMPDIR}/gitbook
  258. git clone https://github.com/linuxserver/docker-documentation.git ${TEMPDIR}/gitbook/docker-documentation
  259. if [[ "${BRANCH_NAME}" == "master" ]] && [[ (! -f ${TEMPDIR}/gitbook/docker-documentation/images/docker-${CONTAINER_NAME}.md) || ("$(md5sum ${TEMPDIR}/gitbook/docker-documentation/images/docker-${CONTAINER_NAME}.md | awk '{ print $1 }')" != "$(md5sum ${TEMPDIR}/docker-${CONTAINER_NAME}/docker-${CONTAINER_NAME}.md | awk '{ print $1 }')") ]]; then
  260. cp ${TEMPDIR}/docker-${CONTAINER_NAME}/docker-${CONTAINER_NAME}.md ${TEMPDIR}/gitbook/docker-documentation/images/
  261. cd ${TEMPDIR}/gitbook/docker-documentation/
  262. git add images/docker-${CONTAINER_NAME}.md
  263. git commit -m 'Bot Updating Documentation'
  264. git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/linuxserver/docker-documentation.git --all
  265. fi
  266. rm -Rf ${TEMPDIR}'''
  267. script{
  268. env.FILES_UPDATED = sh(
  269. script: '''cat /tmp/${COMMIT_SHA}-${BUILD_NUMBER}''',
  270. returnStdout: true).trim()
  271. }
  272. }
  273. }
  274. // Exit the build if the Templated files were just updated
  275. stage('Template-exit') {
  276. when {
  277. branch "j0nny"
  278. environment name: 'CHANGE_ID', value: ''
  279. environment name: 'FILES_UPDATED', value: 'true'
  280. expression {
  281. env.CONTAINER_NAME != null
  282. }
  283. }
  284. steps {
  285. script{
  286. env.EXIT_STATUS = 'ABORTED'
  287. }
  288. }
  289. }
  290. /* #######################
  291. GitLab Mirroring
  292. ####################### */
  293. // Ping into Gitlab to mirror this repo and have a registry endpoint
  294. stage("GitLab Mirror"){
  295. when {
  296. environment name: 'EXIT_STATUS', value: ''
  297. }
  298. steps{
  299. sh '''curl -H "Content-Type: application/json" -H "Private-Token: ${GITLAB_TOKEN}" -X POST https://gitlab.com/api/v4/projects \
  300. -d '{"namespace_id":'${GITLAB_NAMESPACE}',\
  301. "name":"'${LS_REPO}'",
  302. "mirror":true,\
  303. "import_url":"https://github.com/linuxserver/'${LS_REPO}'.git",\
  304. "issues_access_level":"disabled",\
  305. "merge_requests_access_level":"disabled",\
  306. "repository_access_level":"enabled",\
  307. "visibility":"public"}' '''
  308. }
  309. }
  310. /* ###############
  311. Build Container
  312. ############### */
  313. // Build Docker container for push to LS Repo
  314. stage('Build-Single') {
  315. when {
  316. environment name: 'MULTIARCH', value: 'false'
  317. environment name: 'EXIT_STATUS', value: ''
  318. }
  319. steps {
  320. sh "docker build --no-cache --pull -t ${IMAGE}:${META_TAG} \
  321. --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${META_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ."
  322. }
  323. }
  324. // Build MultiArch Docker containers for push to LS Repo
  325. stage('Build-Multi') {
  326. when {
  327. environment name: 'MULTIARCH', value: 'true'
  328. environment name: 'EXIT_STATUS', value: ''
  329. }
  330. parallel {
  331. stage('Build X86') {
  332. steps {
  333. sh "docker build --no-cache --pull -t ${IMAGE}:amd64-${META_TAG} \
  334. --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${META_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ."
  335. }
  336. }
  337. stage('Build ARMHF') {
  338. agent {
  339. label 'ARMHF'
  340. }
  341. steps {
  342. withCredentials([
  343. [
  344. $class: 'UsernamePasswordMultiBinding',
  345. credentialsId: '3f9ba4d5-100d-45b0-a3c4-633fd6061207',
  346. usernameVariable: 'DOCKERUSER',
  347. passwordVariable: 'DOCKERPASS'
  348. ]
  349. ]) {
  350. echo 'Logging into DockerHub'
  351. sh '''#! /bin/bash
  352. echo $DOCKERPASS | docker login -u $DOCKERUSER --password-stdin
  353. '''
  354. sh "docker build --no-cache --pull -f Dockerfile.armhf -t ${IMAGE}:arm32v7-${META_TAG} \
  355. --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${META_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ."
  356. sh "docker tag ${IMAGE}:arm32v7-${META_TAG} lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER}"
  357. retry(5) {
  358. sh "docker push lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER}"
  359. }
  360. sh '''docker rmi \
  361. ${IMAGE}:arm32v7-${META_TAG} \
  362. lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER} || :'''
  363. }
  364. }
  365. }
  366. stage('Build ARM64') {
  367. agent {
  368. label 'ARM64'
  369. }
  370. steps {
  371. withCredentials([
  372. [
  373. $class: 'UsernamePasswordMultiBinding',
  374. credentialsId: '3f9ba4d5-100d-45b0-a3c4-633fd6061207',
  375. usernameVariable: 'DOCKERUSER',
  376. passwordVariable: 'DOCKERPASS'
  377. ]
  378. ]) {
  379. echo 'Logging into DockerHub'
  380. sh '''#! /bin/bash
  381. echo $DOCKERPASS | docker login -u $DOCKERUSER --password-stdin
  382. '''
  383. sh "docker build --no-cache --pull -f Dockerfile.aarch64 -t ${IMAGE}:arm64v8-${META_TAG} \
  384. --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${META_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ."
  385. sh "docker tag ${IMAGE}:arm64v8-${META_TAG} lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER}"
  386. retry(5) {
  387. sh "docker push lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER}"
  388. }
  389. sh '''docker rmi \
  390. ${IMAGE}:arm64v8-${META_TAG} \
  391. lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || :'''
  392. }
  393. }
  394. }
  395. }
  396. }
  397. // Take the image we just built and dump package versions for comparison
  398. stage('Update-packages') {
  399. when {
  400. branch "j0nny"
  401. environment name: 'CHANGE_ID', value: ''
  402. environment name: 'EXIT_STATUS', value: ''
  403. }
  404. steps {
  405. sh '''#! /bin/bash
  406. set -e
  407. TEMPDIR=$(mktemp -d)
  408. if [ "${MULTIARCH}" == "true" ]; then
  409. LOCAL_CONTAINER=${IMAGE}:amd64-${META_TAG}
  410. else
  411. LOCAL_CONTAINER=${IMAGE}:${META_TAG}
  412. fi
  413. if [ "${DIST_IMAGE}" == "alpine" ]; then
  414. docker run --rm --entrypoint '/bin/sh' -v ${TEMPDIR}:/tmp ${LOCAL_CONTAINER} -c '\
  415. apk info -v > /tmp/package_versions.txt && \
  416. sort -o /tmp/package_versions.txt /tmp/package_versions.txt && \
  417. chmod 777 /tmp/package_versions.txt'
  418. elif [ "${DIST_IMAGE}" == "ubuntu" ]; then
  419. docker run --rm --entrypoint '/bin/sh' -v ${TEMPDIR}:/tmp ${LOCAL_CONTAINER} -c '\
  420. apt list -qq --installed | sed "s#/.*now ##g" | cut -d" " -f1 > /tmp/package_versions.txt && \
  421. sort -o /tmp/package_versions.txt /tmp/package_versions.txt && \
  422. chmod 777 /tmp/package_versions.txt'
  423. fi
  424. NEW_PACKAGE_TAG=$(md5sum ${TEMPDIR}/package_versions.txt | cut -c1-8 )
  425. echo "Package tag sha from current packages in buit container is ${NEW_PACKAGE_TAG} comparing to old ${PACKAGE_TAG} from github"
  426. if [ "${NEW_PACKAGE_TAG}" != "${PACKAGE_TAG}" ]; then
  427. git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/${LS_REPO}
  428. git --git-dir ${TEMPDIR}/${LS_REPO}/.git checkout -f j0nny
  429. cp ${TEMPDIR}/package_versions.txt ${TEMPDIR}/${LS_REPO}/
  430. cd ${TEMPDIR}/${LS_REPO}/
  431. wait
  432. git add package_versions.txt
  433. git commit -m 'Bot Updating Package Versions'
  434. git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git --all
  435. echo "true" > /tmp/packages-${COMMIT_SHA}-${BUILD_NUMBER}
  436. echo "Package tag updated, stopping build process"
  437. else
  438. echo "false" > /tmp/packages-${COMMIT_SHA}-${BUILD_NUMBER}
  439. echo "Package tag is same as previous continue with build process"
  440. fi
  441. rm -Rf ${TEMPDIR}'''
  442. script{
  443. env.PACKAGE_UPDATED = sh(
  444. script: '''cat /tmp/packages-${COMMIT_SHA}-${BUILD_NUMBER}''',
  445. returnStdout: true).trim()
  446. }
  447. }
  448. }
  449. // Exit the build if the package file was just updated
  450. stage('PACKAGE-exit') {
  451. when {
  452. branch "j0nny"
  453. environment name: 'CHANGE_ID', value: ''
  454. environment name: 'PACKAGE_UPDATED', value: 'true'
  455. environment name: 'EXIT_STATUS', value: ''
  456. }
  457. steps {
  458. script{
  459. env.EXIT_STATUS = 'ABORTED'
  460. }
  461. }
  462. }
  463. // Exit the build if this is just a package check and there are no changes to push
  464. stage('PACKAGECHECK-exit') {
  465. when {
  466. branch "j0nny"
  467. environment name: 'CHANGE_ID', value: ''
  468. environment name: 'PACKAGE_UPDATED', value: 'false'
  469. environment name: 'EXIT_STATUS', value: ''
  470. expression {
  471. params.PACKAGE_CHECK == 'true'
  472. }
  473. }
  474. steps {
  475. script{
  476. env.EXIT_STATUS = 'ABORTED'
  477. }
  478. }
  479. }
  480. /* #######
  481. Testing
  482. ####### */
  483. // Run Container tests
  484. stage('Test') {
  485. when {
  486. environment name: 'CI', value: 'true'
  487. environment name: 'EXIT_STATUS', value: ''
  488. }
  489. steps {
  490. withCredentials([
  491. string(credentialsId: 'spaces-key', variable: 'DO_KEY'),
  492. string(credentialsId: 'spaces-secret', variable: 'DO_SECRET')
  493. ]) {
  494. script{
  495. env.CI_URL = 'https://lsio-ci.ams3.digitaloceanspaces.com/' + env.IMAGE + '/' + env.META_TAG + '/index.html'
  496. }
  497. sh '''#! /bin/bash
  498. set -e
  499. docker pull lsiodev/ci:latest
  500. if [ "${MULTIARCH}" == "true" ]; then
  501. docker pull lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER}
  502. docker pull lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER}
  503. docker tag lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm32v7-${META_TAG}
  504. docker tag lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm64v8-${META_TAG}
  505. fi
  506. docker run --rm \
  507. --shm-size=1gb \
  508. -v /var/run/docker.sock:/var/run/docker.sock \
  509. -e IMAGE=\"${IMAGE}\" \
  510. -e DELAY_START=\"${CI_DELAY}\" \
  511. -e TAGS=\"${CI_TAGS}\" \
  512. -e META_TAG=\"${META_TAG}\" \
  513. -e PORT=\"${CI_PORT}\" \
  514. -e SSL=\"${CI_SSL}\" \
  515. -e BASE=\"${DIST_IMAGE}\" \
  516. -e SECRET_KEY=\"${DO_SECRET}\" \
  517. -e ACCESS_KEY=\"${DO_KEY}\" \
  518. -e DOCKER_ENV=\"${CI_DOCKERENV}\" \
  519. -e WEB_SCREENSHOT=\"${CI_WEB}\" \
  520. -e WEB_AUTH=\"${CI_AUTH}\" \
  521. -e WEB_PATH=\"${CI_WEBPATH}\" \
  522. -e DO_REGION="ams3" \
  523. -e DO_BUCKET="lsio-ci" \
  524. -t lsiodev/ci:latest \
  525. python /ci/ci.py'''
  526. }
  527. }
  528. }
  529. /* ##################
  530. Release Logic
  531. ################## */
  532. // If this is an amd64 only image only push a single image
  533. stage('Docker-Push-Single') {
  534. when {
  535. environment name: 'MULTIARCH', value: 'false'
  536. environment name: 'EXIT_STATUS', value: ''
  537. }
  538. steps {
  539. withCredentials([
  540. [
  541. $class: 'UsernamePasswordMultiBinding',
  542. credentialsId: '3f9ba4d5-100d-45b0-a3c4-633fd6061207',
  543. usernameVariable: 'DOCKERUSER',
  544. passwordVariable: 'DOCKERPASS'
  545. ]
  546. ]) {
  547. retry(5) {
  548. sh '''#! /bin/bash
  549. set -e
  550. echo $DOCKERPASS | docker login -u $DOCKERUSER --password-stdin
  551. echo $GITHUB_TOKEN | docker login docker.pkg.github.com -u LinuxServer-CI --password-stdin
  552. echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin
  553. for PUSHIMAGE in "${GITHUBIMAGE}" "${GITLABIMAGE}" "${IMAGE}"; do
  554. docker tag ${IMAGE}:${META_TAG} ${PUSHIMAGE}:${META_TAG}
  555. docker tag ${PUSHIMAGE}:${META_TAG} ${PUSHIMAGE}:j0nny
  556. docker push ${PUSHIMAGE}:j0nny
  557. docker push ${PUSHIMAGE}:${META_TAG}
  558. done
  559. '''
  560. }
  561. sh '''#! /bin/bash
  562. for DELETEIMAGE in "${GITHUBIMAGE}" "{GITLABIMAGE}" "${IMAGE}"; do
  563. docker rmi \
  564. ${DELETEIMAGE}:${META_TAG} \
  565. ${DELETEIMAGE}:j0nny || :
  566. done
  567. '''
  568. }
  569. }
  570. }
  571. // If this is a multi arch release push all images and define the manifest
  572. stage('Docker-Push-Multi') {
  573. when {
  574. environment name: 'MULTIARCH', value: 'true'
  575. environment name: 'EXIT_STATUS', value: ''
  576. }
  577. steps {
  578. withCredentials([
  579. [
  580. $class: 'UsernamePasswordMultiBinding',
  581. credentialsId: '3f9ba4d5-100d-45b0-a3c4-633fd6061207',
  582. usernameVariable: 'DOCKERUSER',
  583. passwordVariable: 'DOCKERPASS'
  584. ]
  585. ]) {
  586. retry(5) {
  587. sh '''#! /bin/bash
  588. set -e
  589. echo $DOCKERPASS | docker login -u $DOCKERUSER --password-stdin
  590. echo $GITHUB_TOKEN | docker login docker.pkg.github.com -u LinuxServer-CI --password-stdin
  591. echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin
  592. if [ "${CI}" == "false" ]; then
  593. docker pull lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER}
  594. docker pull lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER}
  595. docker tag lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm32v7-${META_TAG}
  596. docker tag lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm64v8-${META_TAG}
  597. fi
  598. for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}"; do
  599. docker tag ${IMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG}
  600. docker tag ${IMAGE}:arm32v7-${META_TAG} ${MANIFESTIMAGE}:arm32v7-${META_TAG}
  601. docker tag ${IMAGE}:arm64v8-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG}
  602. docker tag ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:amd64-j0nny
  603. docker tag ${MANIFESTIMAGE}:arm32v7-${META_TAG} ${MANIFESTIMAGE}:arm32v7-j0nny
  604. docker tag ${MANIFESTIMAGE}:arm64v8-${META_TAG} ${MANIFESTIMAGE}:arm64v8-j0nny
  605. docker push ${MANIFESTIMAGE}:amd64-${META_TAG}
  606. docker push ${MANIFESTIMAGE}:arm32v7-${META_TAG}
  607. docker push ${MANIFESTIMAGE}:arm64v8-${META_TAG}
  608. docker push ${MANIFESTIMAGE}:amd64-j0nny
  609. docker push ${MANIFESTIMAGE}:arm32v7-j0nny
  610. docker push ${MANIFESTIMAGE}:arm64v8-j0nny
  611. docker manifest push --purge ${MANIFESTIMAGE}:j0nny || :
  612. docker manifest create ${MANIFESTIMAGE}:j0nny ${MANIFESTIMAGE}:amd64-j0nny ${MANIFESTIMAGE}:arm32v7-j0nny ${MANIFESTIMAGE}:arm64v8-j0nny
  613. docker manifest annotate ${MANIFESTIMAGE}:j0nny ${MANIFESTIMAGE}:arm32v7-j0nny --os linux --arch arm
  614. docker manifest annotate ${MANIFESTIMAGE}:j0nny ${MANIFESTIMAGE}:arm64v8-j0nny --os linux --arch arm64 --variant v8
  615. docker manifest push --purge ${MANIFESTIMAGE}:${META_TAG} || :
  616. docker manifest create ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm32v7-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG}
  617. docker manifest annotate ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:arm32v7-${META_TAG} --os linux --arch arm
  618. docker manifest annotate ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} --os linux --arch arm64 --variant v8
  619. docker manifest push --purge ${MANIFESTIMAGE}:j0nny
  620. docker manifest push --purge ${MANIFESTIMAGE}:${META_TAG}
  621. done
  622. docker tag ${IMAGE}:amd64-${META_TAG} ${GITHUBIMAGE}:amd64-${META_TAG}
  623. docker tag ${IMAGE}:arm32v7-${META_TAG} ${GITHUBIMAGE}:arm32v7-${META_TAG}
  624. docker tag ${IMAGE}:arm64v8-${META_TAG} ${GITHUBIMAGE}:arm64v8-${META_TAG}
  625. docker tag ${GITHUBIMAGE}:amd64-${META_TAG} ${GITHUBIMAGE}:j0nny
  626. docker tag ${GITHUBIMAGE}:amd64-${META_TAG} ${GITHUBIMAGE}:${META_TAG}
  627. docker tag ${GITHUBIMAGE}:arm32v7-${META_TAG} ${GITHUBIMAGE}:arm32v7-j0nny
  628. docker tag ${GITHUBIMAGE}:arm64v8-${META_TAG} ${GITHUBIMAGE}:arm64v8-j0nny
  629. docker push ${GITHUBIMAGE}:amd64-${META_TAG}
  630. docker push ${GITHUBIMAGE}:arm32v7-${META_TAG}
  631. docker push ${GITHUBIMAGE}:arm64v8-${META_TAG}
  632. docker push ${GITHUBIMAGE}:j0nny
  633. docker push ${GITHUBIMAGE}:${META_TAG}
  634. docker push ${GITHUBIMAGE}:arm32v7-j0nny
  635. docker push ${GITHUBIMAGE}:arm64v8-j0nny
  636. '''
  637. }
  638. sh '''#! /bin/bash
  639. for DELETEIMAGE in "${GITHUBIMAGE}" "${GITLABIMAGE}" "${IMAGE}"; do
  640. docker rmi \
  641. ${DELETEIMAGE}:amd64-${META_TAG} \
  642. ${DELETEIMAGE}:amd64-j0nny \
  643. ${DELETEIMAGE}:arm32v7-${META_TAG} \
  644. ${DELETEIMAGE}:arm32v7-j0nny \
  645. ${DELETEIMAGE}:arm64v8-${META_TAG} \
  646. ${DELETEIMAGE}:arm64v8-j0nny || :
  647. done
  648. docker rmi \
  649. lsiodev/buildcache:arm32v7-${COMMIT_SHA}-${BUILD_NUMBER} \
  650. lsiodev/buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || :
  651. '''
  652. }
  653. }
  654. }
  655. // If this is a public release tag it in the LS Github
  656. stage('Github-Tag-Push-Release') {
  657. when {
  658. branch "j0nny"
  659. expression {
  660. env.LS_RELEASE != env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER
  661. }
  662. environment name: 'CHANGE_ID', value: ''
  663. environment name: 'EXIT_STATUS', value: ''
  664. }
  665. steps {
  666. echo "Pushing New tag for current commit ${EXT_RELEASE_CLEAN}-ls${LS_TAG_NUMBER}"
  667. sh '''curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \
  668. -d '{"tag":"'${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}'",\
  669. "object": "'${COMMIT_SHA}'",\
  670. "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to j0nny",\
  671. "type": "commit",\
  672. "tagger": {"name": "LinuxServer Jenkins","email": "jenkins@linuxserver.io","date": "'${GITHUB_DATE}'"}}' '''
  673. echo "Pushing New release for Tag"
  674. sh '''#! /bin/bash
  675. curl -s https://api.github.com/repos/${EXT_USER}/${EXT_REPO}/commits/${EXT_GIT_BRANCH} | jq '. | .commit.message' | sed 's:^.\\(.*\\).$:\\1:' > releasebody.json
  676. echo '{"tag_name":"'${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}'",\
  677. "target_commitish": "j0nny",\
  678. "name": "'${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}'",\
  679. "body": "**LinuxServer Changes:**\\n\\n'${LS_RELEASE_NOTES}'\\n**'${EXT_REPO}' Changes:**\\n\\n' > start
  680. printf '","draft": false,"prerelease": false}' >> releasebody.json
  681. paste -d'\\0' start releasebody.json > releasebody.json.done
  682. curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done'''
  683. }
  684. }
  685. // Use helper container to sync the current README on master to the dockerhub endpoint
  686. stage('Sync-README') {
  687. when {
  688. environment name: 'CHANGE_ID', value: ''
  689. environment name: 'EXIT_STATUS', value: ''
  690. }
  691. steps {
  692. withCredentials([
  693. [
  694. $class: 'UsernamePasswordMultiBinding',
  695. credentialsId: '3f9ba4d5-100d-45b0-a3c4-633fd6061207',
  696. usernameVariable: 'DOCKERUSER',
  697. passwordVariable: 'DOCKERPASS'
  698. ]
  699. ]) {
  700. sh '''#! /bin/bash
  701. set -e
  702. TEMPDIR=$(mktemp -d)
  703. docker pull linuxserver/jenkins-builder:latest
  704. docker run --rm -e CONTAINER_NAME=${CONTAINER_NAME} -e GITHUB_BRANCH=j0nny -v ${TEMPDIR}:/ansible/jenkins linuxserver/jenkins-builder:latest
  705. docker pull lsiodev/readme-sync
  706. docker run --rm=true \
  707. -e DOCKERHUB_USERNAME=$DOCKERUSER \
  708. -e DOCKERHUB_PASSWORD=$DOCKERPASS \
  709. -e GIT_REPOSITORY=${LS_USER}/${LS_REPO} \
  710. -e DOCKER_REPOSITORY=${IMAGE} \
  711. -e GIT_BRANCH=master \
  712. -v ${TEMPDIR}/docker-${CONTAINER_NAME}:/mnt \
  713. lsiodev/readme-sync bash -c 'node sync'
  714. rm -Rf ${TEMPDIR} '''
  715. }
  716. }
  717. }
  718. // If this is a Pull request send the CI link as a comment on it
  719. stage('Pull Request Comment') {
  720. when {
  721. not {environment name: 'CHANGE_ID', value: ''}
  722. environment name: 'CI', value: 'true'
  723. environment name: 'EXIT_STATUS', value: ''
  724. }
  725. steps {
  726. sh '''curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/issues/${PULL_REQUEST}/comments \
  727. -d '{"body": "I am a bot, here are the test results for this PR: \\n'${CI_URL}' \\n'${SHELLCHECK_URL}'"}' '''
  728. }
  729. }
  730. }
  731. /* ######################
  732. Send status to Discord
  733. ###################### */
  734. post {
  735. always {
  736. script{
  737. if (env.EXIT_STATUS == "ABORTED"){
  738. sh 'echo "build aborted"'
  739. }
  740. else if (currentBuild.currentResult == "SUCCESS"){
  741. sh ''' curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://wiki.jenkins-ci.org/download/attachments/2916393/headshot.png","embeds": [{"color": 1681177,\
  742. "description": "**Build:** '${BUILD_NUMBER}'\\n**CI Results:** '${CI_URL}'\\n**ShellCheck Results:** '${SHELLCHECK_URL}'\\n**Status:** Success\\n**Job:** '${RUN_DISPLAY_URL}'\\n**Change:** '${CODE_URL}'\\n**External Release:**: '${RELEASE_LINK}'\\n**DockerHub:** '${DOCKERHUB_LINK}'\\n"}],\
  743. "username": "Jenkins"}' ${BUILDS_DISCORD} '''
  744. }
  745. else {
  746. sh ''' curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://wiki.jenkins-ci.org/download/attachments/2916393/headshot.png","embeds": [{"color": 16711680,\
  747. "description": "**Build:** '${BUILD_NUMBER}'\\n**CI Results:** '${CI_URL}'\\n**ShellCheck Results:** '${SHELLCHECK_URL}'\\n**Status:** failure\\n**Job:** '${RUN_DISPLAY_URL}'\\n**Change:** '${CODE_URL}'\\n**External Release:**: '${RELEASE_LINK}'\\n**DockerHub:** '${DOCKERHUB_LINK}'\\n"}],\
  748. "username": "Jenkins"}' ${BUILDS_DISCORD} '''
  749. }
  750. }
  751. }
  752. cleanup {
  753. cleanWs()
  754. }
  755. }
  756. }