Compare commits
13 Commits
5be6455b3a
...
main
Author | SHA1 | Date | |
---|---|---|---|
f3571105e8 | |||
4312ac55fe | |||
1d9e7c912a | |||
f04226c147 | |||
c1dc3f3839 | |||
532ef878de | |||
c2f4b83102 | |||
74483e57f8 | |||
2f3c6b3c9c | |||
45a04c9c64 | |||
7fda505a97 | |||
baac570a15 | |||
29faf646ab |
@@ -10,10 +10,6 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
- name: Check out repository code
|
- name: Check out repository code
|
||||||
uses: actions/checkout@v3
|
uses: actions/checkout@v3
|
||||||
- name: Set up Node
|
|
||||||
uses: actions/setup-node@v3
|
|
||||||
with:
|
|
||||||
node-version: 20
|
|
||||||
- name: Install dependencies
|
- name: Install dependencies
|
||||||
run: |
|
run: |
|
||||||
npm install \
|
npm install \
|
||||||
@@ -33,8 +29,6 @@ jobs:
|
|||||||
--analyzeCommits @semantic-release/commit-analyzer \
|
--analyzeCommits @semantic-release/commit-analyzer \
|
||||||
--verifyRelease @semantic-release/exec \
|
--verifyRelease @semantic-release/exec \
|
||||||
--verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT'
|
--verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT'
|
||||||
env:
|
|
||||||
GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }}
|
|
||||||
- name: Assert semantic release output
|
- name: Assert semantic release output
|
||||||
run: |
|
run: |
|
||||||
[[ -z "${{ steps.sem_rel.outputs.version }}" ]] && {
|
[[ -z "${{ steps.sem_rel.outputs.version }}" ]] && {
|
||||||
@@ -45,19 +39,104 @@ jobs:
|
|||||||
|
|
||||||
build_image:
|
build_image:
|
||||||
name: Build image
|
name: Build image
|
||||||
|
container: code.spamasaurus.com/djpbessems/act-runner-extended:1.0.0-cth20250815
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs: semrel_dryrun
|
needs: semrel_dryrun
|
||||||
# container: ghcr.io/catthehacker/ubuntu:act-latest
|
|
||||||
steps:
|
steps:
|
||||||
- name: Check out repository code
|
- name: Check out repository code
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
- name: Print Hello
|
- name: Set up build container
|
||||||
run: echo "Hello from Harvester!"
|
run: |
|
||||||
|
apt-get update && \
|
||||||
|
apt-get install -y \
|
||||||
|
linux-image-generic \
|
||||||
|
linux-modules-extra-$(uname -r) \
|
||||||
|
linux-headers-generic
|
||||||
|
|
||||||
|
mkdir -p \
|
||||||
|
$PWD/ubuntu-vm \
|
||||||
|
/mnt/vmimage
|
||||||
|
- name: Retrieve source Ubuntu image
|
||||||
|
run: |
|
||||||
|
curl -L \
|
||||||
|
https://sn.itch.fyi/Repository/iso/Canonical/Ubuntu%20Server%2024.04/ubuntu-24.04-server-cloudimg-amd64.img \
|
||||||
|
-o ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img \
|
||||||
|
-u ${{ secrets.REPO_USERNAME }}:${{ secrets.REPO_PASSWORD }}
|
||||||
|
|
||||||
|
qemu-img resize ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img +5G
|
||||||
|
- name: Generate seed ISO
|
||||||
|
run: |
|
||||||
|
envsubst < cloud-init/user-data.template > cloud-init/user-data
|
||||||
|
|
||||||
|
genisoimage \
|
||||||
|
-output ubuntu-vm/seed.iso \
|
||||||
|
-volid cidata \
|
||||||
|
-joliet \
|
||||||
|
-rock \
|
||||||
|
cloud-init/meta-data cloud-init/user-data
|
||||||
|
env:
|
||||||
|
ROOT_HASHED_PASSWORD: ${{ secrets.VM_ROOT_HASHED_PASSWORD }}
|
||||||
|
PUBLIC_SSHKEY: ${{ secrets.VM_PUBLIC_SSHKEY }}
|
||||||
|
- name: Provision template virtual machine
|
||||||
|
run: |
|
||||||
|
[ -e /dev/kvm ] && kvm_flag="-enable-kvm" || kvm_flag=""
|
||||||
|
|
||||||
|
qemu-system-x86_64 \
|
||||||
|
$kvm_flag \
|
||||||
|
-m 3072 \
|
||||||
|
-smp 2 \
|
||||||
|
-cpu host \
|
||||||
|
-drive file=ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img,if=virtio,format=qcow2 \
|
||||||
|
-drive file=ubuntu-vm/seed.iso,format=raw,media=cdrom \
|
||||||
|
-nographic \
|
||||||
|
-net nic \
|
||||||
|
-net user \
|
||||||
|
-device virtio-serial-pci,id=virtio-serial0 \
|
||||||
|
-chardev socket,path=qga.sock,server=on,wait=off,id=qga0 \
|
||||||
|
-device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0
|
||||||
|
|
||||||
|
if ! guestfish --ro -a ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img -i stat /var/log/template-generation-success; then
|
||||||
|
echo "VM provisioning encountered errors - exiting"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
- name: Compress image file
|
||||||
|
run: |
|
||||||
|
virt-sparsify --compress \
|
||||||
|
ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img \
|
||||||
|
ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}-compacted.img
|
||||||
|
- name: Upload image file
|
||||||
|
run: |
|
||||||
|
REPO_TOKEN=$(curl -fsSL -X POST \
|
||||||
|
http://filebrowser.filebrowser.svc.cluster.local:80/api/login \
|
||||||
|
-H "Content-Type: application/json" \
|
||||||
|
-d '{"username": "admin", "password": "${{ secrets.REPO_PASSWORD }}"}' \
|
||||||
|
)
|
||||||
|
curl -fsSL -X POST \
|
||||||
|
http://filebrowser.filebrowser.svc.cluster.local:80/api/resources/rel/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img?override=true \
|
||||||
|
--header "X-Auth: $REPO_TOKEN" \
|
||||||
|
--upload-file "ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}-compacted.img"
|
||||||
|
|
||||||
|
curl -ksS -X PUT "https://lab-hv-vip.bessems.lan/v1/harvesterhci.io.virtualmachineimages" \
|
||||||
|
-H "Authorization: Bearer ${{ secrets.HV_TOKEN }}" \
|
||||||
|
-H "Content-Type: application/json" \
|
||||||
|
-d @- <<EOF
|
||||||
|
{
|
||||||
|
"type": "harvesterhci.io.virtualmachineimage",
|
||||||
|
"metadata": {
|
||||||
|
"namespace": "default"
|
||||||
|
},
|
||||||
|
"spec": {
|
||||||
|
"displayName": "ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}",
|
||||||
|
"sourceType": "download",
|
||||||
|
"url": "https://${{ secrets.REPO_USERNAME }}:${{ secrets.REPO_PASSWORD }}@sn.itch.fyi/Repository/rel/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
|
||||||
# semrel:
|
# semrel:
|
||||||
# name: Semantic Release
|
# name: Semantic Release
|
||||||
# runs-on: dind-rootless
|
# runs-on: ubuntu-latest
|
||||||
# needs: [build_container,build_chart]
|
# needs: build_image
|
||||||
# steps:
|
# steps:
|
||||||
# - name: Check out repository code
|
# - name: Check out repository code
|
||||||
# uses: actions/checkout@v3
|
# uses: actions/checkout@v3
|
||||||
|
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@@ -0,0 +1 @@
|
|||||||
|
.secrets
|
0
cloud-init/meta-data
Normal file
0
cloud-init/meta-data
Normal file
39
cloud-init/user-data.template
Normal file
39
cloud-init/user-data.template
Normal file
@@ -0,0 +1,39 @@
|
|||||||
|
#cloud-config
|
||||||
|
package_update: true
|
||||||
|
package_upgrade: true
|
||||||
|
snap:
|
||||||
|
commands:
|
||||||
|
00: snap refresh --hold=forever
|
||||||
|
package_reboot_if_required: true
|
||||||
|
packages:
|
||||||
|
- qemu-guest-agent
|
||||||
|
- yq
|
||||||
|
- cifs-utils
|
||||||
|
|
||||||
|
runcmd:
|
||||||
|
- apt-get install -y linux-modules-extra-$(uname -r)
|
||||||
|
- sed -i '/"${distro_id}:${distro_codename}-updates"/s|^//||' /etc/apt/apt.conf.d/50unattended-upgrades
|
||||||
|
- sysctl -w net.ipv6.conf.all.disable_ipv6=1
|
||||||
|
- systemctl enable --now qemu-guest-agent.service
|
||||||
|
- cloud-init clean --logs
|
||||||
|
- truncate -s 0 /etc/hostname /etc/machine-id
|
||||||
|
- rm -f /etc/ssh/ssh_host_* /var/lib/dbus/machine-id
|
||||||
|
- ln -s /etc/machine-id /var/lib/dbus/machine-id
|
||||||
|
- echo "TEMPLATE_GENERATION_SUCCESS" | tee /var/log/template-generation-success
|
||||||
|
- sync
|
||||||
|
|
||||||
|
disable_root: false
|
||||||
|
users:
|
||||||
|
- name: root
|
||||||
|
hashed_passwd: ${ROOT_HASHED_PASSWORD}
|
||||||
|
lock_passwd: false
|
||||||
|
shell: /bin/bash
|
||||||
|
ssh_authorized_keys:
|
||||||
|
- ${PUBLIC_SSHKEY}
|
||||||
|
ssh_authorized_keys:
|
||||||
|
- ${PUBLIC_SSHKEY}
|
||||||
|
|
||||||
|
power_state:
|
||||||
|
delay: now
|
||||||
|
mode: poweroff
|
||||||
|
condition: true
|
Reference in New Issue
Block a user