Compare commits
13 Commits
5be6455b3a
...
main
Author | SHA1 | Date | |
---|---|---|---|
f3571105e8 | |||
4312ac55fe | |||
1d9e7c912a | |||
f04226c147 | |||
c1dc3f3839 | |||
532ef878de | |||
c2f4b83102 | |||
74483e57f8 | |||
2f3c6b3c9c | |||
45a04c9c64 | |||
7fda505a97 | |||
baac570a15 | |||
29faf646ab |
@@ -10,10 +10,6 @@ jobs:
|
||||
steps:
|
||||
- name: Check out repository code
|
||||
uses: actions/checkout@v3
|
||||
- name: Set up Node
|
||||
uses: actions/setup-node@v3
|
||||
with:
|
||||
node-version: 20
|
||||
- name: Install dependencies
|
||||
run: |
|
||||
npm install \
|
||||
@@ -33,8 +29,6 @@ jobs:
|
||||
--analyzeCommits @semantic-release/commit-analyzer \
|
||||
--verifyRelease @semantic-release/exec \
|
||||
--verifyReleaseCmd 'echo "version=${nextRelease.version}" >> $GITHUB_OUTPUT'
|
||||
env:
|
||||
GIT_CREDENTIALS: ${{ secrets.GIT_USERNAME }}:${{ secrets.GIT_APIKEY }}
|
||||
- name: Assert semantic release output
|
||||
run: |
|
||||
[[ -z "${{ steps.sem_rel.outputs.version }}" ]] && {
|
||||
@@ -45,19 +39,104 @@ jobs:
|
||||
|
||||
build_image:
|
||||
name: Build image
|
||||
container: code.spamasaurus.com/djpbessems/act-runner-extended:1.0.0-cth20250815
|
||||
runs-on: ubuntu-latest
|
||||
needs: semrel_dryrun
|
||||
# container: ghcr.io/catthehacker/ubuntu:act-latest
|
||||
steps:
|
||||
- name: Check out repository code
|
||||
uses: actions/checkout@v4
|
||||
- name: Print Hello
|
||||
run: echo "Hello from Harvester!"
|
||||
- name: Set up build container
|
||||
run: |
|
||||
apt-get update && \
|
||||
apt-get install -y \
|
||||
linux-image-generic \
|
||||
linux-modules-extra-$(uname -r) \
|
||||
linux-headers-generic
|
||||
|
||||
mkdir -p \
|
||||
$PWD/ubuntu-vm \
|
||||
/mnt/vmimage
|
||||
- name: Retrieve source Ubuntu image
|
||||
run: |
|
||||
curl -L \
|
||||
https://sn.itch.fyi/Repository/iso/Canonical/Ubuntu%20Server%2024.04/ubuntu-24.04-server-cloudimg-amd64.img \
|
||||
-o ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img \
|
||||
-u ${{ secrets.REPO_USERNAME }}:${{ secrets.REPO_PASSWORD }}
|
||||
|
||||
qemu-img resize ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img +5G
|
||||
- name: Generate seed ISO
|
||||
run: |
|
||||
envsubst < cloud-init/user-data.template > cloud-init/user-data
|
||||
|
||||
genisoimage \
|
||||
-output ubuntu-vm/seed.iso \
|
||||
-volid cidata \
|
||||
-joliet \
|
||||
-rock \
|
||||
cloud-init/meta-data cloud-init/user-data
|
||||
env:
|
||||
ROOT_HASHED_PASSWORD: ${{ secrets.VM_ROOT_HASHED_PASSWORD }}
|
||||
PUBLIC_SSHKEY: ${{ secrets.VM_PUBLIC_SSHKEY }}
|
||||
- name: Provision template virtual machine
|
||||
run: |
|
||||
[ -e /dev/kvm ] && kvm_flag="-enable-kvm" || kvm_flag=""
|
||||
|
||||
qemu-system-x86_64 \
|
||||
$kvm_flag \
|
||||
-m 3072 \
|
||||
-smp 2 \
|
||||
-cpu host \
|
||||
-drive file=ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img,if=virtio,format=qcow2 \
|
||||
-drive file=ubuntu-vm/seed.iso,format=raw,media=cdrom \
|
||||
-nographic \
|
||||
-net nic \
|
||||
-net user \
|
||||
-device virtio-serial-pci,id=virtio-serial0 \
|
||||
-chardev socket,path=qga.sock,server=on,wait=off,id=qga0 \
|
||||
-device virtserialport,chardev=qga0,name=org.qemu.guest_agent.0
|
||||
|
||||
if ! guestfish --ro -a ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img -i stat /var/log/template-generation-success; then
|
||||
echo "VM provisioning encountered errors - exiting"
|
||||
exit 1
|
||||
fi
|
||||
- name: Compress image file
|
||||
run: |
|
||||
virt-sparsify --compress \
|
||||
ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img \
|
||||
ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}-compacted.img
|
||||
- name: Upload image file
|
||||
run: |
|
||||
REPO_TOKEN=$(curl -fsSL -X POST \
|
||||
http://filebrowser.filebrowser.svc.cluster.local:80/api/login \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{"username": "admin", "password": "${{ secrets.REPO_PASSWORD }}"}' \
|
||||
)
|
||||
curl -fsSL -X POST \
|
||||
http://filebrowser.filebrowser.svc.cluster.local:80/api/resources/rel/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img?override=true \
|
||||
--header "X-Auth: $REPO_TOKEN" \
|
||||
--upload-file "ubuntu-vm/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}-compacted.img"
|
||||
|
||||
curl -ksS -X PUT "https://lab-hv-vip.bessems.lan/v1/harvesterhci.io.virtualmachineimages" \
|
||||
-H "Authorization: Bearer ${{ secrets.HV_TOKEN }}" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d @- <<EOF
|
||||
{
|
||||
"type": "harvesterhci.io.virtualmachineimage",
|
||||
"metadata": {
|
||||
"namespace": "default"
|
||||
},
|
||||
"spec": {
|
||||
"displayName": "ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}",
|
||||
"sourceType": "download",
|
||||
"url": "https://${{ secrets.REPO_USERNAME }}:${{ secrets.REPO_PASSWORD }}@sn.itch.fyi/Repository/rel/ubuntu-24.04.2-rke2-v${{ needs.semrel_dryrun.outputs.version }}.img"
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
# semrel:
|
||||
# name: Semantic Release
|
||||
# runs-on: dind-rootless
|
||||
# needs: [build_container,build_chart]
|
||||
# runs-on: ubuntu-latest
|
||||
# needs: build_image
|
||||
# steps:
|
||||
# - name: Check out repository code
|
||||
# uses: actions/checkout@v3
|
||||
|
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@@ -0,0 +1 @@
|
||||
.secrets
|
0
cloud-init/meta-data
Normal file
0
cloud-init/meta-data
Normal file
39
cloud-init/user-data.template
Normal file
39
cloud-init/user-data.template
Normal file
@@ -0,0 +1,39 @@
|
||||
#cloud-config
|
||||
package_update: true
|
||||
package_upgrade: true
|
||||
snap:
|
||||
commands:
|
||||
00: snap refresh --hold=forever
|
||||
package_reboot_if_required: true
|
||||
packages:
|
||||
- qemu-guest-agent
|
||||
- yq
|
||||
- cifs-utils
|
||||
|
||||
runcmd:
|
||||
- apt-get install -y linux-modules-extra-$(uname -r)
|
||||
- sed -i '/"${distro_id}:${distro_codename}-updates"/s|^//||' /etc/apt/apt.conf.d/50unattended-upgrades
|
||||
- sysctl -w net.ipv6.conf.all.disable_ipv6=1
|
||||
- systemctl enable --now qemu-guest-agent.service
|
||||
- cloud-init clean --logs
|
||||
- truncate -s 0 /etc/hostname /etc/machine-id
|
||||
- rm -f /etc/ssh/ssh_host_* /var/lib/dbus/machine-id
|
||||
- ln -s /etc/machine-id /var/lib/dbus/machine-id
|
||||
- echo "TEMPLATE_GENERATION_SUCCESS" | tee /var/log/template-generation-success
|
||||
- sync
|
||||
|
||||
disable_root: false
|
||||
users:
|
||||
- name: root
|
||||
hashed_passwd: ${ROOT_HASHED_PASSWORD}
|
||||
lock_passwd: false
|
||||
shell: /bin/bash
|
||||
ssh_authorized_keys:
|
||||
- ${PUBLIC_SSHKEY}
|
||||
ssh_authorized_keys:
|
||||
- ${PUBLIC_SSHKEY}
|
||||
|
||||
power_state:
|
||||
delay: now
|
||||
mode: poweroff
|
||||
condition: true
|
Reference in New Issue
Block a user