release.sh · typeable/octopod

git.iko.soy/typeable/octopod

141 lines 4.9 kB history raw

1#!/usr/bin/env bash

3set -e

5aws_login() {

6 aws ecr get-login-password | docker login --username AWS --password-stdin 560065381221.dkr.ecr.us-east-1.amazonaws.com

9build_passwd() {

10 echo "root:x:0:0:root:/root:/bin/bash" > $configs/passwd

11}

13build_ssh_configs() {

14 echo -e "Host github.com\nHostname github.com\nPort 22\nUser git\nIdentityFile /root/.ssh/deploy.key" > $configs/ssh_config

16 echo "|1|wrBnhg5iUmQx07loxtzNieZp4Gs=|zZDaK51GEIn+RiA8+US9aEKn+s4= ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==" > $configs/ssh_known_hosts

17 echo "|1|YxKPhPv5F8JFFTL6W+p46Vc1Dl4=|GgqpjQ6ViPn3oU948zb4YrdDs84= ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==" >> $configs/ssh_known_hosts

18}

20build_credentials() {

21 openssl req -x509 -newkey rsa:4096 \

22 -keyout $configs/server_key.pem \

23 -out $configs/server_cert.pem \

24 -nodes -subj "/CN=localhost/O=Server"

25 openssl req -newkey rsa:4096 \

26 -keyout $configs/client_key.pem \

27 -out $configs/client_csr.pem \

28 -nodes -subj "/CN=Client"

29 openssl x509 -req \

30 -in $configs/client_csr.pem \

31 -CA $configs/server_cert.pem \

32 -CAkey $configs/server_key.pem \

33 -out $configs/client_cert.pem -set_serial 01 -days $cert_expiration

34}

36download_deploy_key() {

37 key=`aws ssm get-parameter --name "$1" --with-decryption | jq '.Parameter.Value'`

38 echo -e $key | sed -r 's/"//g' > $configs/deploy.key

39}

41build_configs() {

42 build_passwd

43 build_ssh_configs

44 build_credentials

45 download_deploy_key $1

46}

49update_dependencies() {

50 make update-default-nix

51 make update-b2b-helm-nix

52}

54build_dmc_docker_image() {

55 nix build nixpkgs.dmc-container \

56 --arg client-cert $1/client_cert.pem \

57 --arg client-key $1/client_key.pem \

58 -I nixpkgs=nix \

59 -o $2

60}

62build_dms_docker_image() {

63 nix build nixpkgs.dms-container \

64 --arg migrations $2 \

65 --arg server-cert $1/server_cert.pem \

66 --arg server-key $1/server_key.pem \

67 --arg passwd $1/passwd \

68 --arg ssh-config $1/ssh_config \

69 --arg ssh-known-hosts $1/ssh_known_hosts \

70 --arg deploy-key $1/deploy.key \

71 -I nixpkgs=nix \

72 -o $3

73}

75push_docker_images() {

76 outfile=latest-dms-docker

77 for image_name in $dmc_docker $dms_docker; do

78 image_type=`echo $image_name | cut -d- -f1`

79 image=`ls -ls $image_name | awk '{print $12}'`

80 echo "size: $(du -sh $image)"

81 docker load --input $image | tee $outfile

82 nixcontainer=`cat $outfile | awk '{print $3}'`

83 docker tag $nixcontainer 560065381221.dkr.ecr.us-east-1.amazonaws.com/${image_type}:${tag}

84 docker tag $nixcontainer 560065381221.dkr.ecr.us-east-1.amazonaws.com/${image_type}:latest

85 docker push 560065381221.dkr.ecr.us-east-1.amazonaws.com/${image_type}:${tag}

86 echo "Published: ${image_type}:${tag}"

87 done

88 docker push 560065381221.dkr.ecr.us-east-1.amazonaws.com/dmc:latest

89 docker push 560065381221.dkr.ecr.us-east-1.amazonaws.com/dms:latest

90 echo "Published: dmc:latest"

91 echo "Published: dms:latest"

92 rm $outfile

93}

95build_docker_images() {

96 build_configs $key

97 update_dependencies

98 build_dmc_docker_image $configs $dmc_docker

99 build_dms_docker_image $configs $migrations $dms_docker

100}

101

102cleanup() {

103 rm -r $configs

104 echo "'$configs' directory deleted"

105}

106

107export tag=$(git rev-parse HEAD)

108export migrations="./migrations"

109export dmc_docker="dmc-docker"

110export dms_docker="dms-docker"

111export cert_expiration=730

112

113case "$1" in

114 user)

115 echo "$1 mode"

116 export key="b2b-helm-repo-user-deploy-key"

117 export configs=`mktemp -d`

118 echo "using '$configs' directory"

119 aws_login

120 build_docker_images

121 push_docker_images

122 cleanup

123 ;;

124 ci)

125 echo "$1 mode"

126 export key="b2b-helm-repo-ci-deploy-key"

127 if [ -d "$2" ]; then

128 export configs="$2"

129 else

130 echo "cannot access '$2': No such directory"

131 exit 1

132 fi

133 echo "using '$configs' directory"

134 build_docker_images

135 ;;

136 *)

137 echo "usage: $0 <mode> [<work_dir>]"

138 echo "mode = user | ci"

139 exit 1

140 ;;

141esac